feat(landing): beta "coming soon" CTAs + team credits & SEO

The app is in active development, not yet public — replace the "Launch app"
CTAs with a "Private beta — coming soon" state (nav, hero, and final CTA).

Add a "Built by" section crediting the team, each name linking to their
LinkedIn, plus JSON-LD SoftwareApplication + Person author markup, an author
meta tag, and a canonical link for name/entity SEO.

Team: Karti Tripathi, Ramis Hasanli, Yahya Alhinai, Shakthi Bachala.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

.env.example

@@ -11,6 +11,7 @@ GEMINI_API_KEY=
 # canonical deployment secret name used by DigitalOcean and docs.
 GEMINI_VISION_MODEL=gemini-2.0-flash
 GEMINI_LIVE_MODEL=gemini-3.1-flash-tts-preview
+GEMINI_TTS_VOICE=Charon
 GEMINI_EMBEDDING_MODEL=gemini-embedding-001
 
 # --- GitHub (repo state + sync PR artifacts) ---
@@ -25,13 +26,18 @@ VOYAGE_EMBEDDING_MODEL=voyage-4-lite
 # --- Backend server ---
 PORT=8787
 POD_ROOM=demo-pod
+CLERK_SECRET_KEY=
 
 # --- Nudge cooldown (ms) — set to 0 during demo if needed ---
 NUDGE_COOLDOWN_MS=180000
+RESEARCH_OVERLAP_THRESHOLD=0.6
 
 # --- Frontend (Vite — must be VITE_ prefixed to reach the client) ---
 VITE_LIVEKIT_URL=wss://your-project.livekit.cloud
 VITE_BACKEND_URL=http://localhost:8787
+VITE_CLERK_PUBLISHABLE_KEY=
+# Keep off by default so users hear Gemini audio delivered through LiveKit.
+VITE_ENABLE_BROWSER_TTS_FALLBACK=false
 
 # --- Deployment verification ---
 # Optional override when the deployed SPA and API use different origins.

.gitignore

@@ -35,8 +35,11 @@ Thumbs.db
 coverage/
 .cache/
 .turbo/
+__pycache__/
+*.py[cod]
 
 # Ramis
 .remember/
 .claude/
+.hermes/
 .playwright-mcp/

.npmrc

@@ -1,3 +1,4 @@
 link-workspace-packages=true
 prefer-workspace-packages=true
 auto-install-peers=true
+prefix=/home/ramis/.npm-global

.prettierignore

@@ -1,7 +1,12 @@
 node_modules
+.venv
+**/.venv
+.pytest_cache
+**/.pytest_cache
 dist
 build
 pnpm-lock.yaml
 .omc
 *.log
 .agents
+examples/livekit-gemini-hacker-starter

CLAUDE.md

@@ -318,30 +318,31 @@ Everything should serve that outcome.
 
 ## Documentation-first enforcement — HARD RULE
 
-**Every line of code must trace back to a task in `docs/PLAN.md` or a spec in `docs/`.**
+**Every line of code must trace back to a spec in `docs/`.**
 
-This is not a guideline. This is a gate.
+This is not a guideline. This is a gate. The canonical specs are
+`docs/gemini.md`, `docs/livekit.md`, `docs/mongodb.md`, `docs/cont_learning.md`,
+`docs/hermes.md`, and `docs/digitalocean.md`. `docs/demo.md` is the demo script.
 
 ### Before writing any code, verify:
 
-1. **Is this task in `docs/PLAN.md`?** Find the exact task number. If it's not there, stop.
-2. **Is the approach consistent with the relevant spec?** Check `docs/gemini.md`, `docs/livekit.md`, `docs/mongodb.md`, `docs/digitalocean.md` as applicable.
-3. **Do the file names and API shapes match what's documented?** If the plan says `backend/src/db/states.ts`, do not create `backend/src/database/engineStates.ts` without updating the spec first.
+1. **Is the approach consistent with the relevant spec?** Check `docs/gemini.md`, `docs/livekit.md`, `docs/mongodb.md`, `docs/cont_learning.md`, `docs/hermes.md`, `docs/digitalocean.md` as applicable.
+2. **Do the file names and API shapes match what's documented?** If a spec says `backend/src/memory/store.ts`, do not create `backend/src/database/engineStates.ts` without updating the spec first.
 
-### If a developer asks for something not in the plan:
+### If a developer asks for something not in the specs:
 
 **Do not write the code.** Instead:
 
-1. Say explicitly: _"This isn't in the current plan. Let me understand what you're trying to do."_
+1. Say explicitly: _"This isn't in the current specs. Let me understand what you're trying to do."_
 2. Ask what problem they're solving and whether it's required for the demo path.
-3. Evaluate whether it fits within scope or replaces something planned.
-4. If it's valid: **update `docs/PLAN.md` and the relevant spec first**, then proceed to code.
-5. If it's scope creep: say so directly and recommend the nearest in-plan alternative.
+3. Evaluate whether it fits within scope or replaces something documented.
+4. If it's valid: **update the relevant spec first**, then proceed to code.
+5. If it's scope creep: say so directly and recommend the nearest in-spec alternative.
 
-### Signs a request is off-plan (stop and consult):
+### Signs a request is off-spec (stop and consult):
 
-- Introducing a new file not mentioned in any task's **Files** list
-- Changing an API signature documented in a spec (`/ingest`, `/health`, `/pods/:podId/token`, `/pods/:podId/state`)
+- Introducing a new file or API route not described in any spec
+- Changing a documented API signature (`/health`, `POST /api/token`, `POST /api/outcome`, `GET /api/pods/:id/...`)
 - Adding a dependency not in the existing `package.json` files without a clear spec reason
 - Building a feature in the **Cut immediately** list
 - Touching another engineer's ownership area without explicit cross-team coordination
@@ -359,7 +360,68 @@ This repo is actively used by **4 engineers at the same time**. Claude sessions
 ### What this means for how you help
 
 - **Assume other files are actively being edited.** Never refactor code outside the immediate task scope without explicit coordination from the user.
-- **Treat integration points as contracts.** The shared types in `shared/src/` and the API shapes of `POST /ingest`, `GET /pods/:podId/token`, and `GET /pods/:podId/state` are the interfaces between all teammates — do not change their signatures unilaterally.
+- **Treat integration points as contracts.** The shared types in `shared/src/` and the API shapes of `POST /api/token`, `POST /api/outcome`, and the `GET /api/pods/:id/*` routes are the interfaces between all teammates — do not change their signatures unilaterally.
 - **Flag merge risk explicitly** before editing a shared file (e.g., `backend/src/index.ts`, `frontend/src/App.tsx`). Say so, then proceed only if the user confirms.
 - **Prefer additive changes** — new files, new functions — over modifying existing ones. This minimizes merge conflicts in a concurrent team.
-- **When proposing new files**, verify they match the file names listed in the relevant task in `docs/PLAN.md`. Do not invent new paths.
+- **When proposing new files**, verify they match the file names and paths described in the relevant spec in `docs/`. Do not invent new paths.
+
+### Git workflow — push directly to `main`, stay in sync
+
+This repo **does not use feature branches**. Commit straight to `main` and push.
+There is no branch-first step. Because several people push concurrently:
+
+- **Always sync before pushing:** `git pull --rebase origin main` immediately
+  before `git push`. Never force-push `main`.
+- **Keep commits small and additive** so rebases stay clean — prefer new files
+  and new functions over editing shared hot files (`backend/src/agent/podman.ts`,
+  `backend/src/server.ts`, `frontend/src/App.tsx`).
+- **If a rebase conflicts**, resolve it locally and re-run the pull-rebase before
+  pushing; do not overwrite a teammate's commit.
+- Commit/push only when the user asks (overrides any default branch-first habit).
+
+---
+
+## Production deployment & ops — READ BEFORE TOUCHING THE SERVER
+
+The live system runs on a DigitalOcean droplet at `165.22.129.249`
+(public: `https://165-22-129-249.sslip.io/` and `podman.live`). Repo on box:
+`/root/podman`. SSH is `root@165.22.129.249` (password auth; ask the team for
+the password — it is **not** stored in the repo).
+
+### HARD RULE: manage processes with systemd, never manual `node`
+
+The backend API and the LiveKit agent run as **systemd services** with
+`Restart=always`:
+
+- `podman-platform-api.service` → `node backend/dist/server.js` (cwd `/root/podman`)
+- `podman-platform-agent.service` → `node dist/agent.js` (cwd `/root/podman/backend`,
+  `Environment=POD_ROOM=demo-pod`, `EnvironmentFile=/root/podman/backend/.env`)
+
+**Do not start the agent or server by hand** (`node ...`, `nohup`, `setsid`,
+`tsx`). The agent joins LiveKit with a fixed identity (`podman-hermes`); a
+second instance with the same identity **evicts the first from the room**, and
+they flap forever — silently dropping every intervention/voice update. systemd
+keeps exactly one of each alive. If you launched a manual process, kill it and
+let systemd own the singleton.
+
+### Frontend is static, served by Caddy
+
+The frontend is a Vite build served by **Caddy** from `/var/www/podman`
+(`/etc/caddy/Caddyfile`). Caddy reverse-proxies `/api/*` and `/health` to
+`127.0.0.1:8787`. The LiveKit URL reaches the browser via the backend
+`/api/token` response, **not** `VITE_LIVEKIT_URL` (intentionally empty in
+`frontend/.env`).
+
+### Deploy procedure (run on the box)
+
+```bash
+cd /root/podman && git pull && pnpm -r build
+rm -rf /var/www/podman/* && cp -r frontend/dist/* /var/www/podman/
+systemctl restart podman-platform-api podman-platform-agent
+systemctl status podman-platform-agent --no-pager   # verify it came up
+```
+
+`pnpm -r build` order matters: `@podman/shared` builds first, or backend/frontend
+typecheck fails with "Cannot find module '@podman/shared'". MongoDB is
+**mandatory** — both services ping Mongo at boot and exit loudly if it is
+unreachable (intentional; fix the `.env` creds, do not re-add silent fallbacks).

README.md

@@ -1,90 +1,384 @@
-# PodMan - Real-time AI Team Coordination Agent
+# PodMan
 
-[![TypeScript](https://img.shields.io/badge/TypeScript-6.x-3178C6?logo=typescript&logoColor=white)](https://www.typescriptlang.org/)
-[![React](https://img.shields.io/badge/React-19-61DAFB?logo=react&logoColor=111)](https://react.dev/)
-[![LiveKit](https://img.shields.io/badge/LiveKit-realtime-000000?logo=livekit&logoColor=white)](https://livekit.io/)
-[![MongoDB](https://img.shields.io/badge/MongoDB-memory-47A248?logo=mongodb&logoColor=white)](https://www.mongodb.com/)
-[![Gemini](https://img.shields.io/badge/Gemini-vision-8E75B2?logo=googlegemini&logoColor=white)](https://ai.google.dev/)
-[![DigitalOcean](https://img.shields.io/badge/DigitalOcean-deploy-0080FF?logo=digitalocean&logoColor=white)](https://www.digitalocean.com/)
+**An ambient pair programmer for engineering teams.**
 
-**2026 AI Engineer World's Fair Hackathon** - Track: **Continual Learning**
+PodMan watches the work happening inside a shared LiveKit room, understands what
+each engineer is doing, remembers which interventions helped, and nudges the
+team before duplicated work, merge collisions, or missed handoffs slow everyone
+down.
 
-PodMan is a non-intrusive AI teammate for active coding. It watches consented
-LiveKit screen-share context, combines it with local git truth and shared team
-memory, and coordinates teammates before a problem becomes a GitHub problem.
+<p align="center">
+  <a href="https://podman.live/">
+    <img
+      alt="Try PodMan live in production"
+      src="https://img.shields.io/badge/TRY%20PODMAN%20LIVE-https%3A%2F%2Fpodman.live-1f6feb?style=for-the-badge"
+    />
+  </a>
+</p>
 
-> GitHub sees pushed work. PodMan sees work while it is still happening.
+<h2 align="center">
+  <a href="https://podman.live/">Open the live production app: https://podman.live/</a>
+</h2>
 
-PodMan is not a dashboard and not a raw screenshot analyzer. Its job is to
-notice useful coordination moments, remember what helped before, and route the
-least intrusive intervention: a small card first, a Hermes message when teammates
-need coordination, and voice only for urgent escalation.
+<p align="center">
+  PodMan is already deployed. Click the link above and try the production app.
+</p>
 
----
+<h2 align="center">
+  <a href="https://youtu.be/bWJIsIWTgr0">Watch the demo video</a>
+</h2>
 
-## Architecture
+<p align="center">
+  <a href="https://youtu.be/bWJIsIWTgr0">
+    <img
+      src="https://img.youtube.com/vi/bWJIsIWTgr0/maxresdefault.jpg"
+      alt="PodMan demo video thumbnail"
+      width="760"
+    />
+  </a>
+</p>
 
-PodMan is split into a browser PWA, an HTTP API service, a LiveKit agent worker,
-and a persistence/action layer. The screen signal flows through LiveKit, not a
-manual screenshot upload endpoint.
+[LiveKit](https://livekit.io/) · [MongoDB](https://www.mongodb.com/) ·
+[Gemini](https://ai.google.dev/) · [Hermes](https://hermes-agent.nousresearch.com/) ·
+[Modular MAX](https://www.modular.com/max) ·
+[DigitalOcean](https://www.digitalocean.com/)
+
+<p align="center">
+  <img
+    src="docs/assets/interruption-flow-recovery.jpg"
+    alt="A chart showing that a five minute interruption can create a much longer recovery period before a developer returns to flow state."
+    width="760"
+  />
+</p>
+
+> PodMan exists to prevent the five-minute interruption from becoming a
+> half-hour recovery tax.
+
+Source image: `~/pic.jpg`, committed as
+`docs/assets/interruption-flow-recovery.jpg` so it renders on GitHub.
+
+## Read This First
+
+| Need                    | Use this                                                                                      |
+| ----------------------- | --------------------------------------------------------------------------------------------- |
+| Open the product        | `https://podman.live`                                                                         |
+| Check the app           | `curl https://podman.live/health`                                                             |
+| Check pods and memory   | `curl https://podman.live/api/pods && curl https://podman.live/api/memory/stats`              |
+| Use the LLM externally  | Base URL `https://llm.alhinai.dev/v1`, model `gemma-4-31B-it`                                 |
+| Test Hermes             | `hermes -z 'Reply with exactly: working' --provider gemma4-31b-max --model gemma-4-31B-it`    |
+| Start local development | API, vision agent, and frontend commands are in [Local Development](#local-development)       |
+| Debug production        | Public checks first, then systemd services in [Production Operations](#production-operations) |
+
+## Hackathon Fit
+
+PodMan is built for the **2026 AI Engineer World's Fair Hackathon** theme:
+**Continual Learning**.
+
+It is not a wrapper chatbot or static dashboard. It is a production-running
+agentic coordination system that gets better from real use: every observation,
+collision, intervention, accept, dismiss, suppression, and conversation note
+feeds MongoDB-backed memory so future interventions become sharper and less
+annoying.
+
+| Hackathon target       | How PodMan addresses it                                                                  |
+| ---------------------- | ---------------------------------------------------------------------------------------- |
+| Continual Learning     | Learns from real team behavior and accepted/dismissed interventions.                     |
+| Self-Improvement Stack | Uses memory stats, Hermes jobs, production watchdogs, and deployment checks.             |
+| Recursive Intelligence | Gives agents operational memory and feedback loops for improving future coordination.    |
+| Live Demo              | Already deployed at [`https://podman.live/`](https://podman.live/).                      |
+| Technicality           | Combines realtime media, vision, vector recall, graph traversal, memory, and ops agents. |
+| Creativity             | Solves the coordination cost around AI-assisted engineering teams.                       |
+
+### Sponsor Tech Used
+
+| Sponsor / tech | Usage in PodMan                                                                  |
+| -------------- | -------------------------------------------------------------------------------- |
+| DigitalOcean   | Hosts the production app, API, workers, Caddy, and systemd-supervised services.  |
+| LiveKit        | Realtime room layer for screen share, audio, data messages, and agent presence.  |
+| Gemini         | Screen understanding, live room conversation, urgent TTS, embeddings, and music. |
+| MongoDB Atlas  | Durable memory, `$vectorSearch`, `$graphLookup`, user learning, and job logs.    |
+| Modular MAX    | Serves `gemma-4-31B-it` as the long-context reasoning model.                     |
+
+### What To Try
 
 ```mermaid
 flowchart LR
-  subgraph Laptop["Engineer laptop"]
-    PWA["React PWA"]
-    Screen["Screen share track"]
-    Git["Git watcher<br/>scripts/podman-agent.mjs"]
-  end
+  A["Open podman.live"] --> B["Join a pod"]
+  B --> C["Share screen via LiveKit"]
+  C --> D["Gemini extracts work context"]
+  D --> E["MongoDB recalls prior outcomes"]
+  E --> F["PodMan nudges only when useful"]
+  F --> G["Accept or dismiss"]
+  G --> H["Memory improves next run"]
 
-  subgraph Realtime["LiveKit room"]
-    Room["Pod room"]
-    Data["Data topic<br/>podman.intervention"]
-  end
-
-  subgraph Backend["PodMan backend"]
-    API["API service<br/>/api/token /api/pods /api/outcome"]
-    Agent["Agent worker<br/>@livekit/rtc-node"]
-    Vision["Gemini Vision<br/>structured JSON"]
-    Detector["Coordination detector<br/>collisions, blockers, dead ends"]
-  end
-
-  subgraph Memory["Memory and actions"]
-    Mongo["MongoDB<br/>observations, outcomes, pods"]
-    GitHub["GitHub<br/>repo state + sync PR artifact"]
-    Hermes["Hermes action layer<br/>cards, messages, urgent voice"]
-  end
-
-  PWA -->|"POST /api/token"| API
-  API -->|"LiveKit JWT"| PWA
-  PWA --> Screen
-  Screen --> Room
-  Room --> Agent
-  Agent --> Vision
-  Vision --> Detector
-  Git --> Mongo
-  Detector --> Mongo
-  Detector --> GitHub
-  Detector --> Hermes
-  Hermes --> Data
-  Data --> PWA
-  PWA -->|"POST /api/outcome"| API
-  API --> Mongo
+  classDef action fill:#e8f1ff,stroke:#3366cc,color:#0b1f44;
+  classDef ai fill:#f4edff,stroke:#805ad5,color:#2d1857;
+  classDef memory fill:#fff6df,stroke:#c47f00,color:#3d2b00;
+  class A,B,C,F,G action;
+  class D ai;
+  class E,H memory;
 ```
 
-### Runtime shape
+1. Open [`https://podman.live/`](https://podman.live/).
+2. Create or join a pod.
+3. Add teammates and share screens.
+4. Watch PodMan build live context, detect overlap, and surface intervention
+   cards.
+5. Accept or dismiss a card; that feedback becomes memory for the next similar
+   event.
 
-| Layer        | Runtime             | Responsibility                                                                                      |
-| ------------ | ------------------- | --------------------------------------------------------------------------------------------------- |
-| Frontend PWA | React + Vite        | Join pods, publish screen share, show live room state, render interventions                         |
-| Backend API  | Express             | Mint LiveKit tokens, manage pods, record outcomes, expose memory stats, create sync PR artifacts    |
-| Agent worker | `@livekit/rtc-node` | Join the room as PodMan, subscribe to screen-share tracks, sample frames, publish intervention data |
-| Vision loop  | Gemini              | Convert sampled IDE frames into structured work context                                             |
-| Team memory  | MongoDB             | Store observations, collisions, interventions, outcomes, pods, and git watcher state                |
-| Git watcher  | Node script         | Poll each laptop's local git state so dirty/unpushed work is not guessed from vision alone          |
-| Action layer | Hermes concept      | Route cards, teammate messages, optional research summaries, and urgent voice escalation            |
-| Deployment   | DigitalOcean        | Static site for frontend, HTTP service for API, worker for the LiveKit agent                        |
+---
 
-### Data flow
+## Current Live System
+
+| Surface       | Running now                  | Purpose                                |
+| ------------- | ---------------------------- | -------------------------------------- |
+| Product       | `https://podman.live`        | Team room, screen context, cards       |
+| API           | `https://podman.live/api/*`  | Pods, tokens, outcomes, memory         |
+| Health        | `https://podman.live/health` | Backend readiness                      |
+| Local API     | `127.0.0.1:8787`             | Express service behind Caddy           |
+| Reasoning LLM | `https://llm.alhinai.dev/v1` | OpenAI-compatible Modular/MAX endpoint |
+| API key       | `not-needed`                 | Placeholder key for OpenAI clients     |
+| Hermes model  | `gemma-4-31B-it`             | 262K-context tool-using agent          |
+| Hermes config | `gemma4-31b-max`             | Custom provider used by Hermes locally |
+
+```mermaid
+flowchart TB
+  Browser["Engineer Browser<br/>React + Vite PWA"]
+  Room["LiveKit Room<br/>screen share + audio + data messages"]
+
+  subgraph Droplet["DigitalOcean PodMan Droplet"]
+    Caddy["Caddy<br/>static app + /api proxy"]
+    API["Express API<br/>127.0.0.1:8787"]
+    Vision["Vision Agent<br/>screen frame observer"]
+    Voice["Live Conversation Agent<br/>Python + Gemini Live"]
+    Ops["Hermes Ops Timers<br/>watchdog + sync deploy"]
+  end
+
+  subgraph Memory["MongoDB Atlas"]
+    Observations["observations"]
+    State["engineer_states"]
+    Outcomes["interventions + outcomes"]
+  end
+
+  subgraph Google["Google Gemini APIs"]
+    GeminiVision["Vision"]
+    GeminiVoice["Live voice + TTS"]
+    GeminiEmbed["Embeddings fallback"]
+    Lyria["Music"]
+  end
+
+  subgraph Reasoning["External Reasoning Endpoint"]
+    Tunnel["Cloudflare Tunnel<br/>llm.alhinai.dev"]
+    MaxServe["MAX OpenAI Server<br/>gemma-4-31B-it<br/>262144 context"]
+    Hermes["Hermes Agent<br/>provider: gemma4-31b-max"]
+  end
+
+  Browser --> Caddy --> API
+  Browser <-->|screen, audio, cards| Room
+  API --> Room
+  API --> Observations
+  API --> State
+  API --> Outcomes
+  Vision <-->|screen tracks| Room
+  Vision --> GeminiVision
+  Vision --> Observations
+  Vision --> Outcomes
+  Voice <-->|conversation| Room
+  Voice --> GeminiVoice
+  Vision --> GeminiEmbed
+  Voice --> GeminiEmbed
+  Ops --> Hermes --> Tunnel --> MaxServe
+  Tunnel -. "public route<br/>llm.alhinai.dev/v1" .-> MaxServe
+  API --> Hermes
+  Lyria --> Voice
+
+  classDef user fill:#e8f1ff,stroke:#3366cc,color:#0b1f44;
+  classDef app fill:#eef8ee,stroke:#2f8a3a,color:#123915;
+  classDef data fill:#fff6df,stroke:#c47f00,color:#3d2b00;
+  classDef ai fill:#f4edff,stroke:#805ad5,color:#2d1857;
+  class Browser,Room user;
+  class Caddy,API,Vision,Voice,Ops app;
+  class Observations,State,Outcomes data;
+  class GeminiVision,GeminiVoice,GeminiEmbed,Lyria,Tunnel,MaxServe,Hermes ai;
+```
+
+## What It Does
+
+```mermaid
+flowchart LR
+  A["Engineer shares screen"] --> B["Gemini extracts work context"]
+  B --> C["PodMan detects overlap<br/>files, symbols, research, unpushed work"]
+  C --> D["MongoDB recalls<br/>similar prior events"]
+  D --> E{"Policy gate"}
+  E -->|"seen false alarm"| F["stay quiet"]
+  E -->|"seen real collision"| G["raise urgency"]
+  E -->|"new useful signal"| H["show card or message"]
+  G --> I["Hermes / voice escalation"]
+  H --> J["teammate accepts or dismisses"]
+  I --> J
+  J --> K["outcome becomes future memory"]
+  K --> D
+```
+
+PodMan removes the reason to interrupt. It gives the team a live picture of work
+in progress, then improves from every accepted or dismissed intervention.
+
+> GitHub sees pushed work. PodMan sees work while it is still happening.
+
+---
+
+## The Model Stack
+
+PodMan uses multiple AI surfaces. They are intentionally split by job.
+
+```mermaid
+flowchart LR
+  Work["Screen + room activity"] --> VisionRoute["Perception route"]
+  VoiceInput["Engineer speech"] --> ConversationRoute["Conversation route"]
+  OpsNeed["Ops / autonomous task"] --> HermesRoute["Reasoning route"]
+  MemoryNeed["Similarity search"] --> EmbedRoute["Memory route"]
+  Ambient["Session atmosphere"] --> MusicRoute["Audio route"]
+
+  VisionRoute --> Gemini20["gemini-2.0-flash<br/>screen understanding"]
+  ConversationRoute --> GeminiLive["gemini-3.1-flash-live-preview<br/>live Q&A"]
+  ConversationRoute --> GeminiTTS["gemini-3.1-flash-tts-preview<br/>urgent speech"]
+  HermesRoute --> Gemma["gemma-4-31B-it<br/>served by Modular MAX"]
+  EmbedRoute --> Voyage["voyage-4-lite<br/>primary embeddings"]
+  EmbedRoute --> GeminiEmbed["gemini-embedding-001<br/>fallback embeddings"]
+  MusicRoute --> Lyria["lyria-3-clip-preview<br/>background music"]
+
+  classDef signal fill:#e8f1ff,stroke:#3366cc,color:#0b1f44;
+  classDef route fill:#eef8ee,stroke:#2f8a3a,color:#123915;
+  classDef model fill:#f4edff,stroke:#805ad5,color:#2d1857;
+  class Work,VoiceInput,OpsNeed,MemoryNeed,Ambient signal;
+  class VisionRoute,ConversationRoute,HermesRoute,EmbedRoute,MusicRoute route;
+  class Gemini20,GeminiLive,GeminiTTS,Gemma,Voyage,GeminiEmbed,Lyria model;
+```
+
+### Gemma 4 31B via Modular MAX
+
+Hermes uses the external OpenAI-compatible endpoint:
+
+```text
+Base URL: https://llm.alhinai.dev/v1
+API key: not-needed
+Model: gemma-4-31B-it
+Context: 262144 tokens
+```
+
+The Modular/MAX server is configured for long-context Gemma 4 serving:
+
+```text
+--max-length 262144
+--device-memory-utilization 0.85
+--kv-cache-format float8_e4m3fn
+--enable-prefix-caching
+--enable-chunked-prefill
+--max-batch-size 1
+--max-batch-input-tokens 16384
+```
+
+Hermes should point at that endpoint with this provider shape:
+
+```yaml
+model:
+  default: gemma-4-31B-it
+  provider: gemma4-31b-max
+
+providers:
+  gemma4-31b-max:
+    name: Gemma 4 31B Modular MAX (256K)
+    api: https://llm.alhinai.dev/v1
+    api_key: not-needed
+    transport: chat_completions
+    default_model: gemma-4-31B-it
+    discover_models: true
+    models:
+      gemma-4-31B-it:
+        context_length: 262144
+
+agent:
+  tool_use_enforcement: auto
+```
+
+Why this matters: Hermes sends OpenAI tool schemas and `tool_choice: "auto"`.
+The model endpoint must support automatic tool choice so Hermes can initialize
+the agent without a client-side workaround.
+
+### Modular MAX
+
+Gemma 4 is served through Modular MAX on the GB10 machine.
+
+| MAX support  | Value                                    |
+| ------------ | ---------------------------------------- |
+| Architecture | `Gemma4ForConditionalGeneration`         |
+| Example      | `google/gemma-4-31B-it`                  |
+| Encodings    | `float4_e2m1fnx2`, `float16`, `bfloat16` |
+
+| Runtime           | Role                                      |
+| ----------------- | ----------------------------------------- |
+| Modular MAX       | OpenAI-compatible Gemma 4 serving runtime |
+| `gemma-4-31B-it`  | Primary long-context reasoning model      |
+| `262144` tokens   | Reported model context window             |
+| `llm.alhinai.dev` | Public Cloudflare-routed model endpoint   |
+
+### Gemini Surfaces
+
+Gemini remains the realtime perception and voice layer inside PodMan.
+
+| Use                        | Model                           | Code                                       |
+| -------------------------- | ------------------------------- | ------------------------------------------ |
+| Screen understanding       | `gemini-2.0-flash`              | `backend/src/vision/gemini.ts`             |
+| Urgent spoken alerts       | `gemini-3.1-flash-tts-preview`  | `backend/src/voice/live.ts`                |
+| Live room conversation     | `gemini-3.1-flash-live-preview` | `agents/podman-live-conversation/agent.py` |
+| Memory embeddings fallback | `gemini-embedding-001`          | `backend/src/memory/vectors.ts`            |
+| Ambient background music   | `lyria-3-clip-preview`          | `backend/src/voice/music.ts`               |
+
+Voyage embeddings can be used first when `VOYAGE_API_KEY` is set. Gemini
+embeddings remain the fallback. If no embedding provider is available, PodMan
+falls back to exact-signature matching.
+
+---
+
+## How The Learning Loop Works
+
+The learning loop is the product. A teammate only has to accept or dismiss an
+intervention; the rest is captured automatically.
+
+```text
+observe -> detect -> recall prior outcomes -> policy gate -> act -> record outcome
+   ^                                                                    |
+   +-------------------------- next recall -----------------------------+
+```
+
+| Stage   | What happens                                                                | Code                                |
+| ------- | --------------------------------------------------------------------------- | ----------------------------------- |
+| Observe | Gemini Vision turns sampled screen frames into structured work context.     | `backend/src/vision/gemini.ts`      |
+| Detect  | PodMan detects overlapping files, symbols, research, and unpushed work.     | `backend/src/collision/detector.ts` |
+| Recall  | MongoDB Atlas recalls similar prior events and outcomes.                    | `backend/src/memory/vectors.ts`     |
+| Gate    | Policy suppresses dismissed false alarms and escalates recurring real ones. | `backend/src/memory/policy.ts`      |
+| Act     | PodMan publishes a card, Hermes message, or urgent voice cue.               | `backend/src/action/hermes.ts`      |
+| Learn   | Accept/dismiss feedback is written back to memory.                          | `backend/src/memory/store.ts`       |
+
+---
+
+## Runtime Components
+
+| Layer              | Runtime                             | Responsibility                                                       |
+| ------------------ | ----------------------------------- | -------------------------------------------------------------------- |
+| Frontend           | React + Vite                        | Pod rooms, screen share, cards, voice controls, member state         |
+| Backend API        | Express on `:8787`                  | LiveKit tokens, pod CRUD, outcomes, memory stats, sync PRs           |
+| Vision agent       | Node + `@livekit/rtc-node`          | Subscribes to screen tracks, samples frames, publishes interventions |
+| Live voice agent   | Python LiveKit Agents + Gemini Live | Real-time voice Q&A in a pod room                                    |
+| Memory             | MongoDB Atlas                       | Observations, engineer state, collisions, interventions, outcomes    |
+| Reasoning agent    | Hermes + Gemma Modular/MAX          | Tool-using autonomous assistant and ops layer                        |
+| Realtime transport | LiveKit Cloud                       | Screen tracks, audio tracks, data messages                           |
+| Hosting            | DigitalOcean + Caddy + systemd      | Static frontend, API, workers, watchdog timers                       |
+
+---
+
+## Data Flow
 
 ```mermaid
 sequenceDiagram
@@ -92,163 +386,291 @@ sequenceDiagram
   participant Dev as Engineer PWA
   participant API as Backend API
   participant LK as LiveKit Room
-  participant Agent as PodMan Agent
-  participant Gemini as Gemini Vision
-  participant Mongo as MongoDB Memory
-  participant Hermes as Hermes / Action Layer
-  participant GH as GitHub
+  participant Agent as Vision Agent
+  participant Gemini as Gemini APIs
+  participant Mongo as MongoDB Atlas
+  participant Hermes as Hermes/Gemma
 
   Dev->>API: POST /api/token
   API-->>Dev: LiveKit URL + JWT
-  Dev->>LK: Join pod room
-  Dev->>LK: Publish screen-share track
+  Dev->>LK: Join pod room + publish screen share
   Agent->>LK: Subscribe to screen-share video
-  Agent->>Gemini: Sampled JPEG frame
+  Agent->>Gemini: Sampled frame
   Gemini-->>Agent: Structured work context
-  Agent->>Mongo: Record observation
-  Agent->>GH: Read public repo state
-  Agent->>Mongo: Recall prior patterns
-  Agent->>Hermes: Create intervention
-  Hermes->>LK: Publish small data packet
-  LK-->>Dev: Render card / message / urgent voice cue
+  Agent->>Mongo: Store observation
+  Agent->>Mongo: Recall similar prior events
+  Mongo-->>Agent: Prior outcome + policy hints
+  Agent->>Hermes: Escalate when autonomous help is useful
+  Agent->>LK: Publish card / message / voice cue
   Dev->>API: POST /api/outcome
-  API->>Mongo: Store learning signal
+  API->>Mongo: Store accept/dismiss feedback
 ```
 
-### Why this architecture matters
-
-- **LiveKit is the realtime spine.** Screens and intervention data move through a
-  shared room, so PodMan can react before code is pushed.
-- **Gemini is the perception layer.** The agent samples frames and asks Gemini
-  for structured JSON such as current file, symbol, activity, unpushed hints,
-  and confidence.
-- **MongoDB is the learning loop.** Outcomes and repeated patterns make later
-  interventions quieter and more useful.
-- **Local git is the truth source.** The watcher reports dirty files and branch
-  state directly from each laptop, which avoids relying on vision for facts
-  GitHub cannot see.
-- **Hermes keeps it non-intrusive.** Most events are cards. Team messages and
-  voice are escalation paths, not the default.
-
 ---
 
-## How it works
-
-1. Engineers open the PWA and join a pod room.
-2. The backend API mints a LiveKit token via `POST /api/token`.
-3. The PWA publishes screen share into the pod room when the engineer chooses
-   "Share my screen".
-4. The PodMan agent worker joins the same room and subscribes to screen-share
-   tracks.
-5. The agent samples frames, sends them to Gemini Vision, and records structured
-   observations in MongoDB.
-6. Each engineer runs the git watcher so PodMan has deterministic dirty/unpushed
-   state.
-7. The detector combines live screen context, git truth, GitHub state, and team
-   memory.
-8. PodMan sends the smallest useful intervention: card first, Hermes message for
-   coordination, voice only when urgent.
-9. The user's response is saved as an outcome, closing the continual-learning
-   loop.
-
----
-
-## Public interfaces
+## Public Interfaces
 
 | Interface                                                   | Purpose                                        |
 | ----------------------------------------------------------- | ---------------------------------------------- |
 | `GET /health`                                               | API health check                               |
 | `POST /api/token`                                           | Mint LiveKit room tokens                       |
-| `POST /api/sync-pr`                                         | Create a visible sync PR artifact              |
-| `POST /api/outcome`                                         | Store accepted/dismissed intervention outcomes |
-| `GET /api/memory/stats`                                     | Show memory collection counts                  |
+| `GET /api/pods`                                             | List pods                                      |
 | `GET/POST/PATCH/DELETE /api/pods`                           | Pod CRUD                                       |
 | `POST/DELETE /api/pods/:id/members`                         | Pod membership                                 |
+| `GET /api/pods/:id/members/:name/history`                   | Recent member work history                     |
+| `POST /api/outcome`                                         | Store accepted/dismissed intervention outcomes |
+| `GET /api/memory/stats`                                     | Live memory collection counts                  |
+| `POST /api/sync-pr`                                         | Create a visible sync PR artifact              |
 | LiveKit topic `podman.intervention`                         | Intervention data channel                      |
-| Wire messages `COLLISION`, `ACK`, `GIT_REPORT`, `VOICE_CUE` | Shared agent/PWA message contract              |
+| Wire messages `COLLISION`, `ACK`, `GIT_REPORT`, `VOICE_CUE` | Agent/PWA contract                             |
 
 ---
 
-## Monorepo layout
+## Monorepo Layout
 
-| Folder      | What                                                                             |
-| ----------- | -------------------------------------------------------------------------------- |
-| `frontend/` | React + Vite PWA for pods, LiveKit room UI, screen share, and intervention cards |
-| `backend/`  | Express API plus separate LiveKit agent worker                                   |
-| `shared/`   | Shared TypeScript types and LiveKit data message contracts                       |
-| `database/` | MongoDB setup and seed utilities                                                 |
-| `infra/`    | DigitalOcean App Platform specs and Dockerfile                                   |
-| `scripts/`  | Local git watcher for demo laptops                                               |
-| `docs/`     | Canonical plan and deeper sponsor/integration notes                              |
+| Folder      | Purpose                                                                 |
+| ----------- | ----------------------------------------------------------------------- |
+| `frontend/` | React + Vite PWA                                                        |
+| `backend/`  | Express API, vision agent, memory, collision detection, Hermes job APIs |
+| `agents/`   | Python LiveKit conversation agent                                       |
+| `shared/`   | Shared TypeScript contracts                                             |
+| `database/` | MongoDB setup and seed utilities                                        |
+| `infra/`    | Caddy, Docker, DigitalOcean, systemd units                              |
+| `scripts/`  | Git watcher, deploy doctor, watchdog, verification tooling              |
+| `docs/`     | Demo, deployment, learning, graph, and architecture notes               |
 
 ---
 
-## Docs
+## Local Development
 
-| File                                           | What                                      |
-| ---------------------------------------------- | ----------------------------------------- |
-| [`docs/PLAN.md`](docs/PLAN.md)                 | Canonical master plan and source of truth |
-| [`docs/idea.md`](docs/idea.md)                 | Product concept and demo framing          |
-| [`docs/livekit.md`](docs/livekit.md)           | LiveKit notes and room model              |
-| [`docs/gemini.md`](docs/gemini.md)             | Gemini vision and voice notes             |
-| [`docs/mongodb.md`](docs/mongodb.md)           | MongoDB memory design                     |
-| [`docs/digitalocean.md`](docs/digitalocean.md) | Deployment notes                          |
-| [`docs/demo-setup.md`](docs/demo-setup.md)     | Demo laptop and stage checklist           |
+Run the core app in three terminals:
 
----
+```mermaid
+flowchart LR
+  Env["1. Configure .env"] --> Install["2. pnpm install"]
+  Install --> API["Terminal A<br/>backend API :8787"]
+  Install --> Agent["Terminal B<br/>vision agent"]
+  Install --> UI["Terminal C<br/>frontend :5173"]
+  Install --> Voice["Optional<br/>conversation agent"]
+  API --> Browser["Open local PWA"]
+  Agent --> Browser
+  UI --> Browser
+  Voice --> Browser
 
-## Prizes targeted
-
-- **Best Gemini:** structured vision over live IDE context, with voice as an
-  optional escalation path.
-- **Best LiveKit:** realtime screen-share tracks, presence, data packets, and
-  eventual voice in one pod room.
-- **Best DigitalOcean:** frontend static site, API service, and LiveKit agent
-  worker deployment.
-- **MongoDB + Voyage story:** persistent memory first, vector recall once exact
-  signature recall is proven.
-
----
-
-## Quick start
+  classDef step fill:#eef8ee,stroke:#2f8a3a,color:#123915;
+  classDef run fill:#e8f1ff,stroke:#3366cc,color:#0b1f44;
+  class Env,Install step;
+  class API,Agent,UI,Voice,Browser run;
+```
 
 ```bash
 cp .env.example .env
-# fill in LIVEKIT_*, GEMINI_*, GITHUB_*, and MONGODB_URI
+# Fill LIVEKIT_*, GEMINI_*, GITHUB_*, MONGODB_URI.
 
 pnpm install
 pnpm --filter @podman/backend dev       # API on :8787
-pnpm --filter @podman/backend dev:agent # PodMan LiveKit agent
+pnpm --filter @podman/backend dev:agent # LiveKit vision agent
 pnpm --filter @podman/frontend dev      # PWA on :5173
 ```
 
+Run the Python live conversation agent:
+
+```bash
+pnpm livekit:conversation:agent
+```
+
+Run the local git watcher on each demo laptop:
+
+```bash
+node scripts/podman-agent.mjs --name <engineer-name> --pod <pod-id>
+```
+
+Demo identities:
+
+```bash
+node scripts/podman-agent.mjs --name alice --pod demo-pod
+node scripts/podman-agent.mjs --name bob   --pod demo-pod
+node scripts/podman-agent.mjs --name carol --pod demo-pod
+```
+
 ---
 
-## Git watcher - run this on every demo laptop
+## Production Operations
 
-Each engineer runs this in a terminal before the demo. It polls the local git
-working tree every 15 seconds and writes git state to MongoDB so PodMan has
-deterministic dirty/unpushed truth that vision alone cannot reliably infer.
+The production droplet is systemd-supervised. Caddy serves the built frontend
+and proxies `/api/*` to the backend on `127.0.0.1:8787`.
 
-```bash
-# from the repo root
-node scripts/podman-agent.mjs --name <yourname> --pod <podId>
+```mermaid
+flowchart LR
+  Public["https://podman.live"] --> Caddy["caddy.service"]
+  Caddy --> Static["/var/www/podman"]
+  Caddy --> API["podman-platform-api.service<br/>:8787"]
+  API --> Agent["podman-platform-agent.service"]
+  API --> Voice["podman-live-conversation-agent.service"]
+  Watchdog["podman-hermes-watchdog.timer"] --> Public
+  Sync["podman-hermes-sync-deploy.timer"] --> API
+
+  classDef public fill:#e8f1ff,stroke:#3366cc,color:#0b1f44;
+  classDef service fill:#eef8ee,stroke:#2f8a3a,color:#123915;
+  classDef timer fill:#fff6df,stroke:#c47f00,color:#3d2b00;
+  class Public public;
+  class Caddy,Static,API,Agent,Voice service;
+  class Watchdog,Sync timer;
 ```
 
-**Demo setup:**
+| Service / timer                          | Purpose                                                        |
+| ---------------------------------------- | -------------------------------------------------------------- |
+| `podman-platform-api.service`            | Built backend API on port `8787`                               |
+| `podman-platform-agent.service`          | Node LiveKit vision agent                                      |
+| `podman-live-conversation-agent.service` | Python Gemini Live conversation agent                          |
+| `podman-hermes-watchdog.timer`           | Periodic public health and remediation                         |
+| `podman-hermes-sync-deploy.timer`        | Clean-tree fast-forward deploy loop                            |
+| `caddy.service`                          | Serves `/var/www/podman`, proxies `/api/*` to `127.0.0.1:8787` |
+
+Check the app from the outside first:
 
 ```bash
-node scripts/podman-agent.mjs --name alice --pod demo-pod
-node scripts/podman-agent.mjs --name bob --pod demo-pod
-node scripts/podman-agent.mjs --name carol --pod demo-pod
+curl https://podman.live/
+curl https://podman.live/health
+curl https://podman.live/api/pods
+curl https://podman.live/api/presence
+curl https://podman.live/api/memory/stats
 ```
 
-The script logs one line per cycle: branch, changed file count, and latest
-commit. Leave it running in a background terminal tab throughout the session.
-Stop with `Ctrl+C`.
+Then check the droplet services:
 
-**Requirements:**
+```bash
+systemctl is-active podman-platform-api podman-platform-agent
+systemctl is-active podman-live-conversation-agent
+systemctl is-active podman-hermes-watchdog.timer podman-hermes-sync-deploy.timer
+```
 
-- `MONGODB_URI` must be exported in the shell or present in `backend/.env`.
-- Run `pnpm install` first so workspace dependencies are available.
-- Run from the repo root.
+Hermes operations scripts:
+
+```bash
+pnpm hermes:watchdog
+pnpm hermes:watchdog:strict
+pnpm hermes:sync-deploy
+pnpm deploy:doctor:strict
+```
+
+Gemma Modular/MAX endpoint checks:
+
+```bash
+curl https://llm.alhinai.dev/v1/models \
+  -H "Authorization: Bearer not-needed"
+
+curl https://llm.alhinai.dev/v1/chat/completions \
+  -H "Content-Type: application/json" \
+  -H "Authorization: Bearer not-needed" \
+  -d '{
+    "model": "gemma-4-31B-it",
+    "messages": [{"role": "user", "content": "Reply with exactly: working"}],
+    "temperature": 0,
+    "max_tokens": 512
+  }'
+```
+
+---
+
+## Required Environment
+
+```bash
+LIVEKIT_URL=wss://your-livekit-server.livekit.cloud
+LIVEKIT_API_KEY=...
+LIVEKIT_API_SECRET=...
+LIVEKIT_CONVERSATION_AGENT_NAME=podman-live-conversation
+
+GEMINI_API_KEY=...
+GEMINI_VISION_MODEL=gemini-2.0-flash
+GEMINI_LIVE_MODEL=gemini-3.1-flash-tts-preview
+GEMINI_CONVERSATION_MODEL=gemini-3.1-flash-live-preview
+GEMINI_EMBEDDING_MODEL=gemini-embedding-001
+GEMINI_TTS_VOICE=Charon
+
+GITHUB_TOKEN=...
+GITHUB_REPO=karti-ai/podman
+
+MONGODB_URI=mongodb+srv://...
+VOYAGE_API_KEY=...
+VOYAGE_EMBEDDING_MODEL=voyage-4-lite
+
+PORT=8787
+POD_ROOM=demo-pod
+```
+
+Gemma/Hermes provider values live in Hermes config, not PodMan `.env`:
+
+```text
+provider: gemma4-31b-max
+model: gemma-4-31B-it
+base_url: https://llm.alhinai.dev/v1
+api_key: not-needed
+```
+
+---
+
+## Verification
+
+Before calling a deployment healthy:
+
+```bash
+pnpm verify
+pnpm verify:infra
+pnpm deploy:doctor:strict
+pnpm hermes:watchdog:strict
+```
+
+For the public site:
+
+```bash
+curl https://podman.live/
+curl https://podman.live/health
+curl https://podman.live/api/pods
+curl https://podman.live/api/presence
+curl https://podman.live/api/memory/stats
+```
+
+For Hermes/Gemma:
+
+```bash
+hermes -z 'Reply with exactly: working' \
+  --provider gemma4-31b-max \
+  --model gemma-4-31B-it
+```
+
+Expected output:
+
+```text
+working
+```
+
+---
+
+## Troubleshooting
+
+| Symptom                       | Likely cause                                     | Check                                                |
+| ----------------------------- | ------------------------------------------------ | ---------------------------------------------------- |
+| Frontend loads but API fails  | Backend or Caddy proxy issue                     | `systemctl status podman-platform-api caddy`         |
+| `/api/*` returns 502          | API not listening on `8787`                      | `ss -ltnp`, `curl http://127.0.0.1:8787/health`      |
+| No screen observations        | Vision agent not in LiveKit room                 | `journalctl -u podman-platform-agent -n 80`          |
+| Live voice missing            | Python conversation agent down                   | `journalctl -u podman-live-conversation-agent -n 80` |
+| Memory empty                  | MongoDB unavailable or env missing               | `curl /api/memory/stats`, backend logs               |
+| Hermes tool calls fail        | Modular/MAX endpoint does not accept tool schema | verify Hermes provider and `/v1/chat/completions`    |
+| `llm.alhinai.dev` returns 502 | Gemma server still loading or tunnel target down | `curl /v1/models`, MAX logs on Gemma host            |
+
+---
+
+## Why It Gets Better
+
+PodMan is not a static alert system. It remembers what actually helped.
+
+- A dismissed false alarm lowers future urgency.
+- An accepted real collision raises future urgency for similar work.
+- Exact-signature recall catches repeats even without vector search.
+- MongoDB outcomes become the policy signal for the next session.
+- Hermes and Gemma give the system a tool-using agent when the coordination
+  problem needs active investigation instead of a passive card.
+
+The goal is simple: fewer interruptions, fewer duplicate branches, and a team
+that can move fast without constantly asking what everyone else is doing.

agents/podman-live-conversation/.env.example

@@ -0,0 +1,8 @@
+LIVEKIT_URL=wss://stackauthnov28-kt4gd6fq.livekit.cloud
+LIVEKIT_API_KEY=
+LIVEKIT_API_SECRET=
+GOOGLE_API_KEY=
+GEMINI_CONVERSATION_MODEL=gemini-3.1-flash-live-preview
+GEMINI_CONVERSATION_VOICE=Aoede
+PODMAN_BACKEND_URL=http://127.0.0.1:8787
+INTERNAL_AGENT_TOKEN=

agents/podman-live-conversation/README.md

@@ -0,0 +1,22 @@
+# PodMan Live Conversation Agent
+
+Private 1:1 LiveKit Agent worker for PodMan Live Conversation.
+
+Run locally:
+
+```bash
+cd agents/podman-live-conversation
+uv sync --extra test
+cp .env.example .env.local
+uv run agent.py dev
+```
+
+Required env:
+
+- `LIVEKIT_URL`
+- `LIVEKIT_API_KEY`
+- `LIVEKIT_API_SECRET`
+- `GOOGLE_API_KEY` or `GEMINI_API_KEY`
+- `PODMAN_BACKEND_URL`
+- `INTERNAL_AGENT_TOKEN`
+

agents/podman-live-conversation/agent.py

@@ -0,0 +1,455 @@
+import asyncio
+import json
+import logging
+import os
+import subprocess
+import time
+from typing import Any
+from urllib import error, request
+
+from dotenv import load_dotenv
+from livekit import agents
+from livekit.agents import Agent, AgentServer, AgentSession, RunContext, function_tool
+from livekit.plugins import google
+
+load_dotenv(".env.local")
+if not os.getenv("GOOGLE_API_KEY") and os.getenv("GEMINI_API_KEY"):
+    os.environ["GOOGLE_API_KEY"] = os.environ["GEMINI_API_KEY"]
+
+logger = logging.getLogger("podman-live-conversation")
+
+AGENT_NAME = "podman-live-conversation"
+MODEL = os.getenv("GEMINI_CONVERSATION_MODEL", "gemini-3.1-flash-live-preview")
+VOICE = os.getenv("GEMINI_CONVERSATION_VOICE", "Aoede")
+BACKEND_URL = os.getenv("PODMAN_BACKEND_URL", "http://127.0.0.1:8787").rstrip("/")
+INTERNAL_AGENT_TOKEN = os.getenv("INTERNAL_AGENT_TOKEN", "")
+REPO_SLUG = os.getenv("PODMAN_REPO_SLUG", "karti-ai/podman")
+
+
+def _resolve_repo_root() -> str:
+    override = os.getenv("PODMAN_REPO_ROOT")
+    if override:
+        return override
+    here = os.path.dirname(os.path.abspath(__file__))
+    try:
+        out = subprocess.run(
+            ["git", "-C", here, "rev-parse", "--show-toplevel"],
+            capture_output=True,
+            text=True,
+            timeout=5,
+        )
+        if out.returncode == 0 and out.stdout.strip():
+            return out.stdout.strip()
+    except Exception:
+        pass
+    return os.path.abspath(os.path.join(here, "..", ".."))
+
+
+REPO_ROOT = _resolve_repo_root()
+
+INSTRUCTIONS = """You are PodMan, a concise real-time engineering teammate.
+You are in a private 1:1 voice conversation with one developer.
+
+Use PodMan tools before making claims about current work, git state, collisions, blockers,
+team memory, or recent decisions. Keep spoken answers short. Prefer one useful next step.
+For questions about a person's style, goals, past work, collaboration habits, personal context,
+or what they know across pods/sessions, call get_user_learning_profile before answering.
+If a critical collision event arrives, stop the current turn and state the alert immediately.
+To find code, files, symbols, or how something is implemented in the repository, call search_repo.
+For git commit history, authorship, recent changes, or which commit introduced something, call
+repo_recent_commits or repo_find_commits.
+For complex repository, terminal, GitHub, MongoDB, build, install, deploy, or multi-step tasks,
+call delegate_to_hermes. Do not run those actions directly. If the user says stop, wait, cancel,
+or change of plans while Hermes is running, call abort_active_hermes_job immediately.
+Do not reveal raw secrets, API keys, private tokens, or another teammate's private notes."""
+
+
+def parse_metadata(raw: str | None) -> dict[str, str]:
+    try:
+        data = json.loads(raw or "{}")
+    except json.JSONDecodeError:
+        return {}
+    return {str(k): str(v) for k, v in data.items() if v is not None}
+
+
+def request_json(path: str, *, method: str = "GET", body: dict[str, Any] | None = None) -> Any:
+    if not INTERNAL_AGENT_TOKEN:
+        raise RuntimeError("INTERNAL_AGENT_TOKEN is not configured")
+    data = None if body is None else json.dumps(body).encode("utf-8")
+    req = request.Request(
+        f"{BACKEND_URL}{path}",
+        data=data,
+        method=method,
+        headers={
+            "authorization": f"Bearer {INTERNAL_AGENT_TOKEN}",
+            "content-type": "application/json",
+        },
+    )
+    try:
+        with request.urlopen(req, timeout=5) as res:
+            payload = res.read().decode("utf-8")
+            return json.loads(payload) if payload else {}
+    except error.HTTPError as exc:
+        detail = exc.read().decode("utf-8", "replace")
+        raise RuntimeError(f"PodMan backend returned {exc.code}: {detail}") from exc
+
+
+async def _run_git(args: list[str], timeout: float = 15.0) -> tuple[int, str, str]:
+    """Run a read-only git command inside the repo checkout and capture its output."""
+    try:
+        proc = await asyncio.create_subprocess_exec(
+            "git",
+            "-C",
+            REPO_ROOT,
+            *args,
+            stdout=asyncio.subprocess.PIPE,
+            stderr=asyncio.subprocess.PIPE,
+        )
+        out, err = await asyncio.wait_for(proc.communicate(), timeout=timeout)
+    except asyncio.TimeoutError:
+        return 124, "", "git command timed out"
+    except FileNotFoundError:
+        return 127, "", "git is not available on this host"
+    return proc.returncode, out.decode("utf-8", "replace"), err.decode("utf-8", "replace")
+
+
+class PodManLiveAgent(Agent):
+    def __init__(self, pod_id: str, identity: str, session_id: str, conversation_room: str) -> None:
+        super().__init__(instructions=INSTRUCTIONS)
+        self.pod_id = pod_id
+        self.identity = identity
+        self.session_id = session_id
+        self.conversation_room = conversation_room
+        self.active_hermes_job_id: str | None = None
+        self.last_spoken_progress_at = 0.0
+
+    @function_tool()
+    async def get_active_pod_context(self, context: RunContext) -> str:
+        """Get the current PodMan context for this developer and pod."""
+        data = await asyncio.to_thread(
+            request_json,
+            f"/api/internal/pods/{self.pod_id}/live-context?identity={self.identity}",
+        )
+        return json.dumps(data, ensure_ascii=True)[:12000]
+
+    @function_tool()
+    async def get_user_learning_profile(self, context: RunContext) -> str:
+        """Get persistent cross-pod, cross-session knowledge about this developer:
+        collaboration style, goals, known work, recent activity, and Hermes history.
+        """
+        data = await asyncio.to_thread(
+            request_json,
+            f"/api/internal/pods/{self.pod_id}/live-context?identity={self.identity}",
+        )
+        profile = data.get("userLearningProfile")
+        if not profile:
+            return "No persistent user learning profile has been built for this developer yet."
+        return json.dumps(profile, ensure_ascii=True)[:10000]
+
+    @function_tool()
+    async def record_conversation_note(self, context: RunContext, note: str, kind: str = "summary") -> str:
+        """Store a useful decision, outcome, or preference learned during this conversation."""
+        await asyncio.to_thread(
+            request_json,
+            f"/api/internal/pods/{self.pod_id}/live-conversation/{self.session_id}/note",
+            method="POST",
+            body={"identity": self.identity, "kind": kind, "note": note},
+        )
+        return "Saved to PodMan memory."
+
+    @function_tool()
+    async def get_recent_changes(self, context: RunContext) -> str:
+        """Get recent local git and activity signals for this developer."""
+        data = await asyncio.to_thread(
+            request_json,
+            f"/api/internal/pods/{self.pod_id}/live-context?identity={self.identity}",
+        )
+        focused = {
+            "identity": data.get("identity"),
+            "currentGitState": data.get("currentGitState"),
+            "memberHistory": data.get("memberHistory"),
+            "recentCollisions": data.get("recentCollisions"),
+        }
+        return json.dumps(focused, ensure_ascii=True)[:8000]
+
+    @function_tool()
+    async def search_team_memory(self, context: RunContext, query: str) -> str:
+        """Search current compact team memory for information relevant to a query."""
+        data = await asyncio.to_thread(
+            request_json,
+            f"/api/internal/pods/{self.pod_id}/live-context?identity={self.identity}",
+        )
+        haystack = json.dumps(data, ensure_ascii=True)
+        query_terms = [term.lower() for term in query.split() if len(term) > 2]
+        if not query_terms:
+            return haystack[:6000]
+        snippets = []
+        lower = haystack.lower()
+        for term in query_terms[:8]:
+            idx = lower.find(term)
+            if idx >= 0:
+                snippets.append(haystack[max(0, idx - 400) : idx + 1200])
+        return "\n---\n".join(snippets)[:8000] or haystack[:6000]
+
+    @function_tool()
+    async def search_repo(self, context: RunContext, query: str, max_results: int = 12) -> str:
+        """Search the team's code repository (github.com/karti-ai/podman) for code, symbols,
+        filenames, config, or any text. Use this to find where something is implemented or which
+        files mention a term before answering questions about the codebase. Searches the live
+        local checkout of the main branch, so results are always current.
+        """
+        cleaned = " ".join(query.split()).strip()
+        if not cleaned:
+            return "Provide a non-empty search query."
+        limit = max(1, min(int(max_results or 12), 40))
+        cmd = [
+            "rg",
+            "--line-number",
+            "--no-heading",
+            "--color",
+            "never",
+            "--smart-case",
+            "--max-count",
+            "3",
+            "--max-columns",
+            "240",
+            "-g",
+            "!*.lock",
+            "-g",
+            "!pnpm-lock.yaml",
+            "-g",
+            "!uv.lock",
+            "-g",
+            "!*.min.*",
+            "--",
+            cleaned,
+            REPO_ROOT,
+        ]
+        try:
+            proc = await asyncio.create_subprocess_exec(
+                *cmd,
+                stdout=asyncio.subprocess.PIPE,
+                stderr=asyncio.subprocess.PIPE,
+            )
+            stdout, stderr = await asyncio.wait_for(proc.communicate(), timeout=15)
+        except asyncio.TimeoutError:
+            return "Repo search timed out. Try a more specific query."
+        except FileNotFoundError:
+            return "Repo search is unavailable on this host (ripgrep is not installed)."
+        if proc.returncode not in (0, 1):  # rg: 0=match, 1=no match, 2=error
+            return f"Repo search failed: {stderr.decode('utf-8', 'replace')[:300]}"
+        prefix = REPO_ROOT + os.sep
+        lines: list[str] = []
+        for line in stdout.decode("utf-8", "replace").splitlines():
+            lines.append(line[len(prefix) :] if line.startswith(prefix) else line)
+            if len(lines) >= limit:
+                break
+        if not lines:
+            return f'No matches for "{cleaned}" in {REPO_SLUG}.'
+        body = "\n".join(lines)
+        return f'Matches for "{cleaned}" in {REPO_SLUG} (path:line):\n{body}'[:7000]
+
+    @function_tool()
+    async def repo_recent_commits(
+        self, context: RunContext, path: str = "", author: str = "", limit: int = 15
+    ) -> str:
+        """Show recent git commit history for github.com/karti-ai/podman: who committed what and when.
+        Optionally scope to a file or folder (path) or filter by author name/email (author).
+        Use this for questions about recent changes, authorship, or a specific file's history.
+        """
+        n = max(1, min(int(limit or 15), 50))
+        args = [
+            "log",
+            f"--max-count={n}",
+            "--no-color",
+            "--date=short",
+            "--pretty=format:%h | %an | %ad | %s",
+        ]
+        if author.strip():
+            args.append(f"--author={author.strip()}")
+        if path.strip():
+            args += ["--", path.strip()]
+        code, out, err = await _run_git(args)
+        if code != 0:
+            return f"Git history lookup failed: {err.strip()[:300] or 'unknown error'}"
+        out = out.strip()
+        if not out:
+            scope = f" for {path.strip()}" if path.strip() else ""
+            who = f" by {author.strip()}" if author.strip() else ""
+            return f"No commits found{scope}{who}."
+        return f"Recent commits in {REPO_SLUG} (hash | author | date | subject):\n{out}"[:7000]
+
+    @function_tool()
+    async def repo_find_commits(
+        self, context: RunContext, query: str, by: str = "message", limit: int = 15
+    ) -> str:
+        """Find commits in github.com/karti-ai/podman. by='message' searches commit messages;
+        by='code' finds commits that added or removed the query text in the code (pickaxe).
+        Use by='code' for "which commit introduced X"; use by='message' for "commits about X".
+        """
+        cleaned = " ".join(query.split()).strip()
+        if not cleaned:
+            return "Provide a non-empty query."
+        n = max(1, min(int(limit or 15), 50))
+        args = [
+            "log",
+            f"--max-count={n}",
+            "--no-color",
+            "--date=short",
+            "--pretty=format:%h | %an | %ad | %s",
+        ]
+        mode = by.strip().lower()
+        if mode == "code":
+            args.append(f"-S{cleaned}")
+        else:
+            mode = "message"
+            args += ["-i", f"--grep={cleaned}"]
+        code, out, err = await _run_git(args)
+        if code != 0:
+            return f"Commit search failed: {err.strip()[:300] or 'unknown error'}"
+        out = out.strip()
+        if not out:
+            return f'No commits found matching "{cleaned}" (by {mode}).'
+        return (
+            f'Commits in {REPO_SLUG} matching "{cleaned}" (by {mode}) — hash | author | date | subject:\n{out}'[
+                :7000
+            ]
+        )
+
+    @function_tool()
+    async def delegate_to_hermes(
+        self,
+        context: RunContext,
+        prompt: str,
+        context_scope: str = "current_repo",
+        target_repository: str = "",
+        risk_level: str = "read_only",
+        requires_confirmation: bool = False,
+        success_criteria: list[str] | None = None,
+    ) -> str:
+        """Hand off a complex engineering task to Hermes, PodMan's autonomous backend execution engine.
+
+        Use this for filesystem, terminal, GitHub, MongoDB, build, install, deploy, test,
+        or multi-step repository tasks. Do not use this for simple conversational answers.
+        """
+        body = {
+            "prompt": prompt,
+            "contextScope": context_scope,
+            "targetRepository": target_repository or "karti-ai/podman",
+            "riskLevel": risk_level,
+            "requiresConfirmation": requires_confirmation,
+            "successCriteria": success_criteria or ["Hermes completes the requested inspection."],
+            "podId": self.pod_id,
+            "identity": self.identity,
+            "sessionId": self.session_id,
+            "conversationRoom": self.conversation_room,
+        }
+        job = await asyncio.to_thread(request_json, "/api/internal/hermes/jobs", method="POST", body=body)
+        self.active_hermes_job_id = str(job["id"])
+        return json.dumps(
+            {
+                "status": "accepted",
+                "job_id": self.active_hermes_job_id,
+                "spoken_ack": "Hermes is starting that now. I will keep you posted.",
+            },
+            ensure_ascii=True,
+        )
+
+    @function_tool()
+    async def abort_active_hermes_job(self, context: RunContext, reason: str = "User changed plans") -> str:
+        """Abort the currently running Hermes job immediately."""
+        if not self.active_hermes_job_id:
+            return "No active Hermes job is running."
+        job = await asyncio.to_thread(
+            request_json,
+            f"/api/internal/hermes/jobs/{self.active_hermes_job_id}/abort",
+            method="POST",
+            body={"reason": reason},
+        )
+        return json.dumps(
+            {
+                "status": job.get("status", "aborting"),
+                "job_id": self.active_hermes_job_id,
+                "spoken_ack": "Stopped. Hermes is aborting the job before making further changes.",
+            },
+            ensure_ascii=True,
+        )
+
+    def should_speak_progress(self, event: dict[str, Any]) -> bool:
+        event_type = event.get("type")
+        if event_type in {"completed", "failed", "aborted", "needs_confirmation"}:
+            return True
+        if event_type not in {"heartbeat", "step_started", "step_completed"}:
+            return False
+        monotonic = time.monotonic()
+        if monotonic - self.last_spoken_progress_at < 8:
+            return False
+        self.last_spoken_progress_at = monotonic
+        return True
+
+
+server = AgentServer()
+
+
+@server.rtc_session(agent_name=AGENT_NAME)
+async def entrypoint(ctx: agents.JobContext):
+    metadata = parse_metadata(getattr(ctx.job, "metadata", None))
+    pod_id = metadata.get("podId", "demo-pod")
+    identity = metadata.get("identity", "developer")
+    session_id = metadata.get("sessionId", "unknown")
+
+    session = AgentSession(
+        llm=google.realtime.RealtimeModel(
+            model=MODEL,
+            voice=VOICE,
+        ),
+    )
+    agent = PodManLiveAgent(
+        pod_id=pod_id,
+        identity=identity,
+        session_id=session_id,
+        conversation_room=ctx.room.name,
+    )
+
+    def on_data_received(*args: Any):
+        payload = args[0] if args else b""
+        if isinstance(payload, str):
+            raw = payload
+        else:
+            raw = bytes(payload).decode("utf-8", "replace")
+        try:
+            msg = json.loads(raw)
+        except json.JSONDecodeError:
+            return
+        msg_type = msg.get("type")
+        if msg_type == "HERMES_JOB_EVENT":
+            event = msg.get("event") or {}
+            summary = str(event.get("message") or "").strip()
+            if str(event.get("type")) in {"completed", "failed", "aborted"}:
+                agent.active_hermes_job_id = None
+        elif msg_type == "LIVE_CONVERSATION_EVENT":
+            event = msg.get("event") or {}
+            summary = str(event.get("summary") or "").strip()
+        else:
+            return
+        if not summary:
+            return
+
+        async def interrupt_and_say() -> None:
+            try:
+                if msg_type == "LIVE_CONVERSATION_EVENT":
+                    await session.interrupt(force=True)
+            except Exception as exc:
+                logger.warning("interrupt failed: %s", exc)
+            if msg_type == "LIVE_CONVERSATION_EVENT" or agent.should_speak_progress(event):
+                await session.say(summary, allow_interruptions=True, add_to_chat_ctx=True)
+
+        asyncio.create_task(interrupt_and_say())
+
+    ctx.room.on("data_received", on_data_received)
+    await session.start(room=ctx.room, agent=agent)
+    await ctx.connect()
+
+
+if __name__ == "__main__":
+    agents.cli.run_app(server)

agents/podman-live-conversation/pyproject.toml

@@ -0,0 +1,19 @@
+[project]
+name = "podman-live-conversation"
+version = "0.1.0"
+description = "PodMan private LiveKit/Gemini live conversation agent"
+requires-python = ">=3.10,<3.14"
+dependencies = [
+    "livekit-agents[google]>=1.6.4,<1.7",
+    "python-dotenv>=1.0.0",
+]
+
+[project.optional-dependencies]
+test = ["pytest>=8.0.0"]
+
+[build-system]
+requires = ["hatchling"]
+build-backend = "hatchling.build"
+
+[tool.hatch.build.targets.wheel]
+packages = ["."]

agents/podman-live-conversation/tests/test_agent_helpers.py

@@ -0,0 +1,26 @@
+from agent import PodManLiveAgent, parse_metadata
+
+
+def test_parse_metadata_accepts_valid_json():
+    assert parse_metadata('{"podId":"demo-pod","identity":"yahya","sessionId":"s1"}') == {
+        "podId": "demo-pod",
+        "identity": "yahya",
+        "sessionId": "s1",
+    }
+
+
+def test_parse_metadata_handles_bad_json():
+    assert parse_metadata("not json") == {}
+
+
+def test_hermes_terminal_events_always_speak():
+    agent = PodManLiveAgent("demo-pod", "yahya", "s1", "room")
+    assert agent.should_speak_progress({"type": "completed"}) is True
+    assert agent.should_speak_progress({"type": "failed"}) is True
+    assert agent.should_speak_progress({"type": "aborted"}) is True
+
+
+def test_hermes_progress_is_throttled():
+    agent = PodManLiveAgent("demo-pod", "yahya", "s1", "room")
+    assert agent.should_speak_progress({"type": "heartbeat"}) is True
+    assert agent.should_speak_progress({"type": "step_started"}) is False

backend/package.json

@@ -17,6 +17,7 @@
     "typecheck": "tsc -p tsconfig.json --noEmit"
   },
   "dependencies": {
+    "@clerk/express": "^2.1.32",
     "@google/genai": "^2.10.0",
     "@livekit/rtc-node": "^0.13.29",
     "@podman/shared": "workspace:*",

backend/src/action/hermes.ts

@@ -1,6 +1,11 @@
 import type { Room } from '@livekit/rtc-node';
+import { Room as LiveKitRoom } from '@livekit/rtc-node';
+import { AccessToken } from 'livekit-server-sdk';
 import type { Collision, DataMessage, HermesMessage, Intervention } from '@podman/shared';
 import { DATA_TOPIC } from '@podman/shared';
+import { env } from '../env.js';
+import { speak } from '../voice/live.js';
+import { notifyCriticalLiveConversations } from '../live-conversation/sessions.js';
 
 const encoder = new TextEncoder();
 
@@ -37,3 +42,58 @@ export async function publishHermesMessage(
     topic: DATA_TOPIC,
   });
 }
+
+export async function publishHermesIntervention(
+  room: Room,
+  collision: Collision,
+  intervention: Intervention,
+  voiceLine?: string,
+): Promise<void> {
+  const data: DataMessage = { type: 'COLLISION', collision, intervention };
+  await room.localParticipant?.publishData(encoder.encode(JSON.stringify(data)), {
+    reliable: true,
+    topic: DATA_TOPIC,
+  });
+  await publishHermesMessage(room, collision, intervention);
+  void notifyCriticalLiveConversations(collision, intervention, voiceLine).catch((err) =>
+    console.warn(`[live-conversation] critical notify failed: ${(err as Error).message}`),
+  );
+  if (voiceLine)
+    await speak(room, voiceLine, {
+      priority: collision.severity === 'critical' ? 'critical' : 'normal',
+    });
+}
+
+async function hermesToken(roomName: string): Promise<string> {
+  const at = new AccessToken(env.LIVEKIT_API_KEY, env.LIVEKIT_API_SECRET, {
+    identity: `podman-hermes-${Date.now()}`,
+    name: 'PodMan Hermes',
+    ttl: '10m',
+  });
+  at.addGrant({
+    roomJoin: true,
+    room: roomName,
+    canPublish: true,
+    canSubscribe: true,
+    canPublishData: true,
+  });
+  return at.toJwt();
+}
+
+export async function notifyHermesInterventionInRoom(
+  roomName: string,
+  collision: Collision,
+  intervention: Intervention,
+  voiceLine?: string,
+): Promise<void> {
+  const room = new LiveKitRoom();
+  try {
+    await room.connect(env.LIVEKIT_URL, await hermesToken(roomName), {
+      autoSubscribe: false,
+      dynacast: false,
+    });
+    await publishHermesIntervention(room, collision, intervention, voiceLine);
+  } finally {
+    await room.disconnect().catch(() => {});
+  }
+}

backend/src/activity/member-history.ts

@@ -0,0 +1,244 @@
+import type {
+  Collision,
+  EngineerContext,
+  MemberWorkHistory,
+  MemberWorkHistoryFile,
+  MemberWorkHistoryRoi,
+} from '@podman/shared';
+import { getDb } from '../memory/db.js';
+import { parseGitStatusPath } from '../graph/live.js';
+
+interface EngineerStateDoc {
+  _id: string;
+  podId: string;
+  name: string;
+  changedFiles?: string[];
+  branch?: string | null;
+  recentCommit?: string | null;
+  gitUpdatedAt?: Date | string;
+  updatedAt?: Date | string;
+}
+
+interface FileAccumulator {
+  file: string;
+  observations: number;
+  gitChanges: number;
+  firstSeenAt: number;
+  lastSeenAt: number;
+  confidenceSum: number;
+  confidenceCount: number;
+  activities: Set<string>;
+  current: boolean;
+}
+
+function toIso(ms: number): string {
+  return new Date(ms).toISOString();
+}
+
+function dateMs(value: string | Date | undefined): number {
+  if (value instanceof Date) return value.getTime();
+  if (value) {
+    const parsed = Date.parse(value);
+    if (Number.isFinite(parsed)) return parsed;
+  }
+  return 0;
+}
+
+function clean(value: string | undefined): string {
+  return value?.trim() ?? '';
+}
+
+function sameMember(a: string | undefined, b: string): boolean {
+  return clean(a).toLowerCase() === b.trim().toLowerCase();
+}
+
+function addFile(files: Map<string, FileAccumulator>, file: string, at: number): FileAccumulator {
+  const existing = files.get(file);
+  if (existing) {
+    if (at > 0) {
+      existing.firstSeenAt = Math.min(existing.firstSeenAt || at, at);
+      existing.lastSeenAt = Math.max(existing.lastSeenAt, at);
+    }
+    return existing;
+  }
+  const acc: FileAccumulator = {
+    file,
+    observations: 0,
+    gitChanges: 0,
+    firstSeenAt: at,
+    lastSeenAt: at,
+    confidenceSum: 0,
+    confidenceCount: 0,
+    activities: new Set<string>(),
+    current: false,
+  };
+  files.set(file, acc);
+  return acc;
+}
+
+export async function getMemberWorkHistory(
+  podId: string,
+  member: string,
+  options: { hours?: number; limit?: number } = {},
+): Promise<MemberWorkHistory> {
+  const db = await getDb();
+  const windowHours = Math.min(Math.max(options.hours ?? 24, 1), 168);
+  const limit = Math.min(Math.max(options.limit ?? 80, 10), 200);
+  const since = new Date(Date.now() - windowHours * 60 * 60 * 1000).toISOString();
+
+  const [observations, gitState, collisions, interventions] = await Promise.all([
+    db
+      .collection<EngineerContext>('observations')
+      .find({ podId, observedAt: { $gte: since } }, { projection: { _id: 0 } })
+      .sort({ observedAt: -1 })
+      .limit(500)
+      .toArray(),
+    db.collection<EngineerStateDoc>('engineer_states').findOne({
+      podId,
+      name: { $regex: `^${member.replace(/[.*+?^${}()|[\]\\]/g, '\\$&')}$`, $options: 'i' },
+    }),
+    db
+      .collection<Collision>('collisions')
+      .find({ podId, detectedAt: { $gte: since } }, { projection: { _id: 0 } })
+      .sort({ detectedAt: -1 })
+      .limit(200)
+      .toArray(),
+    db
+      .collection<{ collisionId: string }>('interventions')
+      .find({ podId }, { projection: { collisionId: 1, _id: 0 } })
+      .toArray(),
+  ]);
+
+  const files = new Map<string, FileAccumulator>();
+  const timeline: MemberWorkHistory['timeline'] = [];
+  const memberObservations = observations.filter((doc) => sameMember(doc.engineerId, member));
+
+  for (const doc of memberObservations) {
+    const file = clean(doc.currentFile);
+    if (!file) continue;
+    const at = dateMs(doc.observedAt);
+    const acc = addFile(files, file, at);
+    acc.observations += 1;
+    acc.current ||= timeline.length === 0;
+    if (typeof doc.confidence === 'number') {
+      acc.confidenceSum += doc.confidence;
+      acc.confidenceCount += 1;
+    }
+    const activity = clean(doc.activity);
+    if (activity) acc.activities.add(activity);
+    timeline.push({
+      id: `vision:${doc.engineerId}:${doc.observedAt}:${file}`,
+      at: doc.observedAt,
+      source: 'vision',
+      file,
+      title: activity || `Worked in ${file}`,
+      detail: clean(doc.currentSymbol) ? `symbol ${doc.currentSymbol}` : undefined,
+      confidence: doc.confidence,
+    });
+  }
+
+  const gitAt = dateMs(gitState?.gitUpdatedAt ?? gitState?.updatedAt);
+  for (const raw of gitState?.changedFiles ?? []) {
+    const file = parseGitStatusPath(raw);
+    if (!file) continue;
+    const acc = addFile(files, file, gitAt || Date.now());
+    acc.gitChanges += 1;
+    acc.current = true;
+    timeline.push({
+      id: `git:${gitState?._id}:${gitAt}:${file}`,
+      at: toIso(gitAt || Date.now()),
+      source: 'git',
+      file,
+      title: `Local change in ${file}`,
+      detail: [gitState?.branch ? `branch ${gitState.branch}` : undefined, gitState?.recentCommit]
+        .filter(Boolean)
+        .join(' · '),
+    });
+  }
+
+  const fileRows: MemberWorkHistoryFile[] = [...files.values()]
+    .sort((a, b) => b.lastSeenAt - a.lastSeenAt || b.observations - a.observations)
+    .slice(0, 12)
+    .map((file) => ({
+      file: file.file,
+      observations: file.observations,
+      gitChanges: file.gitChanges,
+      firstSeenAt: toIso(file.firstSeenAt || file.lastSeenAt || Date.now()),
+      lastSeenAt: toIso(file.lastSeenAt || file.firstSeenAt || Date.now()),
+      confidenceAvg: file.confidenceCount
+        ? Math.round((file.confidenceSum / file.confidenceCount) * 100) / 100
+        : null,
+      activities: [...file.activities].slice(0, 3),
+      current: file.current,
+    }));
+
+  timeline.sort((a, b) => Date.parse(b.at) - Date.parse(a.at));
+
+  const interventionIds = new Set(interventions.map((i) => i.collisionId));
+  const roi = computeRoi(member, collisions, interventionIds, gitState?.changedFiles?.length ?? 0);
+
+  return {
+    podId,
+    member,
+    generatedAt: new Date().toISOString(),
+    windowHours,
+    totals: {
+      files: fileRows.length,
+      observations: memberObservations.length,
+      gitChanges: gitState?.changedFiles?.length ?? 0,
+    },
+    files: fileRows,
+    timeline: timeline.slice(0, limit),
+    roi,
+  };
+}
+
+function computeRoi(
+  member: string,
+  collisions: Collision[],
+  interventionCollisionIds: Set<string>,
+  changedFileCount: number,
+): MemberWorkHistoryRoi {
+  const involved = (c: Collision) =>
+    c.engineers?.some((e) => sameMember(e, member)) ||
+    sameMember(c.researcher, member) ||
+    sameMember(c.editor, member);
+
+  const eligible = collisions.filter(
+    (c) =>
+      involved(c) &&
+      interventionCollisionIds.has(c.id) &&
+      (c.gitOverlap === true || c.severity === 'critical'),
+  );
+
+  const weightOf = (c: Collision): { label: string; minutes: number } => {
+    if (c.overlapKind === 'research') return { label: 'research overlap', minutes: 10 };
+    if (c.severity === 'critical') return { label: 'critical same-file', minutes: 45 };
+    if (c.severity === 'warn') return { label: 'warn same-file', minutes: 20 };
+    return { label: 'info same-file', minutes: 10 };
+  };
+
+  let savedMinutes = 0;
+  const groups = new Map<string, { count: number; minutesEach: number }>();
+  for (const c of eligible) {
+    const { label, minutes } = weightOf(c);
+    savedMinutes += minutes / Math.max(1, c.engineers?.length ?? 1);
+    const g = groups.get(label) ?? { count: 0, minutesEach: minutes };
+    g.count += 1;
+    groups.set(label, g);
+  }
+
+  const filesDeconflicted = new Set(eligible.map((c) => c.file)).size;
+  return {
+    savedMinutes: Math.round(savedMinutes),
+    clashesCaught: eligible.length,
+    filesDeconflicted,
+    conflictFreeFiles: Math.max(0, changedFileCount - filesDeconflicted),
+    totalFiles: changedFileCount,
+    breakdown: [...groups.entries()].map(([label, g]) => ({
+      label,
+      count: g.count,
+      minutesEach: g.minutesEach,
+    })),
+  };
+}

backend/src/activity/store.ts

@@ -0,0 +1,197 @@
+import type {
+  Collision,
+  EngineerContext,
+  Intervention,
+  InterventionOutcome,
+  PodActivityEvent,
+} from '@podman/shared';
+import { getDb } from '../memory/db.js';
+
+interface EngineerStateDoc {
+  _id: string;
+  podId: string;
+  name: string;
+  changedFiles?: string[];
+  diffStat?: string | null;
+  recentCommit?: string | null;
+  branch?: string | null;
+  gitUpdatedAt?: Date | string;
+  updatedAt?: Date | string;
+}
+
+function toIso(value: Date | string | undefined): string {
+  if (value instanceof Date) return value.toISOString();
+  if (value) return new Date(value).toISOString();
+  return new Date(0).toISOString();
+}
+
+function clean(value: string | undefined): string | undefined {
+  const trimmed = value?.trim();
+  return trimmed || undefined;
+}
+
+function shortFiles(files: string[] | undefined): string {
+  if (!files?.length) return 'clean working tree';
+  const sample = files.slice(0, 3).join(', ');
+  return files.length > 3 ? `${sample}, +${files.length - 3} more` : sample;
+}
+
+function observationEvent(doc: EngineerContext): PodActivityEvent {
+  const file = clean(doc.currentFile);
+  const symbol = clean(doc.currentSymbol);
+  return {
+    id: `observation:${doc.engineerId}:${doc.observedAt}`,
+    podId: doc.podId,
+    kind: 'observation',
+    source: 'vision',
+    actor: doc.engineerId,
+    actors: [doc.engineerId],
+    file,
+    imageUrl: doc.screenshotDataUrl,
+    title: file ? `Working in ${file}` : 'Screen context updated',
+    detail: [
+      symbol ? `symbol ${symbol}` : undefined,
+      clean(doc.activity),
+      doc.hasUnpushedChanges ? 'unpushed changes visible' : undefined,
+      `confidence ${Math.round(doc.confidence * 100)}%`,
+    ]
+      .filter(Boolean)
+      .join(' · '),
+    severity: doc.hasUnpushedChanges ? 'warn' : 'info',
+    at: doc.observedAt,
+  };
+}
+
+function gitEvent(doc: EngineerStateDoc): PodActivityEvent {
+  const changedFiles = doc.changedFiles ?? [];
+  return {
+    id: `git:${doc._id}:${toIso(doc.gitUpdatedAt ?? doc.updatedAt)}`,
+    podId: doc.podId,
+    kind: 'git',
+    source: 'git',
+    actor: doc.name,
+    actors: [doc.name],
+    title: changedFiles.length ? `${changedFiles.length} local file changes` : 'Git state is clean',
+    detail: [
+      doc.branch ? `branch ${doc.branch}` : undefined,
+      shortFiles(changedFiles),
+      doc.recentCommit ? `head ${doc.recentCommit}` : undefined,
+    ]
+      .filter(Boolean)
+      .join(' · '),
+    severity: changedFiles.length ? 'warn' : 'info',
+    at: toIso(doc.gitUpdatedAt ?? doc.updatedAt),
+  };
+}
+
+function collisionEvent(doc: Collision): PodActivityEvent {
+  return {
+    id: `collision:${doc.id}`,
+    podId: doc.podId,
+    kind: 'collision',
+    source: 'memory',
+    actor: doc.engineers[0],
+    actors: doc.engineers,
+    file: doc.file,
+    title: `${doc.engineers.join(' + ')} conflict on ${doc.file}`,
+    detail: [
+      doc.symbol ? `symbol ${doc.symbol}` : undefined,
+      doc.githubState?.unpushed ? 'unpushed local changes involved' : undefined,
+      doc.githubState?.openPrs?.length
+        ? `open PRs ${doc.githubState.openPrs.join(', ')}`
+        : undefined,
+    ]
+      .filter(Boolean)
+      .join(' · '),
+    severity: doc.severity,
+    at: doc.detectedAt,
+  };
+}
+
+function interventionEvent(doc: Intervention): PodActivityEvent {
+  return {
+    id: `intervention:${doc.id}`,
+    podId: doc.podId,
+    kind: 'intervention',
+    source: 'hermes',
+    title: `Hermes ${doc.status} ${doc.suggestedAction.kind.replaceAll('_', ' ')}`,
+    detail: doc.message,
+    severity: doc.status === 'accepted' ? 'success' : doc.status === 'dismissed' ? 'info' : 'warn',
+    at: doc.createdAt,
+  };
+}
+
+function outcomeEvent(doc: InterventionOutcome): PodActivityEvent {
+  return {
+    id: `outcome:${doc.interventionId}:${doc.recordedAt}`,
+    podId: doc.podId,
+    kind: 'outcome',
+    source: 'policy',
+    title: doc.accepted ? 'Intervention accepted' : 'Intervention dismissed',
+    detail: doc.wasRealCollision ? 'confirmed real collision' : 'marked as false positive',
+    severity: doc.accepted ? 'success' : 'info',
+    at: doc.recordedAt,
+  };
+}
+
+export async function listPodActivity(podId: string, limit = 80): Promise<PodActivityEvent[]> {
+  const db = await getDb();
+  const [observations, gitStates, collisions, interventions, outcomes] = await Promise.all([
+    db
+      .collection<EngineerContext>('observations')
+      .find({ podId }, { projection: { _id: 0 } })
+      .sort({ observedAt: -1 })
+      .limit(limit)
+      .toArray(),
+    db
+      .collection<EngineerStateDoc>('engineer_states')
+      .find(
+        { podId },
+        {
+          projection: {
+            _id: 1,
+            podId: 1,
+            name: 1,
+            changedFiles: 1,
+            diffStat: 1,
+            recentCommit: 1,
+            branch: 1,
+            gitUpdatedAt: 1,
+            updatedAt: 1,
+          },
+        },
+      )
+      .sort({ gitUpdatedAt: -1 })
+      .limit(limit)
+      .toArray(),
+    db
+      .collection<Collision>('collisions')
+      .find({ podId }, { projection: { _id: 0 } })
+      .sort({ detectedAt: -1 })
+      .limit(limit)
+      .toArray(),
+    db
+      .collection<Intervention>('interventions')
+      .find({ podId }, { projection: { _id: 0 } })
+      .sort({ createdAt: -1 })
+      .limit(limit)
+      .toArray(),
+    db
+      .collection<InterventionOutcome>('outcomes')
+      .find({ podId }, { projection: { _id: 0 } })
+      .sort({ recordedAt: -1 })
+      .limit(limit)
+      .toArray(),
+  ]);
+
+  return [
+    ...observations.map(observationEvent),
+    ...gitStates.map(gitEvent),
+    ...collisions.map(collisionEvent),
+    ...interventions.map(interventionEvent),
+    ...outcomes.map(outcomeEvent),
+  ]
+    .filter((event) => event.at !== new Date(0).toISOString())
+    .sort((a, b) => Date.parse(b.at) - Date.parse(a.at))
+    .slice(0, limit);
+}

backend/src/agent.ts

@@ -6,6 +6,7 @@ import {
   VideoStream,
   VideoBufferType,
   dispose,
+  type VideoFrameEvent,
   type RemoteTrack,
   type RemoteTrackPublication,
   type RemoteParticipant,
@@ -14,10 +15,13 @@ import sharp from 'sharp';
 import { AccessToken } from 'livekit-server-sdk';
 import { env } from './env.js';
 import { PodMan } from './agent/podman.js';
+import { initMemory } from './memory/db.js';
 
 const POD_ROOM = process.env.POD_ROOM ?? 'demo-pod';
 const HERMES_IDENTITY = 'podman-hermes';
 const SAMPLE_INTERVAL_MS = 1000; // ~1 fps to the vision model
+const SCREEN_THUMBNAIL_WIDTH = 360;
+const SHUTDOWN_GRACE_MS = 5000;
 
 async function agentToken(room: string): Promise<string> {
   const at = new AccessToken(env.LIVEKIT_API_KEY, env.LIVEKIT_API_SECRET, {
@@ -29,7 +33,25 @@ async function agentToken(room: string): Promise<string> {
   return at.toJwt();
 }
 
+async function withTimeout<T>(promise: Promise<T>, ms: number): Promise<T | null> {
+  let timer: NodeJS.Timeout | undefined;
+  try {
+    return await Promise.race([
+      promise,
+      new Promise<null>((resolve) => {
+        timer = setTimeout(() => resolve(null), ms);
+      }),
+    ]);
+  } finally {
+    if (timer) clearTimeout(timer);
+  }
+}
+
 async function main() {
+  // MongoDB is mandatory. Verify the connection before joining the room so bad
+  // creds / unreachable Atlas fail loudly at boot, not silently mid-demo.
+  await initMemory();
+
   const room = new Room();
   const podman = new PodMan(room, POD_ROOM);
   await room.connect(env.LIVEKIT_URL, await agentToken(POD_ROOM), {
@@ -40,6 +62,57 @@ async function main() {
   console.log(`[agent] ${HERMES_IDENTITY} joined room ${POD_ROOM}`);
 
   const lastSent = new Map<string, number>();
+  const inFlight = new Set<string>();
+  const activeStreams = new Map<string, ReadableStreamDefaultReader<VideoFrameEvent>>();
+
+  const streamKey = (
+    track: RemoteTrack,
+    pub: RemoteTrackPublication,
+    participant: RemoteParticipant,
+  ) => `${participant.identity}:${pub.sid ?? track.sid ?? 'screen'}`;
+
+  const stopStream = async (key: string) => {
+    const reader = activeStreams.get(key);
+    if (!reader) return;
+    activeStreams.delete(key);
+    await reader.cancel().catch(() => {});
+    try {
+      reader.releaseLock();
+    } catch {
+      /* already released */
+    }
+  };
+
+  const processFrame = async (engineerId: string, event: VideoFrameEvent) => {
+    const now = Date.now();
+    if (now - (lastSent.get(engineerId) ?? 0) < SAMPLE_INTERVAL_MS) return;
+    if (inFlight.has(engineerId)) return;
+    lastSent.set(engineerId, now);
+    inFlight.add(engineerId);
+
+    try {
+      const rgba = event.frame.convert(VideoBufferType.RGBA);
+      const pixels = Buffer.from(rgba.data);
+      const raw = { width: rgba.width, height: rgba.height, channels: 4 } as const;
+      const [jpeg, thumbnail] = await Promise.all([
+        sharp(pixels, { raw })
+          .resize({ width: 1280, withoutEnlargement: true })
+          .jpeg({ quality: 70 })
+          .toBuffer(),
+        sharp(pixels, { raw })
+          .resize({ width: SCREEN_THUMBNAIL_WIDTH, withoutEnlargement: true })
+          .jpeg({ quality: 42 })
+          .toBuffer(),
+      ]);
+      await podman.onScreenFrame(
+        engineerId,
+        jpeg,
+        `data:image/jpeg;base64,${thumbnail.toString('base64')}`,
+      );
+    } finally {
+      inFlight.delete(engineerId);
+    }
+  };
 
   room.on(
     RoomEvent.TrackSubscribed,
@@ -47,30 +120,65 @@ async function main() {
       if (track.kind !== TrackKind.KIND_VIDEO || pub.source !== TrackSource.SOURCE_SCREENSHARE)
         return;
       const id = participant.identity;
+      const key = streamKey(track, pub, participant);
       const stream = new VideoStream(track);
+      void stopStream(key);
+      const reader = stream.getReader();
+      activeStreams.set(key, reader);
       void (async () => {
-        for await (const event of stream) {
-          const now = Date.now();
-          if (now - (lastSent.get(id) ?? 0) < SAMPLE_INTERVAL_MS) continue; // THROTTLE
-          lastSent.set(id, now);
-          const rgba = event.frame.convert(VideoBufferType.RGBA);
-          const jpeg = await sharp(Buffer.from(rgba.data), {
-            raw: { width: rgba.width, height: rgba.height, channels: 4 },
-          })
-            .resize({ width: 1280, withoutEnlargement: true })
-            .jpeg({ quality: 70 })
-            .toBuffer();
-          await podman.onScreenFrame(id, jpeg);
+        try {
+          while (activeStreams.get(key) === reader) {
+            const { done, value } = await reader.read();
+            if (done) break;
+            void processFrame(id, value).catch((err) =>
+              console.error(`[agent] frame sample failed for ${id}: ${(err as Error).message}`),
+            );
+          }
+        } catch (err) {
+          console.error(`[agent] screen stream failed for ${id}: ${(err as Error).message}`);
+        } finally {
+          if (activeStreams.get(key) === reader) activeStreams.delete(key);
+          await reader.cancel().catch(() => {});
+          try {
+            reader.releaseLock();
+          } catch {
+            /* already released */
+          }
         }
       })();
     },
   );
 
+  room.on(
+    RoomEvent.TrackUnsubscribed,
+    (track: RemoteTrack, pub: RemoteTrackPublication, participant: RemoteParticipant) => {
+      void stopStream(streamKey(track, pub, participant));
+    },
+  );
+
+  room.on(RoomEvent.ParticipantDisconnected, (participant: RemoteParticipant) => {
+    for (const key of [...activeStreams.keys()]) {
+      if (key.startsWith(`${participant.identity}:`)) void stopStream(key);
+    }
+  });
+
+  let shuttingDown = false;
   const shutdown = async () => {
-    await room.disconnect();
-    await dispose();
+    if (shuttingDown) return;
+    shuttingDown = true;
+    await withTimeout(
+      Promise.all([...activeStreams.keys()].map(stopStream)).then(() => room.disconnect()),
+      SHUTDOWN_GRACE_MS,
+    );
+    await withTimeout(dispose(), SHUTDOWN_GRACE_MS);
     process.exit(0);
   };
+  room.on(RoomEvent.Disconnected, () => {
+    if (!shuttingDown) {
+      console.error('[agent] LiveKit disconnected; exiting so systemd restarts the worker');
+      process.exit(1);
+    }
+  });
   process.on('SIGINT', shutdown);
   process.on('SIGTERM', shutdown);
 }

backend/src/agent/podman.ts

@@ -1,19 +1,70 @@
 import { RoomEvent, type Room } from '@livekit/rtc-node';
 import type { EngineerContext, Collision, Intervention, DataMessage } from '@podman/shared';
-import { DATA_TOPIC } from '@podman/shared';
 import { analyzeFrame } from '../vision/gemini.js';
 import { detectCollisions } from '../collision/detector.js';
+import { detectResearchOverlaps } from '../collision/research.js';
 import { getGithubState } from '../github/client.js';
-import { recordObservation, recordCollision, recordIntervention } from '../memory/store.js';
-import { getGitStates } from '../memory/db.js';
+import {
+  recordObservation,
+  recordCollision,
+  recordIntervention,
+  recordSuppression,
+  updateInterventionStatus,
+} from '../memory/store.js';
+import { getGitStates, type GitState } from '../memory/db.js';
 import { recallSimilar } from '../memory/vectors.js';
 import { shouldIntervene, preferredAction } from '../memory/policy.js';
-import { speak } from '../voice/live.js';
-import { publishHermesMessage } from '../action/hermes.js';
+import { publishHermesIntervention } from '../action/hermes.js';
+
+/** Strip a git-status prefix ("M ", "?? ") and reduce a path to its lowercased
+ *  basename — matches comparableFile() in memory/store.ts so keys line up. */
+function comparableBasename(raw?: string): string {
+  return (
+    (raw ?? '')
+      .trim()
+      .replace(/^(\?\?|[MADRCU!]{1,2})\s+/, '')
+      .split(/[\\/]/)
+      .pop()
+      ?.toLowerCase() ?? ''
+  );
+}
+
+/** Canonicalize an engineer name for case/whitespace-insensitive matching, so
+ *  "Karti" and "karti" resolve to the same engineer's git state. */
+function canonicalName(raw?: string): string {
+  return (raw ?? '').trim().toLowerCase();
+}
+
+/** How long a still-present conflict stays muted after we voice it, before it
+ *  re-alerts. Edge-trigger alone permanently muted files that stay dirty for
+ *  the whole session (e.g. README everyone tests on). This bounds that: voice
+ *  once, then re-alert at most every interval while it persists. */
+const CONFLICT_REALERT_MS = Number(process.env.CONFLICT_REALERT_MS ?? '20000');
+
+/** Git ground truth: do ALL involved engineers currently have the collided file
+ *  in their changedFiles? Computed at detection time while git state is fresh. */
+function engineersOverlapOnFile(collision: Collision, gitStates: Map<string, GitState>): boolean {
+  const target = comparableBasename(collision.file);
+  if (!target || collision.engineers.length < 2) return false;
+  const byCanon = new Map<string, string[]>();
+  for (const [name, st] of gitStates) byCanon.set(canonicalName(name), st.changedFiles);
+  return collision.engineers.every((e) =>
+    (byCanon.get(canonicalName(e)) ?? []).some((f) => comparableBasename(f) === target),
+  );
+}
 
 export class PodMan {
   private contexts = new Map<string, EngineerContext>();
-  private encoder = new TextEncoder();
+  /**
+   * Conflicts we have already voiced, keyed by file + engineer pair (see
+   * conflictKey), mapped to the time we last voiced them. Edge-triggered:
+   * speak once when a conflict appears. Re-armed (deleted here) by
+   * onScreenFrame as soon as a detection cycle no longer sees it, so a
+   * resolved-then-recurring conflict alerts again. Additionally, a conflict
+   * that *persists* re-alerts every CONFLICT_REALERT_MS so a perpetually-dirty
+   * file (README) doesn't go silent forever after the first alert.
+   */
+  private activeConflicts = new Map<string, number>();
 
   constructor(
     private room: Room,
@@ -30,14 +81,20 @@ export class PodMan {
           if (c)
             c.hasUnpushedChanges = msg.report.unpushedCount > 0 || msg.report.dirtyFiles.length > 0;
         }
+        if (msg.type === 'ACK') {
+          void updateInterventionStatus(msg.interventionId, msg.status).catch((err) =>
+            console.error(`[memory] intervention ack failed: ${(err as Error).message}`),
+          );
+        }
       } catch {
         /* ignore malformed */
       }
     });
   }
 
-  async onScreenFrame(engineerId: string, jpeg: Buffer): Promise<void> {
+  async onScreenFrame(engineerId: string, jpeg: Buffer, screenshotDataUrl?: string): Promise<void> {
     const ctx = await analyzeFrame(engineerId, this.podId, jpeg);
+    if (screenshotDataUrl) ctx.screenshotDataUrl = screenshotDataUrl;
     this.contexts.set(engineerId, ctx);
     await recordObservation(ctx);
 
@@ -50,26 +107,123 @@ export class PodMan {
     }
 
     const github = await getGithubState(); // cached
-    const collisions = detectCollisions([...this.contexts.values()], github);
+    const contexts = [...this.contexts.values()];
+    const fileCollisions = detectCollisions(contexts, github, gitStates);
+    const researchCollisions = await detectResearchOverlaps(contexts, gitStates);
+    const collisions = [...fileCollisions, ...researchCollisions];
+
+    // Re-arm: any conflict we previously voiced that is no longer present has
+    // resolved, so allow it to alert again if it recurs.
+    const current = new Set(collisions.map((c) => this.conflictKey(c)));
+    for (const key of this.activeConflicts.keys()) {
+      if (!current.has(key)) this.activeConflicts.delete(key);
+    }
+
+    // Capture git ground-truth overlap now, while engineer_states are fresh, so
+    // the outcome-time verifier never depends on a stale sidecar or a late click.
+    for (const collision of collisions) {
+      if (collision.overlapKind !== 'research') {
+        collision.gitOverlap = engineersOverlapOnFile(collision, gitStates);
+      }
+    }
+
     for (const collision of collisions) await this.handle(collision);
   }
 
-  private async handle(collision: Collision): Promise<void> {
-    const prior = await recallSimilar(collision); // Loop A: exact/vector recall raises confidence
-    if (prior) collision.severity = 'critical';
-    if (!shouldIntervene(collision, prior)) return; // Loop B: policy gate
+  /**
+   * Stable identity for a conflict, independent of the Date.now() baked into
+   * collision.id. Mirrors comparableFile() in memory/store.ts so keys line up:
+   * strip any git-status prefix ("M ", "?? ") and reduce to a lowercased
+   * basename.
+   */
+  private conflictKey(collision: Collision): string {
+    const who = [...collision.engineers].map(canonicalName).sort().join('+');
+    return `${collision.overlapKind ?? 'file'}:${comparableBasename(collision.file)}:${who}`;
+  }
 
+  private async handle(collision: Collision): Promise<void> {
+    const key = this.conflictKey(collision);
+    const lastAlerted = this.activeConflicts.get(key);
+    // Edge-trigger + time-based re-arm: stay quiet right after voicing, but
+    // re-alert a persistent conflict once CONFLICT_REALERT_MS has elapsed.
+    if (lastAlerted !== undefined && Date.now() - lastAlerted < CONFLICT_REALERT_MS) return;
+
+    const prior = await recallSimilar(collision); // Loop A: exact/vector recall raises confidence
+    // Only escalate to critical (which triggers the spoken alert) when the
+    // recalled prior was an *accepted real* collision. Blanket-escalating every
+    // recall — including dismissed/false-positive priors — masked the learned
+    // routing in preferredAction and made recalled noise scream "CRITICAL".
+    // (RSI Step 2 — continual-learning/policy.md:62-63, plan.md:66)
+    if (prior?.priorOutcome?.accepted && prior?.priorOutcome?.wasRealCollision) {
+      collision.severity = 'critical';
+    }
+    if (!shouldIntervene(collision, prior)) {
+      // Feature A — make the negative-feedback loop VISIBLE. If we stayed quiet
+      // *specifically* because this signature was DISMISSED before, record a
+      // durable suppressed-repeat event (timestamped now, at the repeat) so the
+      // activity stream shows the learning instead of nothing.
+      if (prior?.priorOutcome && !prior.priorOutcome.accepted) {
+        // Mark handled first — like the alert path below — so we record ONE
+        // suppressed-repeat per recurrence, not once per frame; it re-arms via
+        // the resolution sweep in onScreenFrame. Awaited like recordCollision so
+        // the durable learning proof is reliably written.
+        this.activeConflicts.set(key, Date.now());
+        await recordSuppression(
+          collision,
+          prior.priorOutcome.interventionId,
+          prior.priorOutcome.recordedAt,
+        );
+      }
+      return; // Loop B: policy gate
+    }
+
+    this.activeConflicts.set(key, Date.now()); // claim + timestamp; re-armed on resolution or after CONFLICT_REALERT_MS
     await recordCollision(collision);
     const action = preferredAction(collision, prior);
-    const names = collision.engineers.join(' and ');
+    const shortFile = collision.file.split('/').pop() ?? collision.file;
+    const isResearchOverlap = collision.overlapKind === 'research';
+
+    if (isResearchOverlap) {
+      const researcher = collision.researcher ?? collision.engineers[1] ?? 'A teammate';
+      const editor = collision.editor ?? collision.engineers[0] ?? 'a teammate';
+      const topic = collision.researchTopic ?? 'the same area';
+      const source = collision.researchSource ? ` (${collision.researchSource})` : '';
+      const message = `🤝 ${researcher} is researching ${topic}${source} while ${editor} edits ${shortFile} — sync up before duplicating effort.`;
+      const voiceLine = `${researcher} is researching ${topic} while ${editor} works on ${shortFile}. Worth a quick sync.`;
+      const intervention: Intervention = {
+        id: `int_${Date.now()}`,
+        collisionId: collision.id,
+        podId: this.podId,
+        kind: 'card',
+        message,
+        suggestedAction: {
+          kind: 'ping_teammate',
+          params: {
+            file: collision.file,
+            summary: message,
+            engineers: collision.engineers,
+            researchTopic: collision.researchTopic,
+            researchSource: collision.researchSource,
+          },
+        },
+        status: 'pending',
+        createdAt: new Date().toISOString(),
+      };
+      await recordIntervention(intervention);
+      await publishHermesIntervention(this.room, collision, intervention, voiceLine);
+      return;
+    }
+
+    const names = collision.engineers.join(' + ');
+
+    // Terse, demo-centered alert — short and direct, not chatty AI prose.
     const message =
-      `${names} are both editing ${collision.file}` +
-      (collision.githubState?.unpushed ? ' and one has unpushed changes.' : '.') +
-      (prior?.priorOutcome?.accepted
-        ? ` I've seen this conflict pattern before; last time the team accepted the ${prior.priorIntervention?.suggestedAction.kind.replaceAll('_', ' ') ?? 'suggested'} action.`
-        : prior
-          ? ` I've seen this conflict pattern before.`
-          : '');
+      `Conflict: ${names} both on ${shortFile}` +
+      (collision.githubState?.unpushed ? ' (unpushed).' : '.') +
+      (prior ? ' Seen before.' : '');
+
+    // Spoken line stays short, but uses natural phrasing for Gemini TTS prosody.
+    const voiceLine = `${names} are both editing ${shortFile}. Please sync before pushing.`;
 
     const intervention: Intervention = {
       id: `int_${Date.now()}`,
@@ -90,12 +244,9 @@ export class PodMan {
     };
     await recordIntervention(intervention);
 
-    const data: DataMessage = { type: 'COLLISION', collision, intervention };
-    await this.room.localParticipant?.publishData(this.encoder.encode(JSON.stringify(data)), {
-      reliable: true,
-      topic: DATA_TOPIC,
-    });
-    await publishHermesMessage(this.room, collision, intervention);
-    if (collision.severity === 'critical') await speak(this.room, message);
+    // Voice every intervention, not just critical escalations. Priority is set
+    // by severity inside publishHermesIntervention: critical jumps the queue,
+    // the rest play sequentially so concurrent alerts don't garble each other.
+    await publishHermesIntervention(this.room, collision, intervention, voiceLine);
   }
 }

backend/src/auth.ts

@@ -0,0 +1,30 @@
+import { clerkMiddleware, getAuth } from '@clerk/express';
+import type { Request, RequestHandler, Response } from 'express';
+import { env } from './env.js';
+
+export interface RequestUserContext {
+  clerkUserId: string;
+}
+
+export const clerkAuthMiddleware: RequestHandler = env.CLERK_SECRET_KEY
+  ? clerkMiddleware()
+  : (_req, _res, next) => next();
+
+export function requestUser(req: Request): RequestUserContext | null {
+  if (!env.CLERK_SECRET_KEY) return null;
+  try {
+    const auth = getAuth(req);
+    return auth.isAuthenticated && auth.userId ? { clerkUserId: auth.userId } : null;
+  } catch {
+    return null;
+  }
+}
+
+export function requireRequestUser(req: Request, res: Response): RequestUserContext | null {
+  const user = requestUser(req);
+  if (!user) {
+    res.status(401).json({ error: 'sign in required' });
+    return null;
+  }
+  return user;
+}

backend/src/collision/detector.ts

@@ -1,34 +1,100 @@
 import type { EngineerContext, Collision, GithubStateSnapshot } from '@podman/shared';
+import type { GitState } from '../memory/db.js';
 
-function normalize(path?: string): string | undefined {
-  if (!path) return undefined;
-  return path.replace(/^\.?\/?(src\/)?/, 'src/').toLowerCase();
+/**
+ * Collapse any path-ish string to a comparable file key.
+ *
+ * Vision reads paths at inconsistent depths ("agent.ts" vs
+ * "backend/src/agent.ts"), and git status lines carry a status prefix
+ * ("M README.md", "?? test.txt"). Reduce both to a lowercased basename so the
+ * same file matches regardless of how it was observed. Basename matching can
+ * over-group two same-named files in different dirs, but for live coordination
+ * that bias toward firing is the right trade.
+ */
+function fileKey(raw?: string): string | undefined {
+  if (!raw) return undefined;
+  const stripped = raw.trim().replace(/^(\?\?|[MADRCU!]{1,2})\s+/, ''); // drop git status prefix
+  const base = stripped.split(/[\\/]/).pop()?.trim();
+  if (!base) return undefined;
+  return base.toLowerCase();
 }
 
+/**
+ * Canonicalize an engineer identity for case/whitespace-insensitive matching.
+ * Vision reports a display name ("Karti") while the git watcher reports a handle
+ * ("karti"); without this the same human collides with themselves.
+ */
+function canonicalName(raw: string): string {
+  return raw.trim().toLowerCase();
+}
+
+interface Touch {
+  engineerId: string;
+  unpushed: boolean;
+  display: string; // original path/name to show in the card
+}
+
+/**
+ * Detect same-file collisions from two fused signals:
+ *  1. Vision — what each engineer currently has on screen.
+ *  2. Git ground truth — each engineer's dirty/unpushed `changedFiles`.
+ *
+ * Git overlap is deterministic and does not require both engineers to have the
+ * file on screen at the same instant, so it is the reliable demo path.
+ */
 export function detectCollisions(
   contexts: EngineerContext[],
   github: GithubStateSnapshot,
+  gitStates?: Map<string, GitState>,
 ): Collision[] {
-  const byFile = new Map<string, EngineerContext[]>();
+  const byFile = new Map<string, Touch[]>();
+  const add = (key: string | undefined, touch: Touch): void => {
+    if (!key) return;
+    (byFile.get(key) ?? byFile.set(key, []).get(key)!).push(touch);
+  };
+
+  // Signal 1: live vision context.
   for (const c of contexts) {
-    const f = normalize(c.currentFile);
-    if (!f) continue;
-    (byFile.get(f) ?? byFile.set(f, []).get(f)!).push(c);
+    add(fileKey(c.currentFile), {
+      engineerId: c.engineerId,
+      unpushed: c.hasUnpushedChanges === true,
+      display: c.currentFile ?? '',
+    });
+  }
+
+  // Signal 2: git ground truth (a dirty changed file is unpushed by definition).
+  if (gitStates) {
+    for (const [engineerId, git] of gitStates) {
+      for (const changed of git.changedFiles) {
+        add(fileKey(changed), { engineerId, unpushed: true, display: changed });
+      }
+    }
   }
 
   const out: Collision[] = [];
-  for (const [file, group] of byFile) {
-    const engineers = [...new Set(group.map((g) => g.engineerId))];
-    if (engineers.length < 2) continue;
+  for (const [, touches] of byFile) {
+    // Distinct PEOPLE, case/whitespace-insensitive — one display name per person.
+    // Vision "Karti" and git "karti" are the same human, not a collision.
+    const byPerson = new Map<string, string>(); // canonical id -> display name
+    for (const t of touches) {
+      const id = canonicalName(t.engineerId);
+      if (id && !byPerson.has(id)) byPerson.set(id, t.engineerId);
+    }
+    if (byPerson.size < 2) continue; // need two distinct people on one file
+    const engineers = [...byPerson.values()];
 
-    const anyUnpushed = group.some((g) => g.hasUnpushedChanges) || github.unpushed === true;
+    const anyUnpushed = touches.some((t) => t.unpushed) || github.unpushed === true;
     if (!anyUnpushed) continue; // the crux GitHub alone cannot answer
 
+    // Show the most specific path we saw for this file.
+    const display =
+      touches.map((t) => t.display).sort((a, b) => b.length - a.length)[0] ?? touches[0]!.display;
+
     out.push({
-      id: `col_${file}_${Date.now()}`,
-      podId: group[0]!.podId,
-      file,
-      symbol: group.find((g) => g.currentSymbol)?.currentSymbol,
+      id: `col_${fileKey(display)}_${Date.now()}`,
+      podId: contexts[0]?.podId ?? 'demo-pod',
+      file: display,
+      symbol: contexts.find((c) => c.currentSymbol)?.currentSymbol,
       engineers,
       severity: 'warn',
       githubState: { ...github, unpushed: anyUnpushed },

backend/src/collision/research.ts

@@ -0,0 +1,147 @@
+import type { Collision, EngineerContext } from '@podman/shared';
+import { env } from '../env.js';
+import type { GitState } from '../memory/db.js';
+import { semanticSimilarity } from '../memory/vectors.js';
+
+export interface ResearchOpts {
+  similarity?: (a: string, b: string) => Promise<number | null>;
+  threshold?: number;
+}
+
+interface EditorFile {
+  engineerId: string;
+  file: string;
+  symbol?: string;
+  activity?: string;
+}
+
+interface Candidate {
+  collision: Collision;
+  score: number;
+}
+
+function stripGitPrefix(raw: string): string {
+  return raw.trim().replace(/^(\?\?|[MADRCU!]{1,2})\s+/, '');
+}
+
+/** Case/whitespace-insensitive identity so vision "Karti" and git "karti" are
+ *  recognized as the same person and never flagged researching-vs-editing self. */
+function canonicalName(raw: string): string {
+  return raw.trim().toLowerCase();
+}
+
+function fileStem(raw: string): string {
+  const base = stripGitPrefix(raw).split(/[\\/]/).pop()?.trim().toLowerCase() ?? '';
+  return base.replace(/\.[^.]+$/, '');
+}
+
+function words(raw: string): string[] {
+  return raw
+    .toLowerCase()
+    .replace(/[^a-z0-9]+/g, ' ')
+    .split(/\s+/)
+    .filter((word) => word.length >= 3);
+}
+
+function uniqueTokens(raw: string): Set<string> {
+  const tokens = new Set(words(raw));
+  for (const word of [...tokens]) {
+    if (word.endsWith('kit')) tokens.add(word.replace(/kit$/, ''));
+    if (word.endsWith('s')) tokens.add(word.slice(0, -1));
+  }
+  return tokens;
+}
+
+function fallbackMatches(researchText: string, fileText: string): boolean {
+  const research = uniqueTokens(researchText);
+  const file = uniqueTokens(fileText);
+  for (const token of file) {
+    if (research.has(token)) return true;
+  }
+  return false;
+}
+
+function collectEditorFiles(
+  contexts: EngineerContext[],
+  gitStates: Map<string, GitState> | undefined,
+): EditorFile[] {
+  const files = new Map<string, EditorFile>();
+  const add = (editor: EditorFile): void => {
+    const stem = fileStem(editor.file);
+    if (!stem) return;
+    files.set(`${editor.engineerId}:${stripGitPrefix(editor.file)}`, editor);
+  };
+
+  for (const [engineerId, git] of gitStates ?? []) {
+    for (const changed of git.changedFiles) {
+      add({ engineerId, file: changed });
+    }
+  }
+
+  for (const context of contexts) {
+    if (context.mode !== 'research' && context.currentFile) {
+      add({
+        engineerId: context.engineerId,
+        file: context.currentFile,
+        symbol: context.currentSymbol,
+        activity: context.activity,
+      });
+    }
+  }
+
+  return [...files.values()];
+}
+
+export async function detectResearchOverlaps(
+  contexts: EngineerContext[],
+  gitStates: Map<string, GitState> | undefined,
+  opts: ResearchOpts = {},
+): Promise<Collision[]> {
+  const similarity = opts.similarity ?? semanticSimilarity;
+  const threshold = opts.threshold ?? env.RESEARCH_OVERLAP_THRESHOLD;
+  const researchers = contexts.filter((c) => c.mode === 'research' && c.researchTopic);
+  const editorFiles = collectEditorFiles(contexts, gitStates);
+  const bestByResearcher = new Map<string, Candidate>();
+
+  for (const researcher of researchers) {
+    const topic = researcher.researchTopic?.trim();
+    if (!topic) continue;
+    const source = researcher.researchSource?.trim();
+    const researchText = [topic, source].filter(Boolean).join(' ');
+
+    for (const editor of editorFiles) {
+      if (canonicalName(editor.engineerId) === canonicalName(researcher.engineerId)) continue;
+
+      const stem = fileStem(editor.file);
+      if (!stem) continue;
+      const fileText = [stem, editor.symbol, editor.activity].filter(Boolean).join(' ');
+      const score = await similarity(researchText, fileText);
+      const matched = score === null ? fallbackMatches(researchText, fileText) : score >= threshold;
+      if (!matched) continue;
+
+      const rank = score ?? 1;
+      const existing = bestByResearcher.get(researcher.engineerId);
+      if (existing && existing.score >= rank) continue;
+
+      bestByResearcher.set(researcher.engineerId, {
+        score: rank,
+        collision: {
+          id: `col_research_${stem}_${Date.now()}`,
+          podId: researcher.podId,
+          file: editor.file,
+          symbol: editor.symbol,
+          engineers: [editor.engineerId, researcher.engineerId],
+          severity: 'warn',
+          overlapKind: 'research',
+          researchTopic: topic,
+          ...(source ? { researchSource: source } : {}),
+          researcher: researcher.engineerId,
+          editor: editor.engineerId,
+          detectedAt: new Date().toISOString(),
+        },
+      });
+    }
+  }
+
+  return [...bestByResearcher.values()].map((candidate) => candidate.collision);
+}

backend/src/env.ts

@@ -1,4 +1,6 @@
-import 'dotenv/config';
+import { config } from 'dotenv';
+
+config({ path: ['.env.local', '../.env.local', '.env', '../.env'] });
 
 function req(name: string): string {
   const v = process.env[name];
@@ -21,10 +23,17 @@ export const env = {
   LIVEKIT_URL: req('LIVEKIT_URL'),
   LIVEKIT_API_KEY: req('LIVEKIT_API_KEY'),
   LIVEKIT_API_SECRET: req('LIVEKIT_API_SECRET'),
+  LIVEKIT_AGENT_NAME: opt('LIVEKIT_AGENT_NAME'),
+  LIVEKIT_CONVERSATION_AGENT_NAME: opt(
+    'LIVEKIT_CONVERSATION_AGENT_NAME',
+    'podman-live-conversation',
+  ),
   // Gemini
   GEMINI_API_KEY: reqAny('GEMINI_API_KEY', ['GOOGLE_API_KEY', 'GOOGLE_GENERATIVE_AI_API_KEY']),
   GEMINI_VISION_MODEL: opt('GEMINI_VISION_MODEL', 'gemini-2.0-flash'),
   GEMINI_LIVE_MODEL: opt('GEMINI_LIVE_MODEL', 'gemini-3.1-flash-tts-preview'),
+  GEMINI_CONVERSATION_MODEL: opt('GEMINI_CONVERSATION_MODEL', 'gemini-3.1-flash-live-preview'),
+  GEMINI_TTS_VOICE: opt('GEMINI_TTS_VOICE', 'Charon'),
   GEMINI_EMBEDDING_MODEL: opt('GEMINI_EMBEDDING_MODEL', 'gemini-embedding-001'),
   // GitHub
   GITHUB_TOKEN: req('GITHUB_TOKEN'),
@@ -35,7 +44,10 @@ export const env = {
   VOYAGE_EMBEDDING_MODEL: opt('VOYAGE_EMBEDDING_MODEL', 'voyage-4-lite'),
   // Server
   PORT: Number(opt('PORT', '8787')),
+  CLERK_SECRET_KEY: opt('CLERK_SECRET_KEY'),
   NUDGE_COOLDOWN_MS: Number(opt('NUDGE_COOLDOWN_MS', '180000')),
+  RESEARCH_OVERLAP_THRESHOLD: Number(opt('RESEARCH_OVERLAP_THRESHOLD', '0.6')),
+  INTERNAL_AGENT_TOKEN: opt('INTERNAL_AGENT_TOKEN'),
 } as const;
 
 export function repoParts(): { owner: string; repo: string } {

backend/src/graph/demo.ts

@@ -11,21 +11,90 @@ export function createDemoPodGraph(podId: string): PodGraph {
   return {
     podId,
     generatedAt: new Date().toISOString(),
+    // Kept consistent with the graph below (3 owner engineers, 1 collision file,
+    // 1 of 1 interventions accepted) so the numbers never contradict the picture.
     metrics: [
       {
         label: 'Learned owners',
-        value: '5',
-        detail: 'Ownership edges retained from accepted interventions.',
+        value: '3',
+        detail: 'Distinct owners retained from accepted interventions.',
       },
       {
         label: 'Open risk paths',
-        value: '2',
-        detail: 'auth.ts and the memory API have converging editors.',
+        value: '1',
+        detail: 'File with two or more converging editors.',
       },
       {
         label: 'Accept rate',
-        value: '86%',
-        detail: 'Interventions accepted this session (+14%).',
+        value: '100%',
+        detail: 'Interventions accepted vs total this session.',
+      },
+    ],
+    loop: {
+      activeStep: 'adapt',
+      steps: [
+        {
+          key: 'observe',
+          label: 'Observe',
+          value: '2',
+          detail: 'Screen context and local git state show two active editors.',
+          status: 'complete',
+        },
+        {
+          key: 'store',
+          label: 'Store',
+          value: '7',
+          detail: 'Observations, collisions, interventions, and outcomes are in MongoDB.',
+          status: 'complete',
+        },
+        {
+          key: 'predict',
+          label: 'Predict',
+          value: '2',
+          detail: 'Same-file risk paths are detected before push.',
+          status: 'complete',
+        },
+        {
+          key: 'outcome',
+          label: 'Outcome',
+          value: '6',
+          detail: 'Accepted and dismissed outcomes supervise future routing.',
+          status: 'complete',
+        },
+        {
+          key: 'adapt',
+          label: 'Adapt',
+          value: '1',
+          detail: 'Accepted real collision created a learned_from edge.',
+          status: 'complete',
+        },
+      ],
+    },
+    activity: [
+      {
+        id: 'demo-learned-auth',
+        at: new Date().toISOString(),
+        kind: 'learned',
+        title: 'Learned Karti owns auth.ts',
+        detail: 'Accepted sync PR outcome created a durable learned_from path.',
+        nodeId: 'engineer:karti',
+        edgeId: 'e7',
+      },
+      {
+        id: 'demo-intervention-sync-pr',
+        at: new Date().toISOString(),
+        kind: 'intervention',
+        title: 'Intervention: sync PR',
+        detail: 'PodMan offered a small coordination card before voice.',
+        nodeId: 'intervention:sync-pr',
+      },
+      {
+        id: 'demo-collision-auth',
+        at: new Date().toISOString(),
+        kind: 'collision',
+        title: 'Collision risk on auth.ts',
+        detail: 'Karti and Yahya converged on unpushed work.',
+        nodeId: 'collision:auth',
       },
     ],
     nodes: [
@@ -186,7 +255,7 @@ export function createDemoPodGraph(podId: string): PodGraph {
         source: 'collision:auth',
         target: 'intervention:sync-pr',
         kind: 'warns',
-        label: 'nudges',
+        label: 'routes',
         strength: 0.9,
       },
       {

backend/src/graph/live.ts

@@ -0,0 +1,603 @@
+import type {
+  PodGraph,
+  PodGraphNode,
+  PodGraphEdge,
+  PodGraphMetric,
+  PodLearningLoop,
+  PodGraphActivity,
+  PodGraphNodeKind,
+  PodGraphEdgeKind,
+  PodGraphNodeStatus,
+} from '@podman/shared';
+import { collections, getGitStates, getDb } from '../memory/db.js';
+
+/**
+ * Live materializer: build a pod's continual-learning graph from the real
+ * collections the agent writes (pods, engineer_states, observations, collisions,
+ * interventions, outcomes) — NOT the hardcoded demo. See docs/live-ui-spec.md §1.
+ *
+ * Pure-read and best-effort. Returns `null` when there is no real activity yet
+ * (only bare roster), so `loadPodGraph` can fall back to the demo graph.
+ */
+
+const ACTIVE_WINDOW_MS = 90_000;
+const MAX_OBSERVATIONS = 250;
+
+/** Strip a `git status --short` XY code (and rename `old -> new`) to a clean path. */
+export function parseGitStatusPath(line: string): string {
+  let s = line.trim();
+  const arrow = s.indexOf(' -> ');
+  if (arrow !== -1) s = s.slice(arrow + 4);
+  else s = s.replace(/^[ACDMRTU?!]{1,2}\s+/, '');
+  return normalizeFile(s);
+}
+
+/** Normalize a file path so vision (`collisions.file`) and git paths match. */
+export function normalizeFile(f: string): string {
+  return f
+    .trim()
+    .replace(/^["']|["']$/g, '')
+    .replace(/^[ACDMRTU?!]{1,2}\s+/, '')
+    .replace(/^\.\//, '');
+}
+
+const MAX_COLLISIONS = 8;
+
+/** Reject "file" values that aren't real source paths — vision/git noise such as
+ *  URLs, env vars, browser/app names, and scratch/test artifacts. */
+const FILE_NOISE =
+  /(:\/\/|^[#~]|\s|\.env\b|\btett\b|test-change|demo-scratch|podman-test|scratch|sslip)/i;
+export function isFilePath(f: string): boolean {
+  if (!f || FILE_NOISE.test(f)) return false;
+  return /\.[a-z0-9]{1,6}$/i.test(f); // must end in a real file extension
+}
+
+/** Engineer names that are test/verification artifacts, not real teammates. */
+const ENGINEER_NOISE = /(^verify\b|^.$|testrepo|-?check\b|\d{4,})/i;
+
+const MAX_FILES = 9;
+
+/** Short, readable node label — last two path segments (full path goes in summary). */
+function shortLabel(file: string): string {
+  const parts = file.split('/').filter(Boolean);
+  return parts.slice(-2).join('/') || file;
+}
+
+const STATUS_RANK: Record<PodGraphNodeStatus, number> = {
+  stable: 0,
+  active: 1,
+  learned: 2,
+  risk: 3,
+};
+
+interface Builder {
+  nodes: Map<string, PodGraphNode>;
+  edges: Map<string, PodGraphEdge>;
+}
+
+function nodeKey(kind: PodGraphNodeKind, key: string): string {
+  return `${kind}:${key}`;
+}
+
+function upsertNode(
+  b: Builder,
+  kind: PodGraphNodeKind,
+  key: string,
+  patch: Partial<Omit<PodGraphNode, 'id' | 'kind' | 'x' | 'y'>>,
+): string {
+  const id = nodeKey(kind, kind === 'engineer' ? key.toLowerCase() : key);
+  const cur = b.nodes.get(id);
+  if (!cur) {
+    b.nodes.set(id, {
+      id,
+      kind,
+      label: patch.label ?? key,
+      summary: patch.summary ?? '',
+      weight: patch.weight ?? 0.6,
+      status: patch.status ?? 'stable',
+      x: 0,
+      y: 0,
+    });
+    return id;
+  }
+  if (patch.label) cur.label = patch.label;
+  if (patch.summary) cur.summary = patch.summary;
+  if (patch.weight && patch.weight > cur.weight) cur.weight = patch.weight;
+  if (patch.status && STATUS_RANK[patch.status] > STATUS_RANK[cur.status])
+    cur.status = patch.status;
+  return id;
+}
+
+function upsertEdge(
+  b: Builder,
+  source: string,
+  target: string,
+  kind: PodGraphEdgeKind,
+  label: string,
+  strength: number,
+): void {
+  const id = `${kind}:${source}->${target}`;
+  const cur = b.edges.get(id);
+  if (!cur) b.edges.set(id, { id, source, target, kind, label, strength });
+  else if (strength > cur.strength) cur.strength = strength;
+}
+
+const COLUMN_X: Record<PodGraphNodeKind, number> = {
+  engineer: 78,
+  file: 300,
+  feature: 360,
+  collision: 470,
+  intervention: 622,
+};
+
+/** Deterministic column layout so the SVG renders stably across refreshes. */
+function layout(nodes: PodGraphNode[]): void {
+  const byKind = new Map<PodGraphNodeKind, PodGraphNode[]>();
+  for (const n of nodes) {
+    const list = byKind.get(n.kind) ?? [];
+    list.push(n);
+    byKind.set(n.kind, list);
+  }
+  for (const [kind, list] of byKind) {
+    list.sort((a, b) => a.id.localeCompare(b.id));
+    const n = list.length;
+    list.forEach((node, i) => {
+      node.x = COLUMN_X[kind];
+      node.y = Math.round(((i + 1) / (n + 1)) * 452) + 10;
+    });
+  }
+}
+
+const SEVERITY_WEIGHT: Record<string, number> = { info: 0.4, warn: 0.7, critical: 1 };
+
+function buildLoop(input: {
+  observations: number;
+  gitStates: number;
+  collisions: number;
+  interventions: number;
+  outcomes: number;
+  acceptedReal: number;
+  learnedEdges: number;
+}): PodLearningLoop {
+  const stored = input.observations + input.gitStates + input.interventions + input.outcomes;
+  return {
+    activeStep:
+      input.acceptedReal > 0
+        ? 'adapt'
+        : input.outcomes > 0
+          ? 'outcome'
+          : input.collisions > 0
+            ? 'predict'
+            : input.observations + input.gitStates > 0
+              ? 'store'
+              : 'observe',
+    steps: [
+      {
+        key: 'observe',
+        label: 'Observe',
+        value: String(input.observations + input.gitStates),
+        detail: 'Recent vision observations plus local git-state reports.',
+        status: input.observations + input.gitStates > 0 ? 'complete' : 'quiet',
+      },
+      {
+        key: 'store',
+        label: 'Store',
+        value: String(stored),
+        detail: 'MongoDB records available to recall for this pod.',
+        status: stored > 0 ? 'complete' : 'quiet',
+      },
+      {
+        key: 'predict',
+        label: 'Predict',
+        value: String(input.collisions),
+        detail: 'Distinct collision signatures detected from live work.',
+        status: input.collisions > 0 ? 'complete' : 'quiet',
+      },
+      {
+        key: 'outcome',
+        label: 'Outcome',
+        value: String(input.outcomes),
+        detail: 'Accepted and dismissed intervention outcomes.',
+        status: input.outcomes > 0 ? 'complete' : 'quiet',
+      },
+      {
+        key: 'adapt',
+        label: 'Adapt',
+        value: String(input.learnedEdges),
+        detail: 'Learned graph edges created from accepted real outcomes.',
+        status: input.acceptedReal > 0 ? 'complete' : 'planned',
+      },
+    ],
+  };
+}
+
+function pushActivity(
+  activity: PodGraphActivity[],
+  item: PodGraphActivity,
+  seen: Set<string>,
+): void {
+  if (seen.has(item.id)) return;
+  seen.add(item.id);
+  activity.push(item);
+}
+
+export async function materializePodGraph(podId: string): Promise<PodGraph | null> {
+  const c = await collections();
+  const db = await getDb();
+
+  const [pod, observations, collisionDocs, interventionDocs, outcomeDocs, gitStates] =
+    await Promise.all([
+      c.pods.findOne({ id: podId }),
+      c.observations.find({ podId }).sort({ observedAt: -1 }).limit(MAX_OBSERVATIONS).toArray(),
+      c.collisions.find({ podId }).sort({ detectedAt: -1 }).limit(100).toArray(),
+      c.interventions.find({ podId }).toArray(),
+      c.outcomes.find({ podId }).toArray(),
+      getGitStates(podId),
+    ]);
+
+  // Optional supervised ownership map (team_model.ownership: file -> engineer).
+  let ownership: Record<string, string> = {};
+  try {
+    const tm = await db
+      .collection<{ podId: string; ownership?: Record<string, string> }>('team_model')
+      .findOne({ podId });
+    ownership = tm?.ownership ?? {};
+  } catch {
+    /* ownership is optional */
+  }
+
+  const b: Builder = { nodes: new Map(), edges: new Map() };
+  const activity: PodGraphActivity[] = [];
+  const activityIds = new Set<string>();
+  const now = Date.now();
+
+  // 1. Baseline engineer nodes from the roster.
+  for (const name of pod?.members ?? []) {
+    upsertNode(b, 'engineer', name, { label: name });
+  }
+
+  // 2. Vision (observations): who is active and on which file, with confidence.
+  for (const o of observations) {
+    if (!o.engineerId) continue;
+    const recent = o.observedAt && now - new Date(o.observedAt).getTime() < ACTIVE_WINDOW_MS;
+    const eng = upsertNode(b, 'engineer', o.engineerId, {
+      label: o.engineerId,
+      status: recent ? 'active' : undefined,
+    });
+    const file = o.currentFile ? normalizeFile(o.currentFile) : '';
+    if (isFilePath(file)) {
+      const f = upsertNode(b, 'file', file, { label: shortLabel(file), summary: file });
+      upsertEdge(b, eng, f, 'editing', o.activity ?? 'edits', Math.max(0.4, o.confidence ?? 0.5));
+      pushActivity(
+        activity,
+        {
+          id: `editing:${o.engineerId}:${file}:${String(o.observedAt ?? '')}`,
+          at: String(o.observedAt ?? new Date().toISOString()),
+          kind: 'editing',
+          title: `${o.engineerId} editing ${shortLabel(file)}`,
+          detail: o.activity ?? 'Vision observed active work.',
+          nodeId: f,
+        },
+        activityIds,
+      );
+    }
+  }
+
+  // Collisions referenced by accepted outcomes are the "learned" money path — they
+  // always survive the cap so the learned_from beat is never dropped.
+  const priorityCol = new Set<string>();
+  for (const out of outcomeDocs) {
+    if (!out.accepted || !out.wasRealCollision) continue;
+    if (out.collisionId) priorityCol.add(out.collisionId);
+    const iv = interventionDocs.find((i) => i.id === out.interventionId);
+    if (iv?.collisionId) priorityCol.add(iv.collisionId);
+  }
+
+  // 3. Collisions: collapse repeats by signature, keep the most recent, cap to
+  //    MAX_COLLISIONS, skip junk-file collisions. `collisionById` keeps every doc
+  //    (for the outcome join); `colNodeFor` maps each collisionId to its surviving
+  //    collision node (or null when collapsed / capped / filtered out).
+  const collisionById = new Map<string, (typeof collisionDocs)[number]>();
+  const colNodeFor = new Map<string, string | null>();
+  const sigToNode = new Map<string, string>();
+  let distinctCollisions = 0;
+  for (const col of collisionDocs) {
+    collisionById.set(col.id, col);
+    const file = normalizeFile(col.file);
+    const sig =
+      (col as { memorySignature?: string }).memorySignature ?? `${file}#${col.symbol ?? ''}`;
+    const existing = sigToNode.get(sig);
+    if (existing) {
+      colNodeFor.set(col.id, existing);
+      continue;
+    }
+    if (!isFilePath(file)) {
+      colNodeFor.set(col.id, null);
+      continue;
+    }
+    const isPriority = priorityCol.has(col.id);
+    if (!isPriority && distinctCollisions >= MAX_COLLISIONS) {
+      colNodeFor.set(col.id, null);
+      continue;
+    }
+    const cNode = upsertNode(b, 'collision', col.id, {
+      label: shortLabel(file),
+      status: 'risk',
+      weight: SEVERITY_WEIGHT[col.severity] ?? 0.7,
+      summary: `${col.engineers.join(' + ')} on ${file}${
+        (col as { memorySignature?: string }).memorySignature ? ' · seen before' : ''
+      }`,
+    });
+    const fNode = upsertNode(b, 'file', file, {
+      label: shortLabel(file),
+      summary: file,
+      status: 'risk',
+    });
+    upsertEdge(b, fNode, cNode, 'touches', 'hot', 0.6);
+    for (const name of col.engineers) {
+      const eng = upsertNode(b, 'engineer', name, { label: name });
+      upsertEdge(b, eng, cNode, 'collides', 'in', SEVERITY_WEIGHT[col.severity] ?? 0.7);
+    }
+    pushActivity(
+      activity,
+      {
+        id: `collision:${col.id}`,
+        at: col.detectedAt,
+        kind: 'collision',
+        title: `Collision risk on ${shortLabel(file)}`,
+        detail: `${col.engineers.join(' + ')} converged on ${file}.`,
+        nodeId: cNode,
+      },
+      activityIds,
+    );
+    sigToNode.set(sig, cNode);
+    colNodeFor.set(col.id, cNode);
+    if (!isPriority) distinctCollisions++;
+  }
+
+  // 4. Git truth (engineer_states): mark unpushed work and confirm editing on
+  //    files vision/collisions already surfaced — not the whole repo diff.
+  for (const [name, git] of gitStates) {
+    const files = git.changedFiles.map(parseGitStatusPath).filter(Boolean);
+    const eng = upsertNode(b, 'engineer', name, {
+      label: name,
+      status: files.length > 0 ? 'risk' : 'active',
+      summary: files.length
+        ? `${files.length} changed file(s) on ${git.branch ?? 'detached'}`
+        : `on ${git.branch ?? 'detached'}`,
+      weight: 0.7,
+    });
+    for (const file of files) {
+      const fid = nodeKey('file', file);
+      if (b.nodes.has(fid)) upsertEdge(b, eng, fid, 'editing', 'edits', 0.6);
+    }
+  }
+
+  // 5. Interventions: collapse to one (most recent) per surviving collision.
+  const interventionById = new Map<string, (typeof interventionDocs)[number]>();
+  const ivNodeForCol = new Map<string, string>();
+  const sortedIvs = [...interventionDocs].sort((a, b) =>
+    String(b.createdAt ?? '').localeCompare(String(a.createdAt ?? '')),
+  );
+  for (const iv of sortedIvs) {
+    interventionById.set(iv.id, iv);
+    const colNode = colNodeFor.get(iv.collisionId);
+    if (!colNode || ivNodeForCol.has(colNode)) continue;
+    const ivNode = upsertNode(b, 'intervention', iv.id, {
+      label:
+        iv.suggestedAction?.kind === 'open_sync_pr'
+          ? 'sync PR'
+          : iv.suggestedAction?.kind === 'ping_teammate'
+            ? 'ping'
+            : 'watch',
+      summary: iv.message,
+    });
+    upsertEdge(b, colNode, ivNode, 'warns', 'routes', 0.85);
+    pushActivity(
+      activity,
+      {
+        id: `intervention:${iv.id}`,
+        at: iv.createdAt,
+        kind: 'intervention',
+        title: `Intervention: ${b.nodes.get(ivNode)?.label ?? iv.kind}`,
+        detail: iv.message,
+        nodeId: ivNode,
+      },
+      activityIds,
+    );
+    ivNodeForCol.set(colNode, ivNode);
+  }
+
+  // 6. Outcomes: the supervised learning signal -> learned_from edges + owns.
+  for (const out of outcomeDocs) {
+    if (!out.accepted || !out.wasRealCollision) continue;
+    const iv = interventionById.get(out.interventionId);
+    const col = iv ? collisionById.get(iv.collisionId) : collisionById.get(out.collisionId);
+    if (!col) continue;
+    const file = normalizeFile(col.file);
+    if (!isFilePath(file)) continue;
+    const owner =
+      (out as { learnedOwner?: string }).learnedOwner ?? ownership[file] ?? col.engineers[0];
+    if (!owner) continue;
+    const engNode = upsertNode(b, 'engineer', owner, { label: owner, status: 'learned' });
+    const fNode = upsertNode(b, 'file', file, { label: file });
+    upsertEdge(b, engNode, fNode, 'owns', 'owns', 0.85);
+    const cNode = colNodeFor.get(col.id);
+    const ivNode = cNode ? ivNodeForCol.get(cNode) : undefined;
+    if (ivNode) {
+      const ivObj = b.nodes.get(ivNode);
+      if (ivObj) ivObj.status = 'learned';
+      const before = b.edges.size;
+      upsertEdge(b, ivNode, engNode, 'learned_from', `learned: owns ${file}`, 0.6);
+      const edgeId = `${'learned_from'}:${ivNode}->${engNode}`;
+      pushActivity(
+        activity,
+        {
+          id: `learned:${out.interventionId}:${owner}:${file}`,
+          at: out.recordedAt,
+          kind: 'learned',
+          title: `Learned ${owner} owns ${shortLabel(file)}`,
+          detail: 'Accepted real outcome created a durable learned_from path.',
+          nodeId: engNode,
+          edgeId: before === b.edges.size ? undefined : edgeId,
+        },
+        activityIds,
+      );
+    }
+    pushActivity(
+      activity,
+      {
+        id: `outcome:${out.interventionId}:${out.recordedAt}`,
+        at: out.recordedAt,
+        kind: 'outcome',
+        title: out.accepted ? 'Outcome accepted' : 'Outcome dismissed',
+        detail: out.wasRealCollision ? 'Marked as a real collision.' : 'Marked as noise.',
+      },
+      activityIds,
+    );
+  }
+
+  // 7. Suppressed repeats: PodMan stayed quiet on a recurring collision because
+  // the signature was dismissed before — the negative-feedback loop made visible
+  // (Feature A). Stamped at repeat time, so it sorts as recent activity.
+  const suppressionDocs = await c.suppressions
+    .find({ podId })
+    .sort({ suppressedAt: -1 })
+    .limit(50)
+    .toArray();
+  // Collapse to one beat per file (keep the most recent — docs are sorted desc)
+  // so pre-fix duplicate rows never render as spam. The stable per-file id also
+  // dedupes through pushActivity's `seen` set.
+  const seenSuppressedFiles = new Set<string>();
+  for (const s of suppressionDocs) {
+    const sFile = normalizeFile(s.file);
+    if (!isFilePath(sFile)) continue;
+    const fileKey = sFile.toLowerCase();
+    if (seenSuppressedFiles.has(fileKey)) continue;
+    seenSuppressedFiles.add(fileKey);
+    const sEngs = (s.engineers ?? []).join(' + ') || 'teammates';
+    pushActivity(
+      activity,
+      {
+        id: `suppressed:${fileKey}`,
+        at: s.suppressedAt,
+        kind: 'suppressed',
+        title: `Suppressed — ${shortLabel(sFile)} repeat silenced`,
+        detail: `${sEngs} on ${sFile} recurred, but it was dismissed before — PodMan stayed quiet.`,
+      },
+      activityIds,
+    );
+  }
+
+  // Prune test-artifact engineers, then anything left orphaned by that.
+  const dropNode = (id: string) => {
+    b.nodes.delete(id);
+    for (const [eid, e] of [...b.edges])
+      if (e.source === id || e.target === id) b.edges.delete(eid);
+  };
+  for (const [id, n] of [...b.nodes]) {
+    if (n.kind === 'engineer' && ENGINEER_NOISE.test(n.label)) dropNode(id);
+  }
+  // Collisions with no remaining engineer = test/orphan -> drop.
+  for (const [id, n] of [...b.nodes]) {
+    if (n.kind !== 'collision') continue;
+    if (![...b.edges.values()].some((e) => e.kind === 'collides' && e.target === id)) dropNode(id);
+  }
+  // Cap file nodes to the most-connected (collision files first).
+  const fileNodes = [...b.nodes.values()].filter((n) => n.kind === 'file');
+  if (fileNodes.length > MAX_FILES) {
+    const inCollision = (id: string) =>
+      [...b.edges.values()].some((e) => e.kind === 'touches' && e.source === id);
+    const degree = (id: string) =>
+      [...b.edges.values()].filter((e) => e.source === id || e.target === id).length;
+    fileNodes.sort(
+      (a, z) =>
+        Number(inCollision(z.id)) - Number(inCollision(a.id)) || degree(z.id) - degree(a.id),
+    );
+    for (const n of fileNodes.slice(MAX_FILES)) dropNode(n.id);
+  }
+
+  // Files / interventions left with no edges -> drop.
+  for (const [id, n] of [...b.nodes]) {
+    if (n.kind === 'file' || n.kind === 'intervention') {
+      if (![...b.edges.values()].some((e) => e.source === id || e.target === id))
+        b.nodes.delete(id);
+    }
+  }
+
+  const nodes = [...b.nodes.values()];
+  // No real activity beyond the bare roster -> let the caller fall back to demo.
+  // Suppression beats are real negative-feedback proof even when they add no
+  // nodes/edges, so they satisfy the gate too — a clean pod with preserved
+  // suppressions must not fall back to the demo graph and hide the proof.
+  const hasSuppressed = activity.some((a) => a.kind === 'suppressed');
+  const hasActivity = hasSuppressed || nodes.some((n) => n.kind !== 'engineer');
+  if (!hasActivity) return null;
+
+  layout(nodes);
+
+  const acceptedReal = outcomeDocs.filter((o) => o.accepted && o.wasRealCollision).length;
+  const totalOutcomes = outcomeDocs.length;
+  // Raw distinct collision signatures — kept for the learning-loop throughput view.
+  const riskPaths = new Set(
+    collisionDocs.map(
+      (col) =>
+        (col as { memorySignature?: string }).memorySignature ??
+        `${normalizeFile(col.file)}#${col.symbol ?? ''}`,
+    ),
+  ).size;
+
+  // Headline metric cards are derived from the FINAL de-noised graph so they match
+  // what's drawn. Counting raw collision signatures / accepted-outcome rows inflates
+  // them with test churn (e.g. 50 "risk paths" for 4 files), which reads as fake.
+  const finalEdges = [...b.edges.values()];
+  const riskFiles = new Set<string>();
+  for (const e of finalEdges) {
+    if (e.kind === 'touches' && b.nodes.get(e.source)?.kind === 'file') riskFiles.add(e.source);
+  }
+  const openRiskPaths = riskFiles.size || nodes.filter((n) => n.kind === 'collision').length;
+  const ownerSet = new Set<string>();
+  for (const e of finalEdges) {
+    if (e.kind === 'learned_from') ownerSet.add(e.target);
+    if (e.kind === 'owns') ownerSet.add(e.source);
+  }
+  const learnedOwners = [...ownerSet].filter((id) => b.nodes.get(id)?.kind === 'engineer').length;
+
+  const metrics: PodGraphMetric[] = [
+    {
+      label: 'Learned owners',
+      value: String(learnedOwners),
+      detail: 'Distinct owners retained from accepted interventions.',
+    },
+    {
+      label: 'Open risk paths',
+      value: String(openRiskPaths),
+      detail: `${openRiskPaths === 1 ? 'File' : 'Files'} with two or more converging editors.`,
+    },
+    {
+      label: 'Accept rate',
+      value: totalOutcomes ? `${Math.round((acceptedReal / totalOutcomes) * 100)}%` : '—',
+      detail: 'Interventions accepted vs total this session.',
+    },
+  ];
+  const learnedEdges = [...b.edges.values()].filter((e) => e.kind === 'learned_from').length;
+  activity.sort((a, z) => String(z.at).localeCompare(String(a.at)));
+
+  return {
+    podId,
+    generatedAt: new Date().toISOString(),
+    nodes,
+    edges: [...b.edges.values()],
+    metrics,
+    loop: buildLoop({
+      observations: observations.length,
+      gitStates: gitStates.size,
+      collisions: riskPaths,
+      interventions: interventionDocs.length,
+      outcomes: totalOutcomes,
+      acceptedReal,
+      learnedEdges,
+    }),
+    activity: activity.slice(0, 12),
+  };
+}

backend/src/graph/store.ts

@@ -1,6 +1,7 @@
 import type { PodGraph, GraphNodeDoc, GraphEdgeDoc } from '@podman/shared';
 import { getDb } from '../memory/db.js';
 import { createDemoPodGraph } from './demo.js';
+import { materializePodGraph } from './live.js';
 
 interface TeamModelDoc {
   podId: string;
@@ -14,6 +15,14 @@ interface TeamModelDoc {
  * unreachable — so the demo path never depends on a populated DB.
  */
 export async function loadPodGraph(podId: string): Promise<PodGraph> {
+  // 1. Live: materialize from the real collections (observations/collisions/…).
+  try {
+    const live = await materializePodGraph(podId);
+    if (live) return live;
+  } catch (err) {
+    console.warn(`[graph] live materialize failed, falling back: ${(err as Error).message}`);
+  }
+  // 2. Seeded snapshot embedded in team_model.
   try {
     const db = await getDb();
     const doc = await db.collection<TeamModelDoc>('team_model').findOne({ podId });
@@ -21,6 +30,7 @@ export async function loadPodGraph(podId: string): Promise<PodGraph> {
   } catch (err) {
     console.warn(`[graph] loadPodGraph fell back to demo: ${(err as Error).message}`);
   }
+  // 3. Demo (stage safety — never an empty canvas).
   return createDemoPodGraph(podId);
 }
 

backend/src/hermes/jobs.ts

@@ -0,0 +1,349 @@
+import { randomUUID } from 'node:crypto';
+import { execFile } from 'node:child_process';
+import { promisify } from 'node:util';
+import { Room as LiveKitRoom } from '@livekit/rtc-node';
+import { AccessToken } from 'livekit-server-sdk';
+import {
+  DATA_TOPIC,
+  type DataMessage,
+  type HermesJob,
+  type HermesJobEvent,
+  type HermesJobEventType,
+  type HermesJobInput,
+  type HermesJobStatus,
+  type HermesRiskLevel,
+} from '@podman/shared';
+import { env, repoParts } from '../env.js';
+import { getDb } from '../memory/db.js';
+
+const execFileAsync = promisify(execFile);
+const encoder = new TextEncoder();
+const MAX_OUTPUT = 3_000;
+const COMMAND_TIMEOUT_MS = 45_000;
+const runners = new Map<string, AbortController>();
+
+function now(): string {
+  return new Date().toISOString();
+}
+
+function truncate(value: string): string {
+  return value.length > MAX_OUTPUT ? `${value.slice(0, MAX_OUTPUT)}\n...[truncated]` : value;
+}
+
+function redact(value: string): string {
+  return value
+    .replace(/AIza[0-9A-Za-z_-]{20,}/g, '[redacted-google-key]')
+    .replace(/API[_-]?SECRET=[^\s]+/gi, 'API_SECRET=[redacted]')
+    .replace(/TOKEN=[^\s]+/gi, 'TOKEN=[redacted]')
+    .replace(/mongodb(\+srv)?:\/\/[^@\s]+@/gi, 'mongodb$1://[redacted]@');
+}
+
+function normalizeRisk(value: unknown): HermesRiskLevel {
+  return value === 'safe_write' ||
+    value === 'commit_allowed' ||
+    value === 'deploy_allowed' ||
+    value === 'read_only'
+    ? value
+    : 'read_only';
+}
+
+async function hermesJobs() {
+  return (await getDb()).collection<HermesJob>('hermes_jobs');
+}
+
+async function hermesJobEvents() {
+  return (await getDb()).collection<HermesJobEvent>('hermes_job_events');
+}
+
+export async function ensureHermesJobIndexes(): Promise<void> {
+  const db = await getDb();
+  await Promise.allSettled([
+    db.collection('hermes_jobs').createIndex({ id: 1 }, { unique: true }),
+    db.collection('hermes_jobs').createIndex({ sessionId: 1, status: 1, updatedAt: -1 }),
+    db.collection('hermes_jobs').createIndex({ podId: 1, updatedAt: -1 }),
+    db.collection('hermes_job_events').createIndex({ jobId: 1, createdAt: 1 }),
+    db.collection('hermes_job_events').createIndex({ sessionId: 1, createdAt: -1 }),
+  ]);
+}
+
+export async function createHermesJob(input: Partial<HermesJobInput>): Promise<HermesJob> {
+  const prompt = typeof input.prompt === 'string' ? input.prompt.trim() : '';
+  if (!prompt) throw new Error('prompt is required');
+  const createdAt = now();
+  const job: HermesJob = {
+    id: `hermes_job_${randomUUID()}`,
+    podId: input.podId || 'demo-pod',
+    identity: input.identity || 'developer',
+    sessionId: input.sessionId || 'unknown',
+    conversationRoom: input.conversationRoom,
+    prompt,
+    contextScope: input.contextScope || 'current_repo',
+    targetRepository: input.targetRepository || env.GITHUB_REPO,
+    riskLevel: normalizeRisk(input.riskLevel),
+    requiresConfirmation: input.requiresConfirmation === true,
+    successCriteria: Array.isArray(input.successCriteria)
+      ? input.successCriteria.map(String).filter(Boolean).slice(0, 8)
+      : ['Hermes reports what it inspected and what changed.'],
+    parentJobId: input.parentJobId,
+    status: 'queued',
+    createdAt,
+    updatedAt: createdAt,
+  };
+  await (await hermesJobs()).insertOne(job);
+  await appendHermesJobEvent(job.id, 'accepted', 'Hermes accepted the task.', {
+    riskLevel: job.riskLevel,
+    contextScope: job.contextScope,
+  });
+  void runHermesJob(job.id);
+  return job;
+}
+
+export async function getHermesJob(jobId: string): Promise<HermesJob | null> {
+  return (await hermesJobs()).findOne({ id: jobId }, { projection: { _id: 0 } });
+}
+
+export async function getActiveHermesJobForSession(sessionId: string): Promise<HermesJob | null> {
+  return (await hermesJobs()).findOne(
+    { sessionId, status: { $in: ['queued', 'running', 'waiting_for_confirmation', 'aborting'] } },
+    { projection: { _id: 0 }, sort: { updatedAt: -1 } },
+  );
+}
+
+export async function getLatestHermesJobForSession(sessionId: string): Promise<HermesJob | null> {
+  return (await hermesJobs()).findOne(
+    { sessionId },
+    { projection: { _id: 0 }, sort: { updatedAt: -1 } },
+  );
+}
+
+export async function listHermesJobEvents(jobId: string, limit = 40): Promise<HermesJobEvent[]> {
+  return (await hermesJobEvents())
+    .find({ jobId }, { projection: { _id: 0 } })
+    .sort({ createdAt: 1 })
+    .limit(Math.min(limit, 200))
+    .toArray();
+}
+
+export async function appendHermesJobEvent(
+  jobId: string,
+  type: HermesJobEventType,
+  message: string,
+  data?: Record<string, unknown>,
+): Promise<HermesJobEvent> {
+  const job = await getHermesJob(jobId);
+  if (!job) throw new Error('job not found');
+  const event: HermesJobEvent = {
+    id: `hermes_evt_${randomUUID()}`,
+    jobId,
+    podId: job.podId,
+    sessionId: job.sessionId,
+    type,
+    message: redact(truncate(message)),
+    data,
+    createdAt: now(),
+  };
+  await (await hermesJobEvents()).insertOne(event);
+  await (
+    await hermesJobs()
+  ).updateOne(
+    { id: jobId },
+    { $set: { updatedAt: event.createdAt, lastHeartbeatAt: event.createdAt } },
+  );
+  if (job.conversationRoom) {
+    void publishHermesJobEvent(job.conversationRoom, event).catch((err) =>
+      console.warn(`[hermes-job] data publish failed: ${(err as Error).message}`),
+    );
+  }
+  return event;
+}
+
+export async function abortHermesJob(jobId: string): Promise<HermesJob | null> {
+  const job = await getHermesJob(jobId);
+  if (!job) return null;
+  const abortAt = now();
+  await (
+    await hermesJobs()
+  ).updateOne(
+    { id: jobId },
+    { $set: { status: 'aborting', abortRequestedAt: abortAt, updatedAt: abortAt } },
+  );
+  runners.get(jobId)?.abort();
+  await appendHermesJobEvent(jobId, 'heartbeat', 'Hermes is aborting the current job.');
+  return getHermesJob(jobId);
+}
+
+async function setStatus(jobId: string, status: HermesJobStatus, patch: Partial<HermesJob> = {}) {
+  await (
+    await hermesJobs()
+  ).updateOne({ id: jobId }, { $set: { status, updatedAt: now(), ...patch } });
+}
+
+async function publishHermesJobEvent(roomName: string, event: HermesJobEvent): Promise<void> {
+  const room = new LiveKitRoom();
+  try {
+    const at = new AccessToken(env.LIVEKIT_API_KEY, env.LIVEKIT_API_SECRET, {
+      identity: `podman-hermes-job-${Date.now()}`,
+      name: 'PodMan Hermes jobs',
+      ttl: '5m',
+    });
+    at.addGrant({
+      roomJoin: true,
+      room: roomName,
+      canPublish: true,
+      canSubscribe: false,
+      canPublishData: true,
+    });
+    await room.connect(env.LIVEKIT_URL, await at.toJwt(), {
+      autoSubscribe: false,
+      dynacast: false,
+    });
+    const data: DataMessage = { type: 'HERMES_JOB_EVENT', event };
+    await room.localParticipant?.publishData(encoder.encode(JSON.stringify(data)), {
+      reliable: true,
+      topic: DATA_TOPIC,
+    });
+  } finally {
+    await room.disconnect().catch(() => {});
+  }
+}
+
+async function runCommand(
+  jobId: string,
+  label: string,
+  command: string,
+  args: string[],
+  signal: AbortSignal,
+): Promise<string> {
+  await appendHermesJobEvent(jobId, 'step_started', `${label} started.`);
+  const started = Date.now();
+  const { stdout, stderr } = await execFileAsync(command, args, {
+    cwd: process.cwd(),
+    timeout: COMMAND_TIMEOUT_MS,
+    signal,
+    maxBuffer: 1024 * 1024,
+  });
+  const output = redact(truncate([stdout, stderr].filter(Boolean).join('\n').trim()));
+  await appendHermesJobEvent(jobId, 'step_output', output || `${label} produced no output.`, {
+    label,
+    durationMs: Date.now() - started,
+  });
+  await appendHermesJobEvent(jobId, 'step_completed', `${label} completed.`);
+  return output;
+}
+
+function wantsBuild(prompt: string, criteria: string[]): boolean {
+  const haystack = `${prompt} ${criteria.join(' ')}`.toLowerCase();
+  return /build|typecheck|test|lint|broken|failing|verify/.test(haystack);
+}
+
+function wantsMongo(prompt: string, scope: string): boolean {
+  return scope === 'mongodb' || /mongo|database|telemetry|logs?|memory/.test(prompt.toLowerCase());
+}
+
+function wantsGithub(prompt: string, scope: string): boolean {
+  return (
+    scope === 'github' || /github|branch|pr|pull request|commit|diff/.test(prompt.toLowerCase())
+  );
+}
+
+async function inspectMongo(jobId: string) {
+  await appendHermesJobEvent(jobId, 'step_started', 'MongoDB inspection started.');
+  const db = await getDb();
+  const [observations, collisions, interventions, outcomes, jobs] = await Promise.all([
+    db.collection('observations').estimatedDocumentCount(),
+    db.collection('collisions').estimatedDocumentCount(),
+    db.collection('interventions').estimatedDocumentCount(),
+    db.collection('outcomes').estimatedDocumentCount(),
+    db.collection('hermes_jobs').estimatedDocumentCount(),
+  ]);
+  await appendHermesJobEvent(
+    jobId,
+    'step_output',
+    `MongoDB is reachable. Counts: observations=${observations}, collisions=${collisions}, interventions=${interventions}, outcomes=${outcomes}, hermes_jobs=${jobs}.`,
+  );
+  await appendHermesJobEvent(jobId, 'step_completed', 'MongoDB inspection completed.');
+}
+
+async function inspectGithub(jobId: string) {
+  await appendHermesJobEvent(jobId, 'step_started', 'GitHub repository inspection started.');
+  const { owner, repo } = repoParts();
+  const res = await fetch(`https://api.github.com/repos/${owner}/${repo}`, {
+    headers: {
+      accept: 'application/vnd.github+json',
+      authorization: `Bearer ${env.GITHUB_TOKEN}`,
+      'x-github-api-version': '2022-11-28',
+    },
+  });
+  if (!res.ok) throw new Error(`GitHub repo check returned ${res.status}`);
+  const body = (await res.json()) as {
+    full_name?: string;
+    default_branch?: string;
+    open_issues_count?: number;
+  };
+  await appendHermesJobEvent(
+    jobId,
+    'step_output',
+    `GitHub ${body.full_name ?? `${owner}/${repo}`} is reachable. Default branch=${body.default_branch ?? 'unknown'}, open issue count=${body.open_issues_count ?? 0}.`,
+  );
+  await appendHermesJobEvent(jobId, 'step_completed', 'GitHub repository inspection completed.');
+}
+
+async function runHermesJob(jobId: string): Promise<void> {
+  const job = await getHermesJob(jobId);
+  if (!job) return;
+  const controller = new AbortController();
+  runners.set(jobId, controller);
+  try {
+    await setStatus(jobId, 'running', { startedAt: now() });
+    await appendHermesJobEvent(jobId, 'heartbeat', 'Hermes is gathering repository context.');
+    const outputs: string[] = [];
+    outputs.push(
+      await runCommand(
+        jobId,
+        'Git status',
+        'git',
+        ['status', '--short', '--branch'],
+        controller.signal,
+      ),
+    );
+    outputs.push(
+      await runCommand(jobId, 'Git diff summary', 'git', ['diff', '--stat'], controller.signal),
+    );
+
+    if (wantsGithub(job.prompt, job.contextScope)) await inspectGithub(jobId);
+    if (wantsMongo(job.prompt, job.contextScope)) await inspectMongo(jobId);
+
+    if (wantsBuild(job.prompt, job.successCriteria)) {
+      outputs.push(
+        await runCommand(jobId, 'TypeScript typecheck', 'pnpm', ['typecheck'], controller.signal),
+      );
+    }
+
+    if (job.riskLevel === 'deploy_allowed' && job.requiresConfirmation) {
+      await setStatus(jobId, 'waiting_for_confirmation');
+      await appendHermesJobEvent(
+        jobId,
+        'needs_confirmation',
+        'Hermes needs confirmation before deploy-level actions.',
+      );
+      return;
+    }
+
+    const finalSummary = `Hermes completed the task. It inspected repository state${wantsMongo(job.prompt, job.contextScope) ? ', MongoDB' : ''}${wantsGithub(job.prompt, job.contextScope) ? ', and GitHub' : ''}. ${outputs.some((o) => /error|failed/i.test(o)) ? 'Review the recorded output for warnings.' : 'No blocking error was reported by the completed checks.'}`;
+    await setStatus(jobId, 'completed', { completedAt: now(), finalSummary });
+    await appendHermesJobEvent(jobId, 'completed', finalSummary);
+  } catch (err) {
+    const aborted = controller.signal.aborted;
+    const message = aborted
+      ? 'Hermes aborted the job before making further changes.'
+      : (err as Error).message;
+    await setStatus(jobId, aborted ? 'aborted' : 'failed', {
+      completedAt: now(),
+      finalSummary: message,
+      error: aborted ? undefined : message,
+    });
+    await appendHermesJobEvent(jobId, aborted ? 'aborted' : 'failed', message);
+  } finally {
+    runners.delete(jobId);
+  }
+}

backend/src/live-conversation/context.ts

@@ -0,0 +1,95 @@
+import { getDb } from '../memory/db.js';
+import { getMemberWorkHistory } from '../activity/member-history.js';
+import {
+  buildUserLearningProfile,
+  getUserLearningProfileByIdentity,
+} from '../memory/user-learning.js';
+
+const DEFAULT_LIMIT = 8;
+
+function sinceIso(hours: number): string {
+  return new Date(Date.now() - hours * 60 * 60 * 1000).toISOString();
+}
+
+export async function getLiveConversationContext(podId: string, identity: string) {
+  const db = await getDb();
+  const since = sinceIso(12);
+  const [pod, history, gitState, collisions, interventions, outcomes, userLearningProfile] =
+    await Promise.all([
+    db.collection('pods').findOne({ id: podId }, { projection: { _id: 0 } }),
+    getMemberWorkHistory(podId, identity, { hours: 24, limit: 30 }).catch(() => null),
+    db.collection('engineer_states').findOne(
+      { podId, name: identity },
+      {
+        projection: {
+          _id: 0,
+          name: 1,
+          branch: 1,
+          changedFiles: 1,
+          recentCommit: 1,
+          gitUpdatedAt: 1,
+        },
+      },
+    ),
+    db
+      .collection('collisions')
+      .find({ podId, detectedAt: { $gte: since } }, { projection: { _id: 0, embedding: 0 } })
+      .sort({ detectedAt: -1 })
+      .limit(DEFAULT_LIMIT)
+      .toArray(),
+    db
+      .collection('interventions')
+      .find({ podId, createdAt: { $gte: since } }, { projection: { _id: 0 } })
+      .sort({ createdAt: -1 })
+      .limit(DEFAULT_LIMIT)
+      .toArray(),
+    db
+      .collection('outcomes')
+      .find({ podId, recordedAt: { $gte: since } }, { projection: { _id: 0 } })
+      .sort({ recordedAt: -1 })
+      .limit(DEFAULT_LIMIT)
+      .toArray(),
+    getUserLearningProfileByIdentity(identity).catch(() => null),
+  ]);
+
+  return {
+    pod,
+    identity,
+    generatedAt: new Date().toISOString(),
+    currentGitState: gitState,
+    userLearningProfile,
+    memberHistory: history,
+    recentCollisions: collisions,
+    recentInterventions: interventions,
+    recentOutcomes: outcomes,
+  };
+}
+
+export async function recordLiveConversationNote(input: {
+  podId: string;
+  sessionId: string;
+  identity?: string;
+  note: string;
+  kind?: string;
+}) {
+  const note = input.note.trim();
+  if (!note) throw new Error('note is required');
+  const doc = {
+    podId: input.podId,
+    sessionId: input.sessionId,
+    identity: input.identity,
+    kind: input.kind || 'summary',
+    note: note.slice(0, 4000),
+    createdAt: new Date().toISOString(),
+  };
+  await (await getDb()).collection('conversation_notes').insertOne(doc);
+  if (input.identity) {
+    const profile = await getUserLearningProfileByIdentity(input.identity);
+    if (profile) {
+      void buildUserLearningProfile(profile.clerkUserId).catch((err) =>
+        console.warn(`[memory] note user learning refresh failed: ${(err as Error).message}`),
+      );
+    }
+  }
+  return { ...doc, _id: undefined };
+}

backend/src/live-conversation/sessions.ts

@@ -0,0 +1,193 @@
+import { randomUUID } from 'node:crypto';
+import { AccessToken, RoomAgentDispatch, RoomConfiguration } from 'livekit-server-sdk';
+import { Room as LiveKitRoom } from '@livekit/rtc-node';
+import type { Collision, DataMessage, Intervention, LiveConversationEvent } from '@podman/shared';
+import { DATA_TOPIC } from '@podman/shared';
+import { env } from '../env.js';
+import { closeRoom } from '../livekit/rooms.js';
+import { speakInRoom } from '../voice/live.js';
+
+const encoder = new TextEncoder();
+const DEFAULT_AGENT = 'podman-live-conversation';
+
+export interface LiveConversationSession {
+  sessionId: string;
+  podId: string;
+  identity: string;
+  displayName: string;
+  room: string;
+  url: string;
+  startedAt: string;
+  lastEventAt?: string;
+  endedAt?: string;
+}
+
+const sessions = new Map<string, LiveConversationSession>();
+
+function sessionKey(podId: string, identity: string): string {
+  return `${podId}:${identity.toLowerCase()}`;
+}
+
+function cleanPart(value: string): string {
+  return value
+    .trim()
+    .toLowerCase()
+    .replace(/[^a-z0-9_-]+/g, '-')
+    .replace(/^-+|-+$/g, '')
+    .slice(0, 48);
+}
+
+function agentName(): string {
+  return env.LIVEKIT_CONVERSATION_AGENT_NAME || DEFAULT_AGENT;
+}
+
+function tokenFor(room: string, identity: string, name: string, metadata: object): Promise<string> {
+  const at = new AccessToken(env.LIVEKIT_API_KEY, env.LIVEKIT_API_SECRET, {
+    identity,
+    name,
+    ttl: '4h',
+    metadata: JSON.stringify(metadata),
+  });
+  at.addGrant({ roomJoin: true, room, canPublish: true, canSubscribe: true, canPublishData: true });
+  return at.toJwt();
+}
+
+export async function startLiveConversation(input: {
+  podId: string;
+  identity: string;
+  displayName?: string;
+}): Promise<LiveConversationSession & { token: string }> {
+  const identity = input.identity.trim();
+  if (!identity) throw new Error('identity is required');
+
+  const existing = activeLiveConversation(input.podId, identity);
+  if (existing) {
+    return {
+      ...existing,
+      token: await tokenFor(existing.room, identity, existing.displayName, {
+        podId: input.podId,
+        identity,
+        sessionId: existing.sessionId,
+        mode: 'podman-live-conversation',
+      }),
+    };
+  }
+
+  const sessionId = randomUUID();
+  const room = `podman-live:${cleanPart(input.podId)}:${cleanPart(identity)}:${sessionId.slice(0, 8)}`;
+  const displayName = input.displayName?.trim() || identity;
+  const metadata = { podId: input.podId, identity, sessionId, mode: 'podman-live-conversation' };
+  const at = new AccessToken(env.LIVEKIT_API_KEY, env.LIVEKIT_API_SECRET, {
+    identity,
+    name: displayName,
+    ttl: '4h',
+    metadata: JSON.stringify(metadata),
+  });
+  at.addGrant({ roomJoin: true, room, canPublish: true, canSubscribe: true, canPublishData: true });
+  at.roomConfig = new RoomConfiguration({
+    name: room,
+    emptyTimeout: 60,
+    departureTimeout: 15,
+    agents: [
+      new RoomAgentDispatch({
+        agentName: agentName(),
+        metadata: JSON.stringify(metadata),
+      }),
+    ],
+  });
+
+  const session: LiveConversationSession = {
+    sessionId,
+    podId: input.podId,
+    identity,
+    displayName,
+    room,
+    url: env.LIVEKIT_URL,
+    startedAt: new Date().toISOString(),
+  };
+  sessions.set(sessionKey(input.podId, identity), session);
+  return { ...session, token: await at.toJwt() };
+}
+
+export function activeLiveConversation(
+  podId: string,
+  identity: string,
+): LiveConversationSession | null {
+  const session = sessions.get(sessionKey(podId, identity));
+  return session && !session.endedAt ? session : null;
+}
+
+export function listActiveLiveConversations(podId: string): LiveConversationSession[] {
+  return [...sessions.values()].filter((session) => session.podId === podId && !session.endedAt);
+}
+
+export async function stopLiveConversation(
+  podId: string,
+  sessionId: string,
+): Promise<LiveConversationSession | null> {
+  const session = [...sessions.values()].find(
+    (candidate) => candidate.podId === podId && candidate.sessionId === sessionId,
+  );
+  if (!session) return null;
+  session.endedAt = new Date().toISOString();
+  await closeRoom(session.room);
+  return session;
+}
+
+async function publishPrivateConversationEvent(
+  roomName: string,
+  event: LiveConversationEvent,
+): Promise<void> {
+  const room = new LiveKitRoom();
+  try {
+    const token = await tokenFor(roomName, `podman-live-router-${Date.now()}`, 'PodMan live router', {
+      mode: 'podman-live-router',
+    });
+    await room.connect(env.LIVEKIT_URL, token, { autoSubscribe: false, dynacast: false });
+    const data: DataMessage = { type: 'LIVE_CONVERSATION_EVENT', event };
+    await room.localParticipant?.publishData(encoder.encode(JSON.stringify(data)), {
+      reliable: true,
+      topic: DATA_TOPIC,
+    });
+  } finally {
+    await room.disconnect().catch(() => {});
+  }
+}
+
+export async function notifyCriticalLiveConversations(
+  collision: Collision,
+  intervention: Intervention,
+  voiceLine?: string,
+): Promise<void> {
+  if (collision.severity !== 'critical') return;
+  const recipients = new Set(collision.engineers.map((name) => name.toLowerCase()));
+  const active = listActiveLiveConversations(collision.podId).filter((session) =>
+    recipients.has(session.identity.toLowerCase()),
+  );
+  if (active.length === 0) return;
+
+  await Promise.allSettled(
+    active.map(async (session) => {
+      const createdAt = new Date().toISOString();
+      session.lastEventAt = createdAt;
+      const summary =
+        voiceLine ||
+        `Critical collision in ${collision.file}. ${collision.engineers.join(
+          ' and ',
+        )} should sync before pushing.`;
+      await publishPrivateConversationEvent(session.room, {
+        id: `live_evt_${Date.now()}_${session.sessionId.slice(0, 8)}`,
+        podId: collision.podId,
+        sessionId: session.sessionId,
+        kind: 'critical_collision',
+        severity: 'critical',
+        summary,
+        interrupt: true,
+        createdAt,
+        collisionId: collision.id,
+        interventionId: intervention.id,
+      });
+      await speakInRoom(session.room, summary, { priority: 'critical' });
+    }),
+  );
+}

backend/src/memory/db.ts

@@ -31,12 +31,40 @@ export async function closeMemory(): Promise<void> {
   await client.close();
 }
 
+/** A durable record that PodMan stayed quiet on a recurring collision because
+ *  its signature was previously dismissed — the negative-feedback loop made
+ *  auditable. Timestamped at the repeat; materialized as `suppressed` activity
+ *  in graph/live.ts. The suppressed collision is never written to `collisions`
+ *  (the agent returns before recordCollision), so this is its own record. */
+export interface SuppressionDoc {
+  id: string;
+  podId: string;
+  collisionId: string;
+  file: string;
+  engineers: string[];
+  priorInterventionId?: string;
+  priorDismissedAt?: string;
+  suppressedAt: string;
+}
+
 export interface PodCollections {
   pods: Collection<Pod>;
   observations: Collection<EngineerContext>;
   collisions: Collection<Collision>;
   interventions: Collection<Intervention>;
   outcomes: Collection<InterventionOutcome>;
+  suppressions: Collection<SuppressionDoc>;
+}
+
+export interface UserPodContextDoc {
+  id: string;
+  clerkUserId: string;
+  podId: string;
+  memberName?: string;
+  action: string;
+  source: 'clerk';
+  observedAt: string;
+  metadata?: Record<string, string | number | boolean | null>;
 }
 
 export async function collections(): Promise<PodCollections> {
@@ -47,6 +75,7 @@ export async function collections(): Promise<PodCollections> {
     collisions: db.collection<Collision>('collisions'),
     interventions: db.collection<Intervention>('interventions'),
     outcomes: db.collection<InterventionOutcome>('outcomes'),
+    suppressions: db.collection<SuppressionDoc>('suppressions'),
   };
 }
 
@@ -57,6 +86,8 @@ export interface GitState {
   gitUpdatedAt: Date | null;
 }
 
+const GIT_STATE_TTL_MS = Number(process.env.GIT_STATE_TTL_MS ?? '120000');
+
 /** Fetch latest git state per engineer for a pod from the engineer_states collection.
  *  Returns a map keyed by engineer name (matches --name arg used in podman-agent.mjs). */
 export async function getGitStates(podId: string): Promise<Map<string, GitState>> {
@@ -71,7 +102,17 @@ export async function getGitStates(podId: string): Promise<Map<string, GitState>
   }>('engineer_states');
   const docs = await col.find({ podId }).toArray();
   const map = new Map<string, GitState>();
+  const now = Date.now();
   for (const doc of docs) {
+    const updatedAt = doc.gitUpdatedAt ? new Date(doc.gitUpdatedAt) : null;
+    if (
+      updatedAt &&
+      !Number.isNaN(updatedAt.getTime()) &&
+      GIT_STATE_TTL_MS > 0 &&
+      now - updatedAt.getTime() > GIT_STATE_TTL_MS
+    ) {
+      continue;
+    }
     map.set(doc.name, {
       changedFiles: doc.changedFiles ?? [],
       branch: doc.branch ?? null,
@@ -102,6 +143,36 @@ export async function initMemory(): Promise<void> {
     ['collisions.file', () => c.collisions.createIndex({ podId: 1, file: 1, detectedAt: -1 })],
     ['interventions.collisionId', () => c.interventions.createIndex({ collisionId: 1 })],
     ['outcomes.interventionId', () => c.outcomes.createIndex({ interventionId: 1 })],
+    ['suppressions.podId', () => c.suppressions.createIndex({ podId: 1, suppressedAt: -1 })],
+    ['hermes_jobs.id', () => db.collection('hermes_jobs').createIndex({ id: 1 }, { unique: true })],
+    [
+      'hermes_jobs.session',
+      () => db.collection('hermes_jobs').createIndex({ sessionId: 1, status: 1, updatedAt: -1 }),
+    ],
+    [
+      'hermes_job_events.job',
+      () => db.collection('hermes_job_events').createIndex({ jobId: 1, createdAt: 1 }),
+    ],
+    [
+      'user_pod_context.user',
+      () => db.collection('user_pod_context').createIndex({ clerkUserId: 1, observedAt: -1 }),
+    ],
+    [
+      'user_pod_context.pod',
+      () => db.collection('user_pod_context').createIndex({ podId: 1, observedAt: -1 }),
+    ],
+    [
+      'user_learning_profiles.user',
+      () => db.collection('user_learning_profiles').createIndex({ clerkUserId: 1 }, { unique: true }),
+    ],
+    [
+      'user_learning_profiles.updated',
+      () => db.collection('user_learning_profiles').createIndex({ updatedAt: -1 }),
+    ],
+    [
+      'conversation_notes.identity',
+      () => db.collection('conversation_notes').createIndex({ identity: 1, createdAt: -1 }),
+    ],
   ];
   for (const [name, make] of indexes) {
     try {

backend/src/memory/policy.ts

@@ -1,27 +1,22 @@
 import type { Collision, SuggestedActionKind } from '@podman/shared';
 import type { RecalledCollision } from './vectors.js';
 
-const lastNudgeByPod = new Map<string, number>();
-
-function cooldownMs(): number {
-  return Number(process.env.NUDGE_COOLDOWN_MS ?? '180000');
-}
-
-/** Policy gate: combines severity, exact recall outcomes, and per-pod cooldown. */
-export function shouldIntervene(collision: Collision, prior: RecalledCollision | null): boolean {
-  if (collision.severity === 'info') return false;
-
-  const priorOutcome = prior?.priorOutcome;
-  if (priorOutcome && !priorOutcome.accepted && !priorOutcome.wasRealCollision) return false;
-
-  const cooldown = cooldownMs();
-  const last = lastNudgeByPod.get(collision.podId) ?? 0;
-  if (cooldown > 0 && Date.now() - last < cooldown && collision.severity !== 'critical') {
-    return false;
-  }
-
-  lastNudgeByPod.set(collision.podId, Date.now());
-  return true;
+/**
+ * Policy gate — suppression fully disabled for the demo.
+ *
+ * Every real collision surfaces an intervention. Accept/Dismiss are still
+ * recorded as outcomes but carry NO gating meaning: dismissing one collision
+ * never silences future ones, and there is no per-pod cooldown throttling
+ * consecutive conflicts. The only filter is severity: `info` collisions are
+ * informational, not actionable, so they don't nudge. The same-collision
+ * single-shot dedupe lives in `PodmanAgent.handle` (activeConflicts), so
+ * removing the cooldown does not cause repeat spam of an unresolved collision.
+ *
+ * (Prior dismissal-based suppression over-generalized: one README discard
+ * permanently muted all README clashes via loose file/vector recall.)
+ */
+export function shouldIntervene(collision: Collision, _prior: RecalledCollision | null): boolean {
+  return collision.severity !== 'info';
 }
 
 /** Preferred action selection based on collision severity and prior accepted actions. */

backend/src/memory/store.ts

@@ -1,17 +1,37 @@
-import type { EngineerContext, Collision, Intervention, InterventionOutcome } from '@podman/shared';
-import { collections } from './db.js';
+import type {
+  EngineerContext,
+  Collision,
+  Intervention,
+  InterventionOutcome,
+  InterventionStatus,
+} from '@podman/shared';
+import { collections, getDb, getGitStates, type UserPodContextDoc } from './db.js';
 import { enrichCollisionMemory } from './vectors.js';
+import { buildUserLearningProfile } from './user-learning.js';
+
+function comparableFile(raw?: string): string {
+  return (
+    (raw ?? '')
+      .trim()
+      .replace(/^(\?\?|[MADRCU!]{1,2})\s+/, '')
+      .split(/[\\/]/)
+      .pop()
+      ?.toLowerCase() ?? ''
+  );
+}
 
 /**
  * Continual-learning memory: persist observations, collisions, interventions,
- * and outcomes to MongoDB so later sessions get sharper. Writes are best-effort
- * — a Mongo hiccup logs a warning rather than crashing the agent/server.
+ * and outcomes to MongoDB so later sessions get sharper. MongoDB is mandatory —
+ * a failed write is surfaced loudly and rethrown, never silently swallowed, so
+ * a broken memory layer can never masquerade as a working one.
  */
 async function persist(name: string, fn: () => Promise<unknown>): Promise<void> {
   try {
     await fn();
   } catch (err) {
-    console.warn(`[memory] ${name} persist failed: ${(err as Error).message}`);
+    console.error(`[memory] ${name} persist FAILED: ${(err as Error).message}`);
+    throw err;
   }
 }
 
@@ -21,6 +41,30 @@ export async function recordObservation(ctx: EngineerContext): Promise<void> {
   );
 }
 
+export async function recordUserPodContext(input: {
+  clerkUserId: string;
+  podId: string;
+  memberName?: string;
+  action: string;
+  metadata?: UserPodContextDoc['metadata'];
+}): Promise<void> {
+  await persist('user pod context', async () =>
+    (await getDb()).collection<UserPodContextDoc>('user_pod_context').insertOne({
+      id: `upc_${Date.now()}_${Math.random().toString(36).slice(2, 8)}`,
+      clerkUserId: input.clerkUserId,
+      podId: input.podId,
+      memberName: input.memberName,
+      action: input.action,
+      source: 'clerk',
+      observedAt: new Date().toISOString(),
+      metadata: input.metadata,
+    }),
+  );
+  void buildUserLearningProfile(input.clerkUserId).catch((err) =>
+    console.warn(`[memory] user learning refresh failed: ${(err as Error).message}`),
+  );
+}
+
 export async function recordCollision(collision: Collision): Promise<void> {
   await persist('collision', async () =>
     (await collections()).collisions.insertOne(await enrichCollisionMemory(collision)),
@@ -33,13 +77,112 @@ export async function recordIntervention(intervention: Intervention): Promise<vo
   );
 }
 
+/**
+ * Feature A — record that PodMan stayed quiet on a recurring collision because
+ * its signature was previously dismissed. Timestamped at the repeat (now), so
+ * the negative-feedback beat surfaces as recent `suppressed` activity rather
+ * than being re-synthesized from the old dismissal row.
+ */
+export async function recordSuppression(
+  collision: Collision,
+  priorInterventionId?: string,
+  priorDismissedAt?: string,
+): Promise<void> {
+  await persist('suppression', async () =>
+    (await collections()).suppressions.insertOne({
+      id: `supp_${Date.now()}`,
+      podId: collision.podId,
+      collisionId: collision.id,
+      file: collision.file,
+      engineers: collision.engineers,
+      priorInterventionId,
+      priorDismissedAt,
+      suppressedAt: new Date().toISOString(),
+    }),
+  );
+}
+
+export async function hasRecentInterventionForCollision(
+  collision: Collision,
+  windowMs = Number(process.env.NUDGE_COOLDOWN_MS ?? '180000'),
+): Promise<boolean> {
+  if (windowMs <= 0) return false;
+  const c = await collections();
+  const since = new Date(Date.now() - windowMs).toISOString();
+  const recent = await c.collisions
+    .find({ podId: collision.podId, detectedAt: { $gte: since } })
+    .sort({ detectedAt: -1 })
+    .limit(100)
+    .toArray();
+
+  const targetFile = comparableFile(collision.file);
+  for (const match of recent) {
+    if (match.id === collision.id || comparableFile(match.file) !== targetFile) continue;
+    const existing = await c.interventions.findOne({
+      collisionId: match.id,
+      createdAt: { $gte: since },
+    });
+    if (existing) return true;
+  }
+  return false;
+}
+
+export async function updateInterventionStatus(
+  interventionId: string,
+  status: InterventionStatus,
+): Promise<void> {
+  await persist('intervention ack', async () =>
+    (await collections()).interventions.updateOne({ id: interventionId }, { $set: { status } }),
+  );
+}
+
+/**
+ * Step 3 — derive whether a flagged collision was REAL from git ground truth,
+ * instead of trusting the client (which historically hardcoded `true`). A
+ * collision counts as real only if BOTH named engineers currently have the
+ * collided file in their git `changedFiles`. Conservative: returns false when
+ * the collision is orphaned/missing or git state is stale/unavailable.
+ * Verifier supervision per docs/continual-learning/spec.md:98-108, policy.md:35-42.
+ */
+export async function deriveWasRealCollision(outcome: InterventionOutcome): Promise<boolean> {
+  try {
+    const c = await collections();
+    const collision = await c.collisions.findOne({ id: outcome.collisionId });
+    if (!collision) return false;
+    // Prefer the overlap evidence captured at detection time (fresh git state):
+    // immune to late clicks, stale sidecars, and the engineer_states TTL.
+    if (typeof collision.gitOverlap === 'boolean') return collision.gitOverlap;
+    // Fallback for collisions detected before gitOverlap was captured: re-derive
+    // from latest git state, matching engineers on case/whitespace-canonical names.
+    if (!Array.isArray(collision.engineers) || collision.engineers.length < 2) return false;
+    const target = comparableFile(collision.file);
+    if (!target) return false;
+    const byCanon = new Map<string, string[]>();
+    for (const [name, st] of await getGitStates(outcome.podId)) {
+      byCanon.set(name.trim().toLowerCase(), st.changedFiles);
+    }
+    return collision.engineers.every((e) =>
+      (byCanon.get(e.trim().toLowerCase()) ?? []).some((f) => comparableFile(f) === target),
+    );
+  } catch (err) {
+    console.error(`[memory] wasRealCollision verifier failed: ${(err as Error).message}`);
+    return false;
+  }
+}
+
 export async function recordOutcome(outcome: InterventionOutcome): Promise<void> {
+  // Backend is authoritative for wasRealCollision: derive it from git overlap
+  // rather than trusting the client-supplied value. (RSI Step 3)
+  const verified: InterventionOutcome = {
+    ...outcome,
+    wasRealCollision: await deriveWasRealCollision(outcome),
+  };
   await persist('outcome', async () => {
     const c = await collections();
-    await c.outcomes.insertOne({ ...outcome });
+    await c.outcomes.insertOne({ ...verified });
     await c.interventions.updateOne(
-      { id: outcome.interventionId },
-      { $set: { status: outcome.accepted ? 'accepted' : 'dismissed' } },
+      { id: verified.interventionId },
+      { $set: { status: verified.accepted ? 'accepted' : 'dismissed' } },
     );
   });
 }
@@ -47,11 +190,31 @@ export async function recordOutcome(outcome: InterventionOutcome): Promise<void>
 /** Document counts per collection — used by the /api/memory/stats endpoint. */
 export async function memoryStats(): Promise<Record<string, number>> {
   const c = await collections();
-  const [observations, collisions, interventions, outcomes] = await Promise.all([
+  const db = await getDb();
+  const [
+    observations,
+    collisions,
+    interventions,
+    outcomes,
+    suppressions,
+    userPodContext,
+    userLearningProfiles,
+  ] = await Promise.all([
     c.observations.estimatedDocumentCount(),
     c.collisions.estimatedDocumentCount(),
     c.interventions.estimatedDocumentCount(),
     c.outcomes.estimatedDocumentCount(),
+    c.suppressions.estimatedDocumentCount(),
+    db.collection<UserPodContextDoc>('user_pod_context').estimatedDocumentCount(),
+    db.collection('user_learning_profiles').estimatedDocumentCount(),
   ]);
-  return { observations, collisions, interventions, outcomes };
+  return {
+    observations,
+    collisions,
+    interventions,
+    outcomes,
+    suppressions,
+    userPodContext,
+    userLearningProfiles,
+  };
 }

backend/src/memory/user-learning.ts

@@ -0,0 +1,282 @@
+import type { Collision, EngineerContext, HermesJob, Pod, UserLearningProfile } from '@podman/shared';
+import { getDb, type UserPodContextDoc } from './db.js';
+
+interface EngineerStateDoc {
+  podId: string;
+  name: string;
+  changedFiles?: string[];
+  branch?: string | null;
+  recentCommit?: string | null;
+  gitUpdatedAt?: Date | string;
+}
+
+interface ConversationNoteDoc {
+  podId: string;
+  identity?: string;
+  kind?: string;
+  note?: string;
+  createdAt?: string;
+}
+
+function clean(value: unknown): string | undefined {
+  return typeof value === 'string' && value.trim() ? value.trim() : undefined;
+}
+
+function toIso(value: unknown): string {
+  if (value instanceof Date) return value.toISOString();
+  if (typeof value === 'string' && !Number.isNaN(Date.parse(value))) return new Date(value).toISOString();
+  return new Date().toISOString();
+}
+
+function uniq(values: Array<string | undefined>): string[] {
+  const seen = new Set<string>();
+  const out: string[] = [];
+  for (const value of values) {
+    const item = value?.trim();
+    if (!item) continue;
+    const key = item.toLowerCase();
+    if (seen.has(key)) continue;
+    seen.add(key);
+    out.push(item);
+  }
+  return out;
+}
+
+function top(values: string[], limit: number): string[] {
+  const counts = new Map<string, number>();
+  for (const value of values) {
+    const item = value.trim();
+    if (!item) continue;
+    counts.set(item, (counts.get(item) ?? 0) + 1);
+  }
+  return [...counts.entries()]
+    .sort((a, b) => b[1] - a[1] || a[0].localeCompare(b[0]))
+    .slice(0, limit)
+    .map(([value]) => value);
+}
+
+function lowerRegex(values: string[]): RegExp[] {
+  return values.map((value) => new RegExp(`^${value.replace(/[.*+?^${}()|[\]\\]/g, '\\$&')}$`, 'i'));
+}
+
+function noteGoals(notes: ConversationNoteDoc[]): string[] {
+  const goalNotes = notes
+    .filter((note) => /goal|plan|todo|next|preference|prefers|likes|wants|needs/i.test(`${note.kind} ${note.note}`))
+    .map((note) => clean(note.note)?.slice(0, 180))
+    .filter(Boolean) as string[];
+  return uniq(goalNotes).slice(0, 8);
+}
+
+function inferCollaborationStyle(input: {
+  contexts: UserPodContextDoc[];
+  observations: EngineerContext[];
+  collisions: Collision[];
+  outcomes: Array<{ accepted?: boolean; wasRealCollision?: boolean }>;
+  notes: ConversationNoteDoc[];
+  jobs: HermesJob[];
+}): string[] {
+  const style: string[] = [];
+  const actions = input.contexts.map((ctx) => ctx.action);
+  const pods = new Set(input.contexts.map((ctx) => ctx.podId));
+  if (pods.size > 1) style.push(`Works across ${pods.size} pods and carries context between rooms.`);
+  if (actions.filter((action) => action === 'joined_pod').length >= 3)
+    style.push('Frequently joins live rooms and collaborates synchronously.');
+  if (input.collisions.length > 0)
+    style.push(`Has been involved in ${input.collisions.length} coordination risk signals.`);
+  const accepted = input.outcomes.filter((outcome) => outcome.accepted).length;
+  if (accepted > 0) style.push(`Accepts Hermes help when useful (${accepted} accepted outcomes).`);
+  if (input.jobs.length > 0) style.push(`Delegates complex work to Hermes (${input.jobs.length} jobs).`);
+  if (input.notes.some((note) => /concise|short|brief/i.test(note.note ?? '')))
+    style.push('Prefers concise coordination.');
+  return style.slice(0, 8);
+}
+
+function inferWorkingStyle(input: {
+  observations: EngineerContext[];
+  gitStates: EngineerStateDoc[];
+}): string[] {
+  const style: string[] = [];
+  const modes = top(input.observations.map((obs) => obs.mode ?? '').filter(Boolean), 2);
+  const activities = top(input.observations.map((obs) => obs.activity ?? '').filter(Boolean), 5);
+  const files = top(
+    [
+      ...input.observations.map((obs) => obs.currentFile ?? ''),
+      ...input.gitStates.flatMap((state) => state.changedFiles ?? []),
+    ].filter(Boolean),
+    6,
+  );
+  if (modes.length) style.push(`Usually seen in ${modes.join(' and ')} mode.`);
+  if (activities.length) style.push(`Common work patterns: ${activities.join(', ')}.`);
+  if (files.length) style.push(`Frequently touches ${files.join(', ')}.`);
+  return style.slice(0, 8);
+}
+
+function inferKnowledge(input: {
+  observations: EngineerContext[];
+  gitStates: EngineerStateDoc[];
+  notes: ConversationNoteDoc[];
+}): string[] {
+  const topics = top(
+    [
+      ...input.observations.map((obs) => obs.researchTopic ?? ''),
+      ...input.observations.map((obs) => obs.researchSource ?? ''),
+      ...input.observations.map((obs) => obs.currentSymbol ?? ''),
+      ...input.gitStates.flatMap((state) => state.changedFiles ?? []),
+      ...input.notes
+        .filter((note) => /learn|knows|expert|worked on|decision/i.test(note.note ?? ''))
+        .map((note) => note.note?.slice(0, 120) ?? ''),
+    ].filter(Boolean),
+    10,
+  );
+  return topics;
+}
+
+export async function buildUserLearningProfile(clerkUserId: string): Promise<UserLearningProfile | null> {
+  const db = await getDb();
+  const contexts = await db
+    .collection<UserPodContextDoc>('user_pod_context')
+    .find({ clerkUserId }, { projection: { _id: 0 } })
+    .sort({ observedAt: -1 })
+    .limit(500)
+    .toArray();
+  if (!contexts.length) return null;
+
+  const latest = contexts[0];
+  const identities = uniq([
+    ...contexts.map((ctx) => ctx.memberName),
+    ...contexts.map((ctx) => clean(ctx.metadata?.identity)),
+    ...contexts.map((ctx) => clean(ctx.metadata?.email)),
+  ]);
+  const email = clean(latest?.metadata?.email) ?? identities.find((item) => item.includes('@'));
+  const displayName = latest?.memberName ?? identities.find((item) => !item.includes('@')) ?? email;
+  const imageUrl = clean(latest?.metadata?.imageUrl);
+  const identityRegex = lowerRegex(identities);
+
+  const podIds = uniq(contexts.map((ctx) => ctx.podId));
+  const [pods, observations, gitStates, collisions, outcomes, notes, jobs] = await Promise.all([
+    db
+      .collection<Pod>('pods')
+      .find({ id: { $in: podIds } }, { projection: { _id: 0 } })
+      .toArray(),
+    db
+      .collection<EngineerContext>('observations')
+      .find({ engineerId: { $in: identities } }, { projection: { _id: 0, screenshotDataUrl: 0 } })
+      .sort({ observedAt: -1 })
+      .limit(500)
+      .toArray(),
+    db
+      .collection<EngineerStateDoc>('engineer_states')
+      .find({ name: { $in: identityRegex } }, { projection: { _id: 0 } })
+      .limit(100)
+      .toArray(),
+    db
+      .collection<Collision>('collisions')
+      .find({ engineers: { $in: identities } }, { projection: { _id: 0, embedding: 0 } })
+      .sort({ detectedAt: -1 })
+      .limit(100)
+      .toArray(),
+    db
+      .collection<{ podId: string; accepted?: boolean; wasRealCollision?: boolean }>('outcomes')
+      .find({ podId: { $in: podIds } }, { projection: { _id: 0 } })
+      .sort({ recordedAt: -1 })
+      .limit(100)
+      .toArray(),
+    db
+      .collection<ConversationNoteDoc>('conversation_notes')
+      .find({ identity: { $in: identities } }, { projection: { _id: 0 } })
+      .sort({ createdAt: -1 })
+      .limit(100)
+      .toArray(),
+    db
+      .collection<HermesJob>('hermes_jobs')
+      .find({ identity: { $in: identities } }, { projection: { _id: 0 } })
+      .sort({ createdAt: -1 })
+      .limit(100)
+      .toArray(),
+  ]);
+
+  const podById = new Map(pods.map((pod) => [pod.id, pod]));
+  const podsSummary = podIds.map((podId) => {
+    const rows = contexts.filter((ctx) => ctx.podId === podId);
+    const sorted = [...rows].sort((a, b) => Date.parse(a.observedAt) - Date.parse(b.observedAt));
+    return {
+      podId,
+      podName: podById.get(podId)?.name,
+      visits: rows.filter((row) => row.action === 'joined_pod').length,
+      actions: top(rows.map((row) => row.action), 6),
+      firstSeenAt: toIso(sorted[0]?.observedAt),
+      lastSeenAt: toIso(sorted.at(-1)?.observedAt),
+    };
+  });
+
+  const profile: UserLearningProfile = {
+    clerkUserId,
+    displayName,
+    email,
+    imageUrl,
+    identities,
+    pods: podsSummary,
+    recentWork: observations.slice(0, 20).map((obs) => ({
+      podId: obs.podId,
+      file: obs.currentFile,
+      activity: obs.activity ?? obs.researchTopic,
+      at: obs.observedAt,
+    })),
+    collaborationStyle: inferCollaborationStyle({ contexts, observations, collisions, outcomes, notes, jobs }),
+    workingStyle: inferWorkingStyle({ observations, gitStates }),
+    goals: noteGoals(notes),
+    knowledge: inferKnowledge({ observations, gitStates, notes }),
+    counts: {
+      podActions: contexts.length,
+      observations: observations.length,
+      gitStates: gitStates.length,
+      collisionsInvolved: collisions.length,
+      outcomes: outcomes.length,
+      conversationNotes: notes.length,
+      hermesJobs: jobs.length,
+    },
+    updatedAt: new Date().toISOString(),
+  };
+
+  await db
+    .collection<UserLearningProfile>('user_learning_profiles')
+    .updateOne({ clerkUserId }, { $set: profile }, { upsert: true });
+  return profile;
+}
+
+export async function refreshUserLearningProfiles(): Promise<UserLearningProfile[]> {
+  const db = await getDb();
+  const ids = await db.collection<UserPodContextDoc>('user_pod_context').distinct('clerkUserId');
+  const profiles = await Promise.all(ids.map((id) => buildUserLearningProfile(String(id))));
+  return profiles.filter(Boolean) as UserLearningProfile[];
+}
+
+export async function getUserLearningProfileByIdentity(identity: string): Promise<UserLearningProfile | null> {
+  const db = await getDb();
+  const direct = await db
+    .collection<UserLearningProfile>('user_learning_profiles')
+    .findOne({ identities: { $regex: `^${identity.replace(/[.*+?^${}()|[\]\\]/g, '\\$&')}$`, $options: 'i' } }, { projection: { _id: 0 } });
+  if (direct) return direct;
+
+  const context = await db
+    .collection<UserPodContextDoc>('user_pod_context')
+    .findOne(
+      {
+        $or: [
+          { memberName: { $regex: `^${identity.replace(/[.*+?^${}()|[\]\\]/g, '\\$&')}$`, $options: 'i' } },
+          { 'metadata.identity': { $regex: `^${identity.replace(/[.*+?^${}()|[\]\\]/g, '\\$&')}$`, $options: 'i' } },
+        ],
+      },
+      { sort: { observedAt: -1 }, projection: { _id: 0 } },
+    );
+  return context ? buildUserLearningProfile(context.clerkUserId) : null;
+}
+
+export async function listUserLearningProfiles(): Promise<UserLearningProfile[]> {
+  const db = await getDb();
+  return db
+    .collection<UserLearningProfile>('user_learning_profiles')
+    .find({}, { projection: { _id: 0 } })
+    .sort({ updatedAt: -1 })
+    .toArray();
+}

backend/src/memory/vectors.ts

@@ -49,7 +49,7 @@ function memoryText(collision: Collision): string {
     .join('\n');
 }
 
-function cosine(a: number[], b: number[]): number {
+export function cosine(a: number[], b: number[]): number {
   const n = Math.min(a.length, b.length);
   let dot = 0;
   let aNorm = 0;
@@ -69,6 +69,12 @@ async function embed(text: string, inputType: 'document' | 'query'): Promise<num
   return (await embedWithVoyage(text, inputType)) ?? embedWithGemini(text, inputType);
 }
 
+export async function semanticSimilarity(a: string, b: string): Promise<number | null> {
+  const [va, vb] = await Promise.all([embed(a, 'query'), embed(b, 'document')]);
+  if (!va || !vb) return null;
+  return cosine(va, vb);
+}
+
 async function embedWithVoyage(
   text: string,
   inputType: 'document' | 'query',

backend/src/pods/store.ts

@@ -1,5 +1,5 @@
 import type { Pod, PodInput } from '@podman/shared';
-import { collections } from '../memory/db.js';
+import { collections, getDb, type UserPodContextDoc } from '../memory/db.js';
 
 const NO_ID = { projection: { _id: 0 } } as const;
 
@@ -59,14 +59,67 @@ function now(): string {
   return new Date().toISOString();
 }
 
+function regexExact(value: string): RegExp {
+  return new RegExp(`^${value.replace(/[.*+?^${}()|[\]\\]/g, '\\$&')}$`, 'i');
+}
+
+function profileString(value: unknown): string | undefined {
+  return typeof value === 'string' && value.trim() ? value.trim() : undefined;
+}
+
+function matchesMember(doc: UserPodContextDoc, member: string): boolean {
+  const key = member.trim().toLowerCase();
+  return [doc.memberName, doc.metadata?.identity, doc.metadata?.email]
+    .filter(Boolean)
+    .some((value) => String(value).trim().toLowerCase() === key);
+}
+
+async function hydrateMemberProfiles(pod: Pod): Promise<Pod> {
+  if (!pod.members.length) return pod;
+  const db = await getDb();
+  const matchers = pod.members.map(regexExact);
+  const docs = await db
+    .collection<UserPodContextDoc>('user_pod_context')
+    .find(
+      {
+        $or: [
+          { memberName: { $in: matchers } },
+          { 'metadata.identity': { $in: matchers } },
+          { 'metadata.email': { $in: matchers } },
+        ],
+      },
+      { projection: { _id: 0 } },
+    )
+    .sort({ observedAt: -1 })
+    .limit(500)
+    .toArray();
+  const memberProfiles: NonNullable<Pod['memberProfiles']> = {};
+  for (const member of pod.members) {
+    const doc = docs.find((row) => matchesMember(row, member));
+    const imageUrl = profileString(doc?.metadata?.imageUrl);
+    if (!doc || !imageUrl) continue;
+    memberProfiles[member] = {
+      displayName: doc.memberName ?? member,
+      email: profileString(doc.metadata?.email),
+      imageUrl,
+    };
+  }
+  return Object.keys(memberProfiles).length ? { ...pod, memberProfiles } : pod;
+}
+
+async function hydratePods(pods: Pod[]): Promise<Pod[]> {
+  return Promise.all(pods.map((pod) => hydrateMemberProfiles(pod)));
+}
+
 export async function listPods(): Promise<Pod[]> {
   const c = await collections();
-  return c.pods.find({}, NO_ID).sort({ createdAt: 1 }).toArray();
+  return hydratePods(await c.pods.find({}, NO_ID).sort({ createdAt: 1 }).toArray());
 }
 
 export async function getPod(id: string): Promise<Pod | null> {
   const c = await collections();
-  return c.pods.findOne({ id }, NO_ID);
+  const pod = await c.pods.findOne({ id }, NO_ID);
+  return pod ? hydrateMemberProfiles(pod) : null;
 }
 
 export async function createPod(input: PodInput): Promise<Pod> {
@@ -92,7 +145,7 @@ export async function createPod(input: PodInput): Promise<Pod> {
     };
     try {
       await c.pods.insertOne({ ...pod });
-      return pod;
+      return hydrateMemberProfiles(pod);
     } catch (err) {
       if (isDuplicateKey(err)) continue;
       throw err;
@@ -119,7 +172,7 @@ export async function updatePod(id: string, patch: PodInput): Promise<Pod | null
     { $set: set },
     { returnDocument: 'after', projection: { _id: 0 } },
   );
-  return updated ?? null;
+  return updated ? hydrateMemberProfiles(updated) : null;
 }
 
 export async function deletePod(id: string): Promise<boolean> {
@@ -135,7 +188,7 @@ async function setMembers(id: string, members: string[]): Promise<Pod | null> {
     { $set: { members, updatedAt: now() } },
     { returnDocument: 'after', projection: { _id: 0 } },
   );
-  return updated ?? null;
+  return updated ? hydrateMemberProfiles(updated) : null;
 }
 
 export async function addMember(id: string, rawName: unknown): Promise<Pod | null> {

backend/src/server.ts

@@ -1,11 +1,20 @@
 import express from 'express';
 import cors from 'cors';
 import { createServer } from 'node:http';
+import type { Socket } from 'node:net';
 import { WebSocketServer } from 'ws';
-import { AccessToken, RoomConfiguration } from 'livekit-server-sdk';
+import { AccessToken, RoomAgentDispatch, RoomConfiguration } from 'livekit-server-sdk';
 import { env } from './env.js';
 import { createSyncPr } from './github/client.js';
-import { recordOutcome, memoryStats } from './memory/store.js';
+import {
+  recordCollision,
+  recordIntervention,
+  recordOutcome,
+  hasRecentInterventionForCollision,
+  memoryStats,
+  recordUserPodContext,
+} from './memory/store.js';
+import { clerkAuthMiddleware, requestUser } from './auth.js';
 import { closeMemory, initMemory } from './memory/db.js';
 import {
   listPods,
@@ -19,27 +28,120 @@ import {
 } from './pods/store.js';
 import { getPresence, closeRoom } from './livekit/rooms.js';
 import { loadPodGraph, reachFrom } from './graph/store.js';
-import type { InterventionOutcome } from '@podman/shared';
+import { listPodActivity } from './activity/store.js';
+import { getMemberWorkHistory } from './activity/member-history.js';
+import { speakInRoom } from './voice/live.js';
+import { getPodMusic } from './voice/music.js';
+import { notifyHermesInterventionInRoom } from './action/hermes.js';
+import {
+  activeLiveConversation,
+  startLiveConversation,
+  stopLiveConversation,
+} from './live-conversation/sessions.js';
+import {
+  getLiveConversationContext,
+  recordLiveConversationNote,
+} from './live-conversation/context.js';
+import {
+  listUserLearningProfiles,
+  refreshUserLearningProfiles,
+} from './memory/user-learning.js';
+import {
+  abortHermesJob,
+  appendHermesJobEvent,
+  createHermesJob,
+  getActiveHermesJobForSession,
+  getHermesJob,
+  getLatestHermesJobForSession,
+  listHermesJobEvents,
+} from './hermes/jobs.js';
+import type {
+  Collision,
+  HermesJobEventType,
+  Intervention,
+  InterventionOutcome,
+  SuggestedActionKind,
+} from '@podman/shared';
 
 const app = express();
 app.use(cors());
 app.use(express.json());
+app.use(clerkAuthMiddleware);
 app.get('/health', (_req, res) => res.json({ ok: true }));
 
+function stringArray(value: unknown): string[] {
+  return Array.isArray(value) ? value.map((item) => String(item).trim()).filter(Boolean) : [];
+}
+
+function suggestedAction(value: unknown): SuggestedActionKind {
+  return value === 'open_sync_pr' || value === 'ping_teammate' || value === 'none'
+    ? value
+    : 'ping_teammate';
+}
+
+function stringMeta(value: unknown): string | undefined {
+  return typeof value === 'string' && value.trim() ? value.trim() : undefined;
+}
+
+function hermesJobEventType(value: unknown): HermesJobEventType | null {
+  return value === 'accepted' ||
+    value === 'heartbeat' ||
+    value === 'step_started' ||
+    value === 'step_output' ||
+    value === 'needs_confirmation' ||
+    value === 'step_completed' ||
+    value === 'aborted' ||
+    value === 'failed' ||
+    value === 'completed'
+    ? value
+    : null;
+}
+
 // Mint a LiveKit token for an engineer joining a pod.
 app.post('/api/token', async (req, res) => {
   const { room, identity, name, githubLogin } = req.body ?? {};
   if (!room || !identity) return res.status(400).json({ error: 'room+identity required' });
+  const user = requestUser(req);
   const at = new AccessToken(env.LIVEKIT_API_KEY, env.LIVEKIT_API_SECRET, {
     identity,
     name,
     ttl: '4h',
-    metadata: JSON.stringify({ githubLogin: githubLogin ?? name }),
+    metadata: JSON.stringify({
+      githubLogin: githubLogin ?? name,
+      email: stringMeta(req.body?.profile?.email),
+      imageUrl: stringMeta(req.body?.profile?.imageUrl),
+    }),
   });
   at.addGrant({ roomJoin: true, room, canPublish: true, canSubscribe: true, canPublishData: true });
+  const agents = env.LIVEKIT_AGENT_NAME
+    ? [
+        new RoomAgentDispatch({
+          agentName: env.LIVEKIT_AGENT_NAME,
+          metadata: JSON.stringify({ podId: room }),
+        }),
+      ]
+    : undefined;
   // Auto-clean the room: close 60s after it empties, drop a participant 20s
   // after they disconnect. Applied when LiveKit auto-creates the room.
-  at.roomConfig = new RoomConfiguration({ name: room, emptyTimeout: 60, departureTimeout: 20 });
+  at.roomConfig = new RoomConfiguration({
+    name: room,
+    emptyTimeout: 60,
+    departureTimeout: 20,
+    agents,
+  });
+  if (user) {
+    await recordUserPodContext({
+      clerkUserId: user.clerkUserId,
+      podId: String(room),
+      memberName: typeof name === 'string' ? name : String(identity),
+      action: 'joined_pod',
+      metadata: {
+        identity: String(identity),
+        email: stringMeta(req.body?.profile?.email) ?? null,
+        imageUrl: stringMeta(req.body?.profile?.imageUrl) ?? null,
+      },
+    });
+  }
   res.json({ token: await at.toJwt(), url: env.LIVEKIT_URL });
 });
 
@@ -77,6 +179,22 @@ app.get('/api/memory/stats', async (_req, res) => {
   }
 });
 
+app.get('/api/memory/users', async (_req, res) => {
+  try {
+    res.json(await listUserLearningProfiles());
+  } catch (e) {
+    res.status(500).json({ error: (e as Error).message });
+  }
+});
+
+app.post('/api/memory/users/refresh', async (_req, res) => {
+  try {
+    res.json({ profiles: await refreshUserLearningProfiles() });
+  } catch (e) {
+    res.status(500).json({ error: (e as Error).message });
+  }
+});
+
 // Live presence: who is currently connected in each pod's LiveKit room.
 app.get('/api/presence', async (_req, res) => {
   try {
@@ -97,7 +215,24 @@ app.get('/api/pods', async (_req, res) => {
 
 app.post('/api/pods', async (req, res) => {
   try {
-    res.status(201).json(await createPod(req.body ?? {}));
+    const pod = await createPod(req.body ?? {});
+    const user = requestUser(req);
+    if (user) {
+      await recordUserPodContext({
+        clerkUserId: user.clerkUserId,
+        podId: pod.id,
+        memberName: stringMeta(req.body?.profile?.displayName),
+        action: 'created_pod',
+        metadata: {
+          podName: pod.name,
+          repo: pod.repo,
+          identity: stringMeta(req.body?.profile?.displayName) ?? null,
+          email: stringMeta(req.body?.profile?.email) ?? null,
+          imageUrl: stringMeta(req.body?.profile?.imageUrl) ?? null,
+        },
+      });
+    }
+    res.status(201).json(await getPod(pod.id));
   } catch (e) {
     res.status(400).json({ error: (e as Error).message });
   }
@@ -113,6 +248,15 @@ app.patch('/api/pods/:id', async (req, res) => {
   try {
     const pod = await updatePod(req.params.id, req.body ?? {});
     if (!pod) return res.status(404).json({ error: 'pod not found' });
+    const user = requestUser(req);
+    if (user) {
+      await recordUserPodContext({
+        clerkUserId: user.clerkUserId,
+        podId: pod.id,
+        action: 'updated_pod',
+        metadata: { podName: pod.name, repo: pod.repo },
+      });
+    }
     res.json(pod);
   } catch (e) {
     res.status(400).json({ error: (e as Error).message });
@@ -130,18 +274,325 @@ app.post('/api/pods/:id/members', async (req, res) => {
   try {
     const pod = await addMember(req.params.id, req.body?.name ?? '');
     if (!pod) return res.status(404).json({ error: 'pod not found' });
-    res.json(pod);
+    const user = requestUser(req);
+    if (user) {
+      await recordUserPodContext({
+        clerkUserId: user.clerkUserId,
+        podId: pod.id,
+        memberName: typeof req.body?.name === 'string' ? req.body.name.trim() : undefined,
+        action: 'added_member',
+        metadata: {
+          identity: typeof req.body?.name === 'string' ? req.body.name.trim() : null,
+          email: stringMeta(req.body?.profile?.email) ?? null,
+          imageUrl: stringMeta(req.body?.profile?.imageUrl) ?? null,
+        },
+      });
+    }
+    res.json(await getPod(pod.id));
   } catch (e) {
     res.status(400).json({ error: (e as Error).message });
   }
 });
 
+app.post('/api/pods/:id/voice-test', async (req, res) => {
+  const podId = req.params.id;
+  const message =
+    typeof req.body?.message === 'string' && req.body.message.trim()
+      ? req.body.message.trim()
+      : 'PodMan voice test. Gemini TTS is playing through LiveKit.';
+  try {
+    await speakInRoom(podId, message);
+    res.json({ ok: true });
+  } catch (e) {
+    res.status(500).json({ error: (e as Error).message });
+  }
+});
+
+app.post('/api/pods/:id/live-conversation/start', async (req, res) => {
+  try {
+    const identity = typeof req.body?.identity === 'string' ? req.body.identity.trim() : '';
+    const displayName =
+      typeof req.body?.displayName === 'string' ? req.body.displayName.trim() : identity;
+    if (!identity) return res.status(400).json({ error: 'identity is required' });
+    const pod = await getPod(req.params.id);
+    if (!pod) return res.status(404).json({ error: 'pod not found' });
+    res.json(await startLiveConversation({ podId: req.params.id, identity, displayName }));
+  } catch (e) {
+    res.status(500).json({ error: (e as Error).message });
+  }
+});
+
+app.post('/api/pods/:id/live-conversation/:sessionId/stop', async (req, res) => {
+  try {
+    const session = await stopLiveConversation(req.params.id, req.params.sessionId);
+    if (!session) return res.status(404).json({ error: 'session not found' });
+    res.json({ ok: true, session });
+  } catch (e) {
+    res.status(500).json({ error: (e as Error).message });
+  }
+});
+
+app.get('/api/pods/:id/live-conversation/status', (req, res) => {
+  const identity = typeof req.query.identity === 'string' ? req.query.identity.trim() : '';
+  if (!identity) return res.status(400).json({ error: 'identity is required' });
+  res.json({ active: activeLiveConversation(req.params.id, identity) });
+});
+
+app.get('/api/pods/:id/live-conversation/:sessionId/hermes-job', async (req, res) => {
+  try {
+    const job = await getLatestHermesJobForSession(req.params.sessionId);
+    if (!job || job.podId !== req.params.id) return res.json({ job: null, events: [] });
+    res.json({ job, events: await listHermesJobEvents(job.id, 12) });
+  } catch (e) {
+    res.status(500).json({ error: (e as Error).message });
+  }
+});
+
+app.post('/api/pods/:id/live-conversation/:sessionId/hermes-job/abort', async (req, res) => {
+  try {
+    const job = await getActiveHermesJobForSession(req.params.sessionId);
+    if (!job || job.podId !== req.params.id)
+      return res.status(404).json({ error: 'active job not found' });
+    res.json({ job: await abortHermesJob(job.id) });
+  } catch (e) {
+    res.status(500).json({ error: (e as Error).message });
+  }
+});
+
+function requireInternalAgent(req: express.Request, res: express.Response): boolean {
+  const expected = env.INTERNAL_AGENT_TOKEN;
+  if (!expected) {
+    res.status(503).json({ error: 'INTERNAL_AGENT_TOKEN is not configured' });
+    return false;
+  }
+  const header = req.header('authorization') ?? '';
+  const actual = header.startsWith('Bearer ') ? header.slice('Bearer '.length) : '';
+  if (actual !== expected) {
+    res.status(401).json({ error: 'unauthorized' });
+    return false;
+  }
+  return true;
+}
+
+app.get('/api/internal/pods/:id/live-context', async (req, res) => {
+  if (!requireInternalAgent(req, res)) return;
+  try {
+    const identity = typeof req.query.identity === 'string' ? req.query.identity.trim() : '';
+    if (!identity) return res.status(400).json({ error: 'identity is required' });
+    res.json(await getLiveConversationContext(req.params.id, identity));
+  } catch (e) {
+    res.status(500).json({ error: (e as Error).message });
+  }
+});
+
+app.post('/api/internal/pods/:id/live-conversation/:sessionId/note', async (req, res) => {
+  if (!requireInternalAgent(req, res)) return;
+  try {
+    const note = typeof req.body?.note === 'string' ? req.body.note : '';
+    const identity = typeof req.body?.identity === 'string' ? req.body.identity : undefined;
+    const kind = typeof req.body?.kind === 'string' ? req.body.kind : undefined;
+    const saved = await recordLiveConversationNote({
+        podId: req.params.id,
+        sessionId: req.params.sessionId,
+        identity,
+        kind,
+        note,
+      });
+    res.status(201).json(saved);
+  } catch (e) {
+    res.status(400).json({ error: (e as Error).message });
+  }
+});
+
+app.post('/api/internal/hermes/jobs', async (req, res) => {
+  if (!requireInternalAgent(req, res)) return;
+  try {
+    res.status(202).json(await createHermesJob(req.body ?? {}));
+  } catch (e) {
+    res.status(400).json({ error: (e as Error).message });
+  }
+});
+
+app.get('/api/internal/hermes/jobs/:jobId', async (req, res) => {
+  if (!requireInternalAgent(req, res)) return;
+  const job = await getHermesJob(req.params.jobId);
+  if (!job) return res.status(404).json({ error: 'job not found' });
+  res.json(job);
+});
+
+app.post('/api/internal/hermes/jobs/:jobId/abort', async (req, res) => {
+  if (!requireInternalAgent(req, res)) return;
+  const job = await abortHermesJob(req.params.jobId);
+  if (!job) return res.status(404).json({ error: 'job not found' });
+  res.json(job);
+});
+
+app.get('/api/internal/hermes/jobs/:jobId/events', async (req, res) => {
+  if (!requireInternalAgent(req, res)) return;
+  const job = await getHermesJob(req.params.jobId);
+  if (!job) return res.status(404).json({ error: 'job not found' });
+  res.json(await listHermesJobEvents(req.params.jobId, 100));
+});
+
+app.post('/api/internal/hermes/jobs/:jobId/events', async (req, res) => {
+  if (!requireInternalAgent(req, res)) return;
+  try {
+    const { type, message, data } = req.body ?? {};
+    const eventType = hermesJobEventType(type);
+    if (!eventType || typeof message !== 'string') {
+      return res.status(400).json({ error: 'type and message are required' });
+    }
+    res.status(201).json(await appendHermesJobEvent(req.params.jobId, eventType, message, data));
+  } catch (e) {
+    res.status(400).json({ error: (e as Error).message });
+  }
+});
+
+app.get('/api/internal/hermes/jobs/:jobId/events/stream', async (req, res) => {
+  if (!requireInternalAgent(req, res)) return;
+  const job = await getHermesJob(req.params.jobId);
+  if (!job) return res.status(404).json({ error: 'job not found' });
+  res.setHeader('Content-Type', 'text/event-stream');
+  res.setHeader('Cache-Control', 'no-cache, no-transform');
+  res.setHeader('Connection', 'keep-alive');
+  res.flushHeaders?.();
+
+  let closed = false;
+  let lastIds = new Set<string>();
+  const send = async () => {
+    if (closed) return;
+    try {
+      const events = await listHermesJobEvents(req.params.jobId, 100);
+      const fresh = events.filter((event) => !lastIds.has(event.id));
+      lastIds = new Set(events.map((event) => event.id));
+      for (const event of fresh) {
+        res.write(`event: job-event\n`);
+        res.write(`data: ${JSON.stringify(event)}\n\n`);
+      }
+      const current = await getHermesJob(req.params.jobId);
+      if (current && ['completed', 'failed', 'aborted'].includes(current.status)) {
+        res.write(`event: done\n`);
+        res.write(`data: ${JSON.stringify(current)}\n\n`);
+        closed = true;
+        res.end();
+      } else {
+        res.write(`: keepalive ${Date.now()}\n\n`);
+      }
+    } catch (e) {
+      res.write(`event: error\n`);
+      res.write(`data: ${JSON.stringify({ error: (e as Error).message })}\n\n`);
+    }
+  };
+  await send();
+  const interval = setInterval(() => void send(), 1500);
+  req.on('close', () => {
+    closed = true;
+    clearInterval(interval);
+  });
+});
+
+// Per-pod background music (Lyria), generated once and cached. Streams MP3 the
+// frontend loops as a pod-wide LiveKit track (replaces the synthesized beat).
+app.get('/api/pods/:id/music', async (req, res) => {
+  try {
+    const pod = await getPod(req.params.id);
+    if (!pod) return res.status(404).json({ error: 'pod not found' });
+    const mp3 = await getPodMusic(pod.id, pod.name);
+    res.set('Content-Type', 'audio/mpeg');
+    res.set('Cache-Control', 'public, max-age=86400');
+    res.send(mp3);
+  } catch (e) {
+    res.status(500).json({ error: (e as Error).message });
+  }
+});
+
+app.post('/api/pods/:id/hermes/notify', async (req, res) => {
+  const podId = req.params.id;
+  const pod = await getPod(podId);
+  if (!pod) return res.status(404).json({ error: 'pod not found' });
+
+  const body = req.body ?? {};
+  const message = typeof body.message === 'string' ? body.message.trim() : '';
+  if (!message) return res.status(400).json({ error: 'message is required' });
+
+  const now = new Date().toISOString();
+  const engineers = stringArray(body.engineers);
+  const recipients = engineers.length ? engineers : pod.members.slice(0, 2);
+  const file =
+    typeof body.file === 'string' && body.file.trim() ? body.file.trim() : 'Hermes signal';
+  const urgent = body.urgency === 'urgent' || body.severity === 'critical';
+  const collision: Collision = {
+    id:
+      typeof body.collisionId === 'string' && body.collisionId
+        ? body.collisionId
+        : `col_${Date.now()}`,
+    podId,
+    file,
+    symbol: typeof body.symbol === 'string' && body.symbol ? body.symbol : undefined,
+    engineers: recipients,
+    severity: urgent ? 'critical' : 'warn',
+    githubState: { unpushed: body.unpushed !== false },
+    detectedAt: now,
+  };
+  const intervention: Intervention = {
+    id:
+      typeof body.interventionId === 'string' && body.interventionId
+        ? body.interventionId
+        : `int_${Date.now()}`,
+    collisionId: collision.id,
+    podId,
+    kind: urgent ? 'voice' : 'card',
+    message,
+    suggestedAction: {
+      kind: suggestedAction(body.suggestedAction),
+      params: {
+        file,
+        engineers: recipients,
+        source: 'local-hermes',
+      },
+    },
+    status: 'pending',
+    createdAt: now,
+  };
+  const voiceLine =
+    urgent && body.speak !== false
+      ? typeof body.voiceLine === 'string' && body.voiceLine.trim()
+        ? body.voiceLine.trim()
+        : message
+      : undefined;
+
+  try {
+    if (body.force !== true && (await hasRecentInterventionForCollision(collision))) {
+      return res.status(202).json({ ok: true, collision, intervention, livekit: 'suppressed' });
+    }
+    await recordCollision(collision);
+    await recordIntervention(intervention);
+    if (body.dryRun === true) {
+      return res.status(202).json({ ok: true, collision, intervention, livekit: 'dry-run' });
+    }
+    await notifyHermesInterventionInRoom(podId, collision, intervention, voiceLine);
+    res.status(202).json({ ok: true, collision, intervention, livekit: 'notified' });
+  } catch (e) {
+    res.status(500).json({ error: (e as Error).message });
+  }
+});
+
 app.delete('/api/pods/:id/members/:name', async (req, res) => {
   const pod = await removeMember(req.params.id, req.params.name);
   if (!pod) return res.status(404).json({ error: 'pod not found' });
   res.json(pod);
 });
 
+app.get('/api/pods/:id/members/:name/history', async (req, res) => {
+  try {
+    const hours = Number(req.query.hours ?? 24) || 24;
+    const limit = Number(req.query.limit ?? 80) || 80;
+    res.json(await getMemberWorkHistory(req.params.id, req.params.name, { hours, limit }));
+  } catch (e) {
+    res.status(500).json({ error: (e as Error).message });
+  }
+});
+
 // --- Continual-learning graph (team_model view) ---
 app.get('/api/pods/:id/graph', async (req, res) => {
   try {
@@ -159,7 +610,58 @@ app.get('/api/pods/:id/graph/reach/:node', async (req, res) => {
   }
 });
 
+app.get('/api/pods/:id/activity', async (req, res) => {
+  try {
+    const limit = Math.min(Number(req.query.limit ?? 80) || 80, 200);
+    res.json(await listPodActivity(req.params.id, limit));
+  } catch (e) {
+    res.status(500).json({ error: (e as Error).message });
+  }
+});
+
+app.get('/api/pods/:id/activity/stream', async (req, res) => {
+  res.setHeader('Content-Type', 'text/event-stream');
+  res.setHeader('Cache-Control', 'no-cache, no-transform');
+  res.setHeader('Connection', 'keep-alive');
+  res.flushHeaders?.();
+
+  let closed = false;
+  let lastPayload = '';
+
+  const send = async () => {
+    if (closed) return;
+    try {
+      const events = await listPodActivity(req.params.id, 80);
+      const payload = JSON.stringify(events);
+      if (payload !== lastPayload) {
+        lastPayload = payload;
+        res.write(`event: snapshot\n`);
+        res.write(`data: ${payload}\n\n`);
+      } else {
+        res.write(`: keepalive ${Date.now()}\n\n`);
+      }
+    } catch (e) {
+      res.write(`event: error\n`);
+      res.write(`data: ${JSON.stringify({ error: (e as Error).message })}\n\n`);
+    }
+  };
+
+  await send();
+  const interval = setInterval(() => void send(), 1500);
+
+  req.on('close', () => {
+    closed = true;
+    clearInterval(interval);
+  });
+});
+
 const http = createServer(app);
+const sockets = new Set<Socket>();
+
+http.on('connection', (socket) => {
+  sockets.add(socket);
+  socket.on('close', () => sockets.delete(socket));
+});
 
 // ws relay: the agent pushes collision/intervention JSON here; PWAs subscribed by pod receive it.
 const wss = new WebSocketServer({ server: http, path: '/api/events' });
@@ -177,7 +679,11 @@ http.listen(env.PORT, '0.0.0.0', () => {
   console.log(`[server] :${env.PORT}`);
   initMemory()
     .then(() => seedDefaultPods())
-    .catch((e) => console.warn(`[memory] init failed: ${(e as Error).message}`));
+    .catch((e) => {
+      // MongoDB is mandatory — do not run a half-dead API against a broken DB.
+      console.error(`[memory] init FAILED, exiting: ${(e as Error).message}`);
+      process.exit(1);
+    });
 });
 
 let shuttingDown = false;
@@ -187,7 +693,11 @@ async function shutdown(signal: NodeJS.Signals): Promise<void> {
   console.log(`[server] ${signal} received; shutting down`);
   for (const client of clients) client.close();
   wss.close();
-  await new Promise<void>((resolve) => http.close(() => resolve()));
+  for (const socket of sockets) socket.destroy();
+  await Promise.race([
+    new Promise<void>((resolve) => http.close(() => resolve())),
+    new Promise<void>((resolve) => setTimeout(resolve, 5000)),
+  ]);
   await closeMemory().catch((e) => console.warn(`[memory] close failed: ${(e as Error).message}`));
   process.exit(0);
 }

backend/src/vision/gemini.ts

@@ -7,6 +7,11 @@ const ai = new GoogleGenAI({ apiKey: env.GEMINI_API_KEY });
 const SCHEMA = {
   type: Type.OBJECT,
   properties: {
+    mode: {
+      type: Type.STRING,
+      description:
+        'editing when an IDE/editor/terminal is primary; research for browser docs/SDK pages',
+    },
     currentFile: {
       type: Type.STRING,
       description: 'open file path if visible, e.g. src/auth/session.ts',
@@ -20,13 +25,24 @@ const SCHEMA = {
       type: Type.BOOLEAN,
       description: 'dirty git gutter / modified markers visible',
     },
+    researchTopic: {
+      type: Type.STRING,
+      description: 'topic being researched when mode is research, e.g. LiveKit agents setup',
+    },
+    researchSource: {
+      type: Type.STRING,
+      description: 'source domain when mode is research, e.g. docs.livekit.io',
+    },
     confidence: { type: Type.NUMBER, description: '0..1 confidence in this read' },
   },
   propertyOrdering: [
+    'mode',
     'currentFile',
     'currentSymbol',
     'activity',
     'hasUnpushedChanges',
+    'researchTopic',
+    'researchSource',
     'confidence',
   ],
 } as const;
@@ -43,7 +59,10 @@ export async function analyzeFrame(
         role: 'user',
         parts: [
           {
-            text: "You are PodMan watching an engineer's screen. Identify what file/symbol they are working on and whether there are uncommitted edits. JSON only.",
+            text:
+              "You are PodMan watching an engineer's screen. Return JSON only. " +
+              "If the primary window is an IDE/editor/terminal, set mode='editing' and identify the file, symbol, activity, and whether uncommitted edits are visible. " +
+              "If the primary window is a browser/docs/SDK/reference page, set mode='research', leave currentFile empty unless a file path is clearly visible, and extract researchTopic plus researchSource as the source domain.",
           },
           { inlineData: { mimeType: 'image/jpeg', data: jpeg.toString('base64') } },
         ],
@@ -63,6 +82,9 @@ export async function analyzeFrame(
     currentFile: parsed.currentFile,
     currentSymbol: parsed.currentSymbol,
     activity: parsed.activity,
+    mode: parsed.mode,
+    researchTopic: parsed.researchTopic,
+    researchSource: parsed.researchSource,
     hasUnpushedChanges: parsed.hasUnpushedChanges,
     confidence: parsed.confidence ?? 0.5,
     observedAt: new Date().toISOString(),

backend/src/voice/live.ts

@@ -3,19 +3,46 @@ import {
   AudioFrame,
   AudioSource,
   LocalAudioTrack,
+  Room,
   TrackPublishOptions,
   TrackSource,
-  type Room,
+  type LocalParticipant,
 } from '@livekit/rtc-node';
 import { GoogleGenAI, Modality, type LiveServerMessage, type Session } from '@google/genai';
+import { AccessToken } from 'livekit-server-sdk';
 import { DATA_TOPIC, type DataMessage } from '@podman/shared';
 import { env } from '../env.js';
 
 const SAMPLE_RATE = 24_000;
 const CHANNELS = 1;
 const FRAME_SAMPLES = SAMPLE_RATE / 10;
+const SUBSCRIBER_READY_MS = 1_500;
+const AUDIO_PREROLL_MS = 800;
+const AUDIO_TAIL_MS = 1_500;
+const AUDIO_HOLD_MS = 5_000;
+const VOICE_QUEUE_MS = 60_000;
+const VOICE_TRACK_PREFIX = 'podman-hermes-voice';
 const encoder = new TextEncoder();
 const ai = new GoogleGenAI({ apiKey: env.GEMINI_API_KEY });
+let voiceQueue: Promise<void> = Promise.resolve();
+
+export interface SpeakOptions {
+  priority?: 'normal' | 'critical';
+}
+
+function delay(ms: number): Promise<void> {
+  return new Promise((resolve) => setTimeout(resolve, ms));
+}
+
+function ttsPrompt(message: string): string {
+  return [
+    'Speak this PodMan coordination alert as a calm, natural engineering teammate.',
+    'Use warm human pacing, clear pronunciation, and a brief pause after the first sentence.',
+    'Do not add extra words, labels, markdown, or sound effects.',
+    '',
+    message,
+  ].join('\n');
+}
 
 async function publishVoiceCue(room: Room, message: string): Promise<void> {
   const cue: DataMessage = { type: 'VOICE_CUE', text: message };
@@ -25,12 +52,24 @@ async function publishVoiceCue(room: Room, message: string): Promise<void> {
   });
 }
 
+async function unpublishVoiceTracks(localParticipant: LocalParticipant): Promise<void> {
+  const publications = Array.from(localParticipant.trackPublications.values()).filter(
+    (publication) => publication.name?.startsWith(VOICE_TRACK_PREFIX) && publication.sid,
+  );
+  for (const publication of publications) {
+    await localParticipant.unpublishTrack(publication.sid!, true).catch((err) => {
+      console.warn(`[voice] stale track cleanup failed: ${(err as Error).message}`);
+    });
+  }
+}
+
 function audioFrameFromBase64(data: string, mimeType?: string): AudioFrame | null {
   if (mimeType && !mimeType.includes('audio')) return null;
   const buf = Buffer.from(data, 'base64');
   if (buf.byteLength < 2) return null;
   const bytes = buf.byteLength % 2 === 0 ? buf : buf.subarray(0, buf.byteLength - 1);
-  const samples = new Int16Array(bytes.buffer, bytes.byteOffset, bytes.byteLength / 2);
+  const samples = new Int16Array(bytes.byteLength / 2);
+  for (let i = 0; i < samples.length; i += 1) samples[i] = bytes.readInt16LE(i * 2);
   return new AudioFrame(samples, SAMPLE_RATE, CHANNELS, samples.length / CHANNELS);
 }
 
@@ -53,7 +92,7 @@ function framesFromPcmBase64(data: string, mimeType?: string): AudioFrame[] {
   const samples = frame.data;
   const frames: AudioFrame[] = [];
   for (let offset = 0; offset < samples.length; offset += FRAME_SAMPLES) {
-    const chunk = samples.subarray(offset, Math.min(offset + FRAME_SAMPLES, samples.length));
+    const chunk = samples.slice(offset, Math.min(offset + FRAME_SAMPLES, samples.length));
     frames.push(new AudioFrame(chunk, SAMPLE_RATE, CHANNELS, chunk.length / CHANNELS));
   }
   return frames;
@@ -62,10 +101,11 @@ function framesFromPcmBase64(data: string, mimeType?: string): AudioFrame[] {
 async function generateTtsFrames(message: string): Promise<AudioFrame[]> {
   const res = await ai.models.generateContent({
     model: env.GEMINI_LIVE_MODEL,
-    contents: [{ parts: [{ text: message }] }],
+    contents: [{ parts: [{ text: ttsPrompt(message) }] }],
     config: {
       responseModalities: [Modality.AUDIO],
-      speechConfig: { voiceConfig: { prebuiltVoiceConfig: { voiceName: 'Kore' } } },
+      speechConfig: { voiceConfig: { prebuiltVoiceConfig: { voiceName: env.GEMINI_TTS_VOICE } } },
+      temperature: 0.8,
     },
   });
   const parts = res.candidates?.[0]?.content?.parts ?? [];
@@ -74,29 +114,60 @@ async function generateTtsFrames(message: string): Promise<AudioFrame[]> {
   );
 }
 
-async function speakWithTts(source: AudioSource, message: string): Promise<void> {
-  for (const frame of await generateTtsFrames(message)) {
-    await source.captureFrame(frame);
-  }
+function fallbackVoiceLine(message: string): string {
+  const clean = message.replace(/^heads up[.!]?\s*/i, '').trim();
+  if (clean && clean !== message) return clean;
+  return 'PodMan noticed a critical conflict. Please sync with the team before pushing.';
 }
 
-async function speakWithLive(source: AudioSource, message: string): Promise<void> {
+async function speakWithTts(source: AudioSource, message: string): Promise<number> {
+  let frames: AudioFrame[];
+  try {
+    frames = await generateTtsFrames(message);
+  } catch (err) {
+    const fallback = fallbackVoiceLine(message);
+    console.warn(`[voice] Gemini TTS retrying with fallback line: ${(err as Error).message}`);
+    frames = await generateTtsFrames(fallback);
+  }
+  if (frames.length === 0) throw new Error('Gemini TTS returned no audio frames');
+  const durationMs = frames.reduce(
+    (sum, frame) => sum + (frame.samplesPerChannel / frame.sampleRate) * 1000,
+    0,
+  );
+  console.log(
+    `[voice] publishing Gemini TTS audio frames=${frames.length} durationMs=${Math.round(durationMs)}`,
+  );
+  for (const frame of frames) {
+    await source.captureFrame(frame);
+  }
+  return durationMs;
+}
+
+async function speakWithLive(source: AudioSource, message: string): Promise<number> {
+  let durationMs = 0;
   let done: () => void = () => {};
   const donePromise = new Promise<void>((resolve) => {
     done = resolve;
   });
   const session: Session = await ai.live.connect({
     model: env.GEMINI_LIVE_MODEL,
-    config: { responseModalities: [Modality.AUDIO] },
+    config: {
+      responseModalities: [Modality.AUDIO],
+      speechConfig: { voiceConfig: { prebuiltVoiceConfig: { voiceName: env.GEMINI_TTS_VOICE } } },
+      temperature: 0.8,
+    },
     callbacks: {
       onmessage: (event) => {
         void (async () => {
-          for (const frame of audioFrames(event)) await source.captureFrame(frame);
+          for (const frame of audioFrames(event)) {
+            durationMs += (frame.samplesPerChannel / frame.sampleRate) * 1000;
+            await source.captureFrame(frame);
+          }
           if (event.serverContent?.turnComplete || event.serverContent?.generationComplete) done();
         })();
       },
       onerror: (event) => {
-        console.warn(`[voice] Gemini Live error: ${event.message}`);
+        console.warn(`[voice] Gemini voice error: ${event.message}`);
         done();
       },
       onclose: done,
@@ -104,36 +175,106 @@ async function speakWithLive(source: AudioSource, message: string): Promise<void
   });
 
   session.sendClientContent({
-    turns: [{ role: 'user', parts: [{ text: message }] }],
+    turns: [{ role: 'user', parts: [{ text: ttsPrompt(message) }] }],
     turnComplete: true,
   });
 
   await Promise.race([donePromise, new Promise((resolve) => setTimeout(resolve, 15_000))]);
   session.close();
+  return durationMs;
 }
 
-/**
- * Speak a message into the LiveKit room using Gemini Live audio. A data-channel
- * VOICE_CUE is sent first so clients still get the cue if audio generation or
- * publishing fails.
- */
-export async function speak(room: Room, message: string): Promise<void> {
-  await publishVoiceCue(room, message);
-  if (!room.localParticipant) return;
+async function waitForVoicePlayout(source: AudioSource): Promise<void> {
+  if (source.queuedDuration <= 0) return;
+  const queuedMs = Math.round(source.queuedDuration);
+  console.log(`[voice] waiting for queued audio playout queuedMs=${queuedMs}`);
+  await Promise.race([
+    source.waitForPlayout(),
+    new Promise((resolve) => setTimeout(resolve, VOICE_QUEUE_MS + 2_000)),
+  ]);
+  console.log('[voice] queued audio playout complete');
+}
 
-  const source = new AudioSource(SAMPLE_RATE, CHANNELS);
-  const track = LocalAudioTrack.createAudioTrack('podman-hermes-voice', source);
+async function captureSilence(source: AudioSource, durationMs: number): Promise<void> {
+  const totalSamples = Math.max(1, Math.round((SAMPLE_RATE * durationMs) / 1000));
+  for (let offset = 0; offset < totalSamples; offset += FRAME_SAMPLES) {
+    const samples = Math.min(FRAME_SAMPLES, totalSamples - offset);
+    await source.captureFrame(new AudioFrame(new Int16Array(samples), SAMPLE_RATE, CHANNELS, samples));
+  }
+}
+
+async function speakAudio(room: Room, message: string): Promise<void> {
+  const localParticipant = room.localParticipant;
+  if (!localParticipant) return;
+  await unpublishVoiceTracks(localParticipant);
+  const source = new AudioSource(SAMPLE_RATE, CHANNELS, VOICE_QUEUE_MS);
+  const track = LocalAudioTrack.createAudioTrack(`${VOICE_TRACK_PREFIX}-${Date.now()}`, source);
   const options = new TrackPublishOptions();
   options.source = TrackSource.SOURCE_MICROPHONE;
+  let publicationSid: string | undefined;
 
   try {
-    const publication = await room.localParticipant.publishTrack(track, options);
-    if (env.GEMINI_LIVE_MODEL.includes('tts')) await speakWithTts(source, message);
-    else await speakWithLive(source, message);
-    if (publication.sid) await room.localParticipant.unpublishTrack(publication.sid, true);
-    await source.close();
+    const publication = await localParticipant.publishTrack(track, options);
+    publicationSid = publication.sid;
+    await delay(SUBSCRIBER_READY_MS);
+    await captureSilence(source, AUDIO_PREROLL_MS);
+    const audioDurationMs = env.GEMINI_LIVE_MODEL.includes('tts')
+      ? await speakWithTts(source, message)
+      : await speakWithLive(source, message);
+    await captureSilence(source, AUDIO_TAIL_MS);
+    await waitForVoicePlayout(source);
+    const manualHoldMs = Math.ceil(audioDurationMs + AUDIO_TAIL_MS + AUDIO_HOLD_MS);
+    console.log(`[voice] holding track for subscriber playout holdMs=${manualHoldMs}`);
+    await delay(manualHoldMs);
   } catch (err) {
-    console.warn(`[voice] Gemini Live publish failed: ${(err as Error).message}`);
+    console.warn(`[voice] Gemini voice publish failed: ${(err as Error).message}`);
+  } finally {
+    if (publicationSid) {
+      await localParticipant.unpublishTrack(publicationSid, true).catch((err) => {
+        console.warn(`[voice] track unpublish failed: ${(err as Error).message}`);
+      });
+    }
     await source.close().catch(() => {});
   }
 }
+
+/**
+ * Speak a message into the LiveKit room using Gemini audio. A data-channel
+ * VOICE_CUE is sent first so clients still get the cue if audio generation or
+ * publishing fails.
+ */
+export async function speak(room: Room, message: string, options: SpeakOptions = {}): Promise<void> {
+  await publishVoiceCue(room, message);
+  if (options.priority === 'critical') {
+    await speakAudio(room, message);
+    return;
+  }
+  voiceQueue = voiceQueue.catch(() => {}).then(() => speakAudio(room, message));
+  await voiceQueue;
+}
+
+export async function speakInRoom(
+  roomName: string,
+  message: string,
+  options: SpeakOptions = {},
+): Promise<void> {
+  const room = new Room();
+  try {
+    const at = new AccessToken(env.LIVEKIT_API_KEY, env.LIVEKIT_API_SECRET, {
+      identity: `podman-voice-${Date.now()}`,
+      name: 'PodMan voice',
+      ttl: '5m',
+    });
+    at.addGrant({
+      roomJoin: true,
+      room: roomName,
+      canPublish: true,
+      canSubscribe: true,
+      canPublishData: true,
+    });
+    await room.connect(env.LIVEKIT_URL, await at.toJwt());
+    await speak(room, message, options);
+  } finally {
+    await room.disconnect().catch(() => {});
+  }
+}

backend/src/voice/music.ts

@@ -0,0 +1,94 @@
+import { Buffer } from 'node:buffer';
+import { getDb } from '../memory/db.js';
+import { env } from '../env.js';
+
+// Lyria 3 is reached via the Gemini "interactions" endpoint (not :predict, which
+// is the Vertex path). The clip model returns a ~30s base64 MP3.
+const MUSIC_MODEL = process.env.GEMINI_MUSIC_MODEL ?? 'lyria-3-clip-preview';
+const INTERACTIONS_URL = 'https://generativelanguage.googleapis.com/v1beta/interactions';
+
+interface PodMusicDoc {
+  podId: string;
+  name: string; // pod name the vocal was generated for
+  model: string;
+  mp3Base64: string;
+  createdAt: string;
+}
+
+interface InteractionContent {
+  type?: string;
+  data?: string;
+  text?: string;
+}
+interface InteractionResponse {
+  steps?: Array<{ content?: InteractionContent[] }>;
+  output_audio?: { data?: string };
+}
+
+/**
+ * Background "hold music" prompt: opens with the pod name sung once, then a calm
+ * instrumental bed that loops. Keep it unobtrusive — this is fill, not a song.
+ */
+function musicPrompt(podName: string): string {
+  return [
+    'Calm soothing instrumental background hold music for a tech app, like gentle on-hold lobby music.',
+    `It opens in the first three seconds with a soft gentle voice clearly saying the words "${podName}" one time,`,
+    'and after that opening it is purely instrumental with warm electric piano, gentle synth pads and a soft relaxed beat.',
+    'Unobtrusive, pleasant and steady with no climax, designed to loop seamlessly as quiet background fill.',
+    'No other lyrics or vocals after the opening.',
+  ].join(' ');
+}
+
+function extractAudioBase64(data: InteractionResponse): string | null {
+  for (const step of data.steps ?? []) {
+    for (const c of step.content ?? []) {
+      if (c.type === 'audio' && c.data) return c.data;
+    }
+  }
+  return data.output_audio?.data ?? null;
+}
+
+async function generate(podName: string): Promise<Buffer> {
+  const res = await fetch(INTERACTIONS_URL, {
+    method: 'POST',
+    headers: { 'Content-Type': 'application/json', 'x-goog-api-key': env.GEMINI_API_KEY },
+    body: JSON.stringify({ model: MUSIC_MODEL, input: musicPrompt(podName) }),
+  });
+  if (!res.ok) {
+    throw new Error(`Lyria ${res.status}: ${(await res.text()).slice(0, 300)}`);
+  }
+  const data = (await res.json()) as InteractionResponse;
+  const b64 = extractAudioBase64(data);
+  if (!b64) throw new Error('Lyria returned no audio');
+  return Buffer.from(b64, 'base64');
+}
+
+/**
+ * The pod's background-music MP3, generated by Lyria on first request and cached
+ * in the `pod_music` collection. Regenerated if the pod name changes so the sung
+ * name stays correct. Lyria generation is slow (~20s); the cache makes every
+ * call after the first instant.
+ */
+export async function getPodMusic(podId: string, podName: string): Promise<Buffer> {
+  const db = await getDb();
+  const col = db.collection<PodMusicDoc>('pod_music');
+  const cached = await col.findOne({ podId });
+  if (cached && cached.name === podName && cached.model === MUSIC_MODEL && cached.mp3Base64) {
+    return Buffer.from(cached.mp3Base64, 'base64');
+  }
+  const mp3 = await generate(podName);
+  await col.updateOne(
+    { podId },
+    {
+      $set: {
+        podId,
+        name: podName,
+        model: MUSIC_MODEL,
+        mp3Base64: mp3.toString('base64'),
+        createdAt: new Date().toISOString(),
+      },
+    },
+    { upsert: true },
+  );
+  return mp3;
+}

docs/PLAN.md

@@ -1,730 +0,0 @@
-# PodMan - Canonical Master Plan
-
-> Source of truth for PodMan product intent, current implementation truth, demo
-> strategy, public interfaces, risks, sponsor story, and next build order.
->
-> If this file conflicts with `README.md`, `docs/idea.md`, `docs/livekit.md`,
-> `docs/gemini.md`, `docs/mongodb.md`, `docs/digitalocean.md`,
-> `docs/demo-setup.md`, or `docs/superpowers/specs/*`, follow this file and
-> treat the older docs as reference material to reconcile later.
-
----
-
-## 1. Product thesis
-
-**PodMan sees active work before it becomes visible to GitHub, remembers how the
-team works, researches better paths in the background, and coordinates teammates
-without being intrusive.**
-
-GitHub knows pushed branches, PRs, issues, and comments. It cannot see the most
-expensive coordination failures while they are still forming on laptops: two
-engineers editing the same unpushed file, someone blocked on an endpoint a
-teammate is nearly done with, duplicated work starting silently, or a team
-walking into a dead-end implementation path.
-
-PodMan puts engineers in a consented LiveKit pod, watches live IDE/screen
-context, fuses that with scheduled local git reports, GitHub state, MongoDB team
-memory, and background research, then routes only useful interventions through
-Hermes. The default is a small visual card. Hermes can message teammates when
-the team needs coordination. Voice is reserved for urgent escalation.
-
-**One-line product definition:** PodMan is a non-intrusive, continual-learning
-team assistant for active coding.
-
-**One-line demo promise:** PodMan notices live work, finds a better path,
-remembers a previous intervention, and escalates only when the team actually
-needs it.
-
----
-
-## 2. Product contract
-
-### Inputs
-
-- **Live IDE/screen context:** engineers join a LiveKit room and publish screen
-  share so the backend agent can sample real work in progress.
-- **Scheduled local git state:** each laptop should report dirty files,
-  unpushed commits, branch, and latest commit about every minute. This is the
-  deterministic fallback for facts vision cannot reliably infer.
-- **MongoDB team memory:** ownership, current tasks, blockers, repeated
-  mistakes, preferred tools, decisions, intervention history, and outcomes.
-- **GitHub repo state:** public repo metadata, branches, PR artifacts, and
-  issue/PR state when it exists.
-- **Background research signals:** tool, repo, skill, package, docs, and
-  dead-end evidence discovered while teammates are working.
-
-### Outputs
-
-- **Default:** small visual intervention card in the PodMan frontend.
-- **Coordination:** Hermes message to the right teammate(s) or project channel.
-- **Urgent escalation:** voice only when timing or risk justifies interruption.
-- **Action path:** optional sync PR, research recommendation, summary, fix
-  suggestion, or teammate notification.
-
-### Memory rules
-
-- Remember team-level work patterns, not raw screen recordings.
-- Store structured observations, collisions, interventions, outcomes, and pod
-  state.
-- Add exact-signature recall before vector recall: normalized file, symbol,
-  engineer pair, event type, and accepted/dismissed outcome.
-- Privacy must stay explicit: engineers consent by joining the pod and sharing
-  screen context; do not store raw screenshots, full recordings, or secrets.
-
-### Non-goals
-
-- Not a dashboard as the product center.
-- Not a screenshot analyzer with no action loop.
-- Not sponsor-padding; every sponsor technology must be load-bearing or clearly
-  marked as optional polish.
-- Not a task manager, Slack clone, full auth system, or general surveillance
-  tool.
-
----
-
-## 3. Track fit: Continual Learning
-
-PodMan fits **Continual Learning** because the system gets more useful from team
-history and intervention outcomes.
-
-- **Team model:** observations build ownership, hotspot, blocker, tool, and
-  decision memory per pod.
-- **Outcome loop:** accepted, dismissed, and confirmed interventions become
-  supervision for future thresholds and routing.
-- **Session compounding:** a later similar situation should reference prior
-  memory, choose a better action sooner, or lower the noise level.
-- **Visible demo proof:** the first intervention writes memory; the second
-  similar situation retrieves it and says, in effect, "I have seen this pattern
-  before."
-
-The learning proof should not depend on Atlas Vector Search being finished.
-Exact MongoDB recall is enough for the MVP learning beat.
-
----
-
-## 4. Current implementation truth
-
-Verified on `2026-06-27` from local repo inspection, authenticated `gh`, and
-the current remote plan commit.
-
-### GitHub state
-
-- Repo: <https://github.com/karti-ai/podman>
-- Visibility: public
-- Default branch: `main`
-- Current local branch: `main`
-- Local branch state during this rewrite: behind `origin/main` by two commits
-- Issues: none
-- PRs: none
-- `origin/main` latest relevant commits:
-  - `8271188 feat(frontend): live room view, beat connectivity test, session resume`
-  - `65a0791 docs(plan): audit server state + mark tasks 1-5 done, reflect actual arch`
-
-### Working / started
-
-- Monorepo packages exist: `frontend`, `backend`, `shared`, `database`, and
-  `infra`.
-- Backend is split into two processes:
-  - API service in `backend/src/server.ts`.
-  - LiveKit agent worker in `backend/src/agent.ts`.
-- Backend API exposes:
-  - `GET /health`
-  - `POST /api/token`
-  - `POST /api/sync-pr`
-  - `POST /api/outcome`
-  - `GET /api/memory/stats`
-  - `GET /api/pods`
-  - `POST /api/pods`
-  - `GET /api/pods/:id`
-  - `PATCH /api/pods/:id`
-  - `DELETE /api/pods/:id`
-  - `POST /api/pods/:id/members`
-  - `DELETE /api/pods/:id/members/:name`
-- Remote API health check returned `{"ok":true}` at
-  `http://165.22.129.249:8787/health` during verification.
-- The LiveKit agent uses `@livekit/rtc-node` to join as `podman-agent`, subscribe
-  to `TrackSource.SOURCE_SCREENSHARE`, sample frames near 1 fps, convert frames
-  to RGBA, and encode downscaled JPEGs with `sharp`.
-- Gemini vision is wired in `backend/src/vision/gemini.ts` with JSON structured
-  output, response schema, low media resolution, and model ID from env.
-- Collision detection exists and groups engineer contexts by normalized file,
-  then fires when 2+ engineers touch the same file and at least one unpushed or
-  dirty signal exists.
-- Shared LiveKit data topic and wire messages exist:
-  - topic: `podman.intervention`
-  - messages: `COLLISION`, `VOICE_CUE`, `ACK`, `GIT_REPORT`
-- MongoDB persistence groundwork exists for observations, collisions,
-  interventions, outcomes, and pods.
-- Frontend has pod selection, pod join, post-join pod view, LiveKit join helper,
-  and dev-mode fallback.
-- `origin/main` adds live room participants, active-speaker state, session
-  resume, a "Play beat" audio connectivity test, and a deliberate "Share my
-  screen" button that publishes with `Track.Source.ScreenShare`. Merge that
-  remote commit before doing more frontend work on the local checkout.
-- DigitalOcean infra scaffolding exists:
-  - `infra/.do/app.yaml` is the split App Platform direction.
-  - `infra/app.yaml` is an older single-service backend spec and should be
-    treated as legacy until reconciled.
-
-### Server snapshot
-
-From the remote plan snapshot and health check on `2026-06-27`:
-
-- Backend API: running on `http://165.22.129.249:8787` and `/health` returned
-  `{"ok":true}`.
-- Frontend: reported running on `:81`; port `80` was already taken.
-- Agent worker: reported not running; it still needs LiveKit credentials and
-  `pnpm --filter @podman/backend dev:agent`.
-- Treat this as operational evidence, not architecture truth. Reverify before
-  demo.
-
-### Partial / completed since the original audit
-
-- `backend/src/voice/live.ts` now publishes a `VOICE_CUE` fallback and attempts
-  Gemini audio publication into LiveKit. The agent only calls it for critical
-  interventions so voice remains an urgent escalation path.
-- Hermes now has a data-channel teammate message path via `HERMES_MESSAGE` on
-  the existing `podman.intervention` topic. This is the MVP notification bridge,
-  not a Slack/Discord integration.
-- `backend/src/memory/vectors.ts` implements exact-signature recall first and
-  can use Voyage/Gemini embeddings with Atlas Vector Search when configured.
-- Exact-signature recall now attaches prior interventions/outcomes and prefers
-  accepted real collisions, giving the learning beat deterministic MongoDB
-  proof before vector search.
-- `backend/src/memory/policy.ts` now uses severity, per-pod cooldown, and prior
-  outcome history. It is still a simple policy, not a trained threshold model.
-- `POST /api/sync-pr` now creates a visible Markdown sync artifact commit before
-  opening the PR.
-- Frontend `PodView` renders intervention cards, Hermes messages, voice cues,
-  and the accepted sync PR artifact link.
-- Browser screen publishing exists, but the active join path must be proven to
-  tag tracks as screen share so the backend agent can filter them correctly. The
-  `origin/main` screen-share button appears to address this; local code remains
-  behind until that commit is merged.
-- `GIT_REPORT` exists in shared types and agent handling. `scripts/podman-agent.mjs`
-  is the finished per-laptop git sidecar — polls every 15 s, upserts git fields
-  to `engineer_states` collection. The backend agent now fuses those Mongo
-  git-state fields into live contexts before collision detection; direct
-  LiveKit `GIT_REPORT` publication from the sidecar remains optional.
-- Background research recommendations are a product requirement and demo goal,
-  not an implemented research agent yet.
-- Deployment reliability is partial; API health is reachable, but API/static
-  site/worker together must still be reverified before demo.
-- Env docs now align on `gemini-3.5-flash` for vision and
-  `gemini-3.1-flash-tts-preview` for voice. The backend still preserves a Gemini
-  Live path for future available Live models.
-
-### Not yet proven
-
-- Real browser -> LiveKit room -> backend agent screen-frame capture end to end.
-- Real Gemini inference from a live shared IDE frame using the stage key/model.
-- Real data-channel intervention card rendering in the active frontend.
-- Hermes message routing to teammates.
-- Voice escalation heard by participants through LiveKit.
-- A meaningful real sync PR flow with correct GitHub scopes and artifact.
-- Atlas Vector Search / Voyage recall path.
-- DigitalOcean static site + API service + LiveKit agent worker all running
-  together.
-- Background research recommendation that is both timely and evidence-backed.
-
----
-
-## 5. Architecture to build toward
-
-```
-Engineer browser PWA
-  - joins a pod room
-  - publishes screen share and optional mic
-  - receives intervention cards and voice
-        |
-        v
-LiveKit room
-  - one room per pod
-  - screen-share tracks are the live work signal
-  - small reliable data packets carry interventions
-        |
-        v
-PodMan backend agent worker
-  - @livekit/rtc-node room participant
-  - screen-track subscription
-  - frame throttle and JPEG encode
-  - Gemini structured vision
-  - scheduled GIT_REPORT fusion
-  - GitHub state fusion
-  - collision, blocker, duplicate-work, and dead-end detection
-  - MongoDB memory recall and policy
-        |
-        v
-Hermes action layer
-  - visual card routing
-  - teammate messages
-  - urgent voice escalation
-  - optional research/action/sync PR workflows
-        |
-        v
-Backend API + MongoDB + GitHub
-  - token minting, pod CRUD, outcomes, memory stats
-  - observations, collisions, interventions, outcomes, pod memory
-  - public repo state and PR artifacts
-```
-
-The backend must remain split:
-
-- **API service:** routable HTTP process with `/api/*` endpoints and health
-  checks.
-- **Agent worker:** outbound LiveKit participant with no HTTP health-check port
-  requirement.
-
-This split matters for DigitalOcean App Platform: the LiveKit agent should be a
-worker, not a web service that App Platform expects to health-check over HTTP.
-
----
-
-## 6. Public interfaces to preserve
-
-Do not rename or reshape these without updating frontend, backend, docs, and demo
-scripts together.
-
-### Backend HTTP
-
-- `GET /health`
-- `POST /api/token`
-- `POST /api/sync-pr`
-- `POST /api/outcome`
-- `GET /api/memory/stats`
-- `GET /api/pods`
-- `POST /api/pods`
-- `GET /api/pods/:id`
-- `PATCH /api/pods/:id`
-- `DELETE /api/pods/:id`
-- `POST /api/pods/:id/members`
-- `DELETE /api/pods/:id/members/:name`
-
-### LiveKit data channel
-
-- Topic: `podman.intervention`
-- Core messages:
-  - `COLLISION`: agent -> PWA; contains `collision` and `intervention`.
-  - `ACK`: PWA -> agent/API; intervention response.
-  - `GIT_REPORT`: local git sidecar -> agent; dirty/unpushed ground truth.
-  - `VOICE_CUE`: text cue/fallback for voice escalation.
-
-### Required environment
-
-```bash
-LIVEKIT_URL=
-LIVEKIT_API_KEY=
-LIVEKIT_API_SECRET=
-
-GEMINI_API_KEY=
-GEMINI_VISION_MODEL=
-GEMINI_LIVE_MODEL=
-
-GITHUB_TOKEN=
-GITHUB_REPO=karti-ai/podman
-
-MONGODB_URI=
-VOYAGE_API_KEY=
-POD_ROOM=demo-pod
-PORT=8787
-
-VITE_BACKEND_URL=http://localhost:8787
-VITE_LIVEKIT_URL=
-```
-
-Keep all non-`VITE_` secrets server-side.
-
----
-
-## 7. Critical implementation callouts
-
-### LiveKit
-
-- Screen share is a video track. The backend agent should consume raw screen
-  frames through `@livekit/rtc-node`.
-- The agent must filter screen share, not webcam:
-  `pub.source === TrackSource.SOURCE_SCREENSHARE`.
-- Frontend publishing must tag the track as screen share; otherwise the agent can
-  miss it.
-- Throttle aggressively. Screens can arrive near video frame rate; Gemini should
-  receive sampled frames only.
-- Keep reliable data packets small. Use them for intervention metadata, not
-  screenshots, large diffs, or research dumps. Treat reliable payloads as
-  roughly 15 KiB max.
-- A historical closed `livekit/node-sdks` issue reported high memory use when
-  consuming video; run memory checks during agent frame tests and stop if the
-  loop leaks.
-
-### Gemini
-
-- Use structured output for vision: JSON mime type plus response schema.
-- Use low media resolution for ambient screen watching; reserve higher
-  resolution for debugging or targeted inspection.
-- Never expose `GEMINI_API_KEY` to the browser.
-- Gemini Live API is still a risk for the first demo path. Use card + Hermes
-  message first; add browser TTS or pre-generated voice fallback before relying
-  on Gemini Live for stage audio.
-- Keep model IDs in env so preview/availability changes do not require code
-  changes.
-
-### MongoDB
-
-- Local MongoDB is fine for dev CRUD and memory counts.
-- Atlas or Atlas Local is needed for the sponsor-grade Vector Search story.
-- Build exact-signature recall first:
-  normalized file + symbol + engineer pair + event type + outcome.
-- Writes from the agent should be best-effort. Mongo hiccups should degrade
-  memory, not kill live detection.
-- Do not store raw screenshots or recordings.
-
-### GitHub
-
-- The repo is public and currently has no issue/PR backlog, so do not make the
-  plan issue-driven yet.
-- GitHub cannot see local dirty files or unpushed commits. That is still a core
-  product moat.
-- Sync PRs should use deterministic GitHub REST/Octokit flows, not browser
-  automation.
-- Verify token scopes and demo repo permissions before stage time.
-
-### DigitalOcean
-
-- Use App Platform as:
-  - static site for frontend,
-  - HTTP service for API,
-  - worker for the LiveKit agent.
-- Do not model the agent worker as a health-checked HTTP service.
-- Keep a local and recorded fallback even if deployment works; venue network is a
-  stage risk.
-
-### Hermes
-
-- Treat Hermes as the action and messaging layer, not as a replacement for the
-  current implemented backend agent until code changes make that real.
-- Hermes should choose the least intrusive channel:
-  card -> message -> voice.
-- Hermes can own research summaries, teammate notification, sync PR initiation,
-  and urgent escalation once those workflows exist.
-
----
-
-## 8. Build ladder
-
-Do not mark a rung done until it is proven in logs, UI, or a visible external
-artifact.
-
-### P0 - make the live loop undeniable
-
-1. **Preserve and reconcile the plan**
-   - Merge local `docs/PLAN.md` with `origin/main:docs/PLAN.md`.
-   - Keep both the broad product thesis and concrete server/current-state facts.
-   - After the docs are safe, merge or rebase the two newer `origin/main` commits
-     before implementing frontend work.
-
-2. **Browser publish proof**
-   - Start backend API and frontend.
-   - Join a real LiveKit room from the browser.
-   - Confirm the browser publishes a screen-share track with the correct source.
-
-3. **Agent frame proof**
-   - Start `pnpm --filter @podman/backend dev:agent`.
-   - Confirm room join, screen-track subscription, frame sampling, and JPEG
-     encode logs.
-   - Watch process memory while consuming frames.
-
-4. **Gemini vision proof**
-   - Send one live sampled IDE frame to Gemini.
-   - Log parsed JSON with `currentFile`, `currentSymbol`, `activity`,
-     `hasUnpushedChanges`, and `confidence`.
-   - Add a confidence/logging gate if noisy frames cause bad reads.
-
-5. **Scheduled git truth** ✅ partial
-   - `scripts/podman-agent.mjs` polls every 15 s: `git status --short`,
-     `git diff --stat HEAD`, `git log --oneline -1`, `git branch --show-current`.
-   - Upserts `changedFiles`, `diffStat`, `recentCommit`, `branch`, `gitUpdatedAt`
-     to `engineer_states` collection in MongoDB (upsert by `podId::name` key).
-   - **Still needed:** fuse `engineer_states` git fields into the collision
-     detector, and/or publish `GIT_REPORT` data channel messages so the agent
-     worker can incorporate git truth into vision-based decisions.
-
-6. **Intervention card + Hermes notification**
-   - Publish a real intervention on `podman.intervention`.
-   - Render it as a small card in the frontend.
-   - Route a Hermes message to the affected teammate(s) or project channel once
-     the bridge exists.
-
-7. **Background research recommendation**
-   - When the team is heading into a poor tool/repo/skill choice or dead end,
-     produce a recommendation card with short evidence.
-   - Minimum evidence: why it matters, what to use instead, and who should act.
-
-8. **Learning proof**
-   - First intervention writes observation/collision/recommendation/outcome
-     memory.
-   - Second similar situation retrieves exact prior memory and changes the
-     message: "I have seen this pattern before."
-
-9. **Urgency routing**
-   - Default to card.
-   - Escalate to Hermes message when coordination involves other teammates.
-   - Escalate to voice only when urgent.
-
-10. **Action artifact**
-    - If demo uses same-file collision, click the card to open a real draft sync
-      PR or visible GitHub artifact.
-    - If demo uses research recommendation, show the accepted recommendation and
-      memory outcome instead.
-
-11. **Deployment or fallback proof**
-    - Prove API/static/worker deployment together, or explicitly run local with a
-      recorded backup.
-    - Keep backup video on a separate device.
-
-### P1 - polish the money moment
-
-- Add visible live inference captions in the PWA.
-- Add a small memory stats panel backed by `/api/memory/stats`.
-- Add browser-side TTS or pre-generated voice fallback for urgent interventions.
-- Add Hermes notification bridge once the target channel is chosen.
-- Improve research cards with compatibility, install effort, docs quality, repo
-  health, and security/trust signals.
-
-### P2 - sponsor and scale polish
-
-- Implement Voyage embedding + Atlas Vector Search recall.
-- Improve policy learning from outcomes.
-- Deploy DigitalOcean static site + API service + worker as the submission path.
-- Add optional GitHub issue/PR backlog integration after issues/PRs actually
-  exist.
-
-### Cut if behind
-
-- Webcam grid.
-- Mic transcription.
-- Full auth/accounts.
-- Slack/Linear/Jira integrations unless Hermes requires one immediately.
-- Complex dashboards.
-- Server-published audio if browser/pre-generated voice proves escalation.
-- Vector Search if exact Mongo recall demonstrates the learning beat.
-
----
-
-## 9. Critical 3-minute demo script
-
-**Rule:** open on one active IDE, not a grid. PodMan is an agent, not a
-dashboard.
-
-1. **0:00 - Set the scene**
-   - One engineer is actively coding in the IDE.
-   - The presenter says: "This work is not pushed yet. GitHub cannot see it."
-
-2. **0:20 - Show the live signal**
-   - Show a compact caption: current file, inferred task, git dirty/unpushed
-     state.
-   - Show that PodMan is watching consented screen context, not stored
-     recordings.
-
-3. **0:40 - Introduce the better-tool moment**
-   - A teammate starts down a weak path: wrong package, dead repo, bad API,
-     duplicated effort, or risky implementation.
-   - PodMan has been researching in the background.
-
-4. **1:05 - Money moment**
-   - PodMan shows a small card:
-     "This path is likely a dead end. Use X instead; it matches our stack and is
-     actively maintained."
-   - The card names the affected teammate and the suggested action.
-
-5. **1:25 - Hermes coordination**
-   - Hermes notifies the right teammate(s), not the whole room.
-   - No voice yet unless the situation is urgent.
-
-6. **1:50 - Learning beat**
-   - A similar issue appears.
-   - PodMan references memory:
-     "I have seen this pattern before. Last time the team accepted the X
-     recommendation."
-   - Show `/api/memory/stats` or the visible memory indicator.
-
-7. **2:20 - Urgency escalation**
-   - Raise the severity with a same-file collision, blocking dependency, failing
-     test, or imminent bad push.
-   - Hermes escalates to voice only now.
-
-8. **2:40 - Close**
-   - Show the public repo, deployed/local URL, and memory stats.
-   - Closing line: "PodMan coordinates work while it is still happening."
-
-### Reliable fallback demo
-
-If the research recommendation is not reliable by stage time, use the same-file
-collision fallback:
-
-1. Two engineers open the same visible file.
-2. `GIT_REPORT` or vision marks one as dirty/unpushed.
-3. Agent publishes `COLLISION` on `podman.intervention`.
-4. Frontend renders the card.
-5. The card opens a sync PR artifact.
-6. A second similar collision retrieves prior memory.
-
----
-
-## 10. Sponsor strategy
-
-### Gemini
-
-Gemini must be load-bearing for the vision loop:
-
-- live IDE/screen frame -> structured work context,
-- optional message/recommendation generation,
-- optional Live voice only after card/Hermes routing is stable.
-
-Do not overclaim voice if it is using browser/pre-generated TTS. Say plainly that
-it is the reliability fallback.
-
-### LiveKit
-
-LiveKit is the real-time spine:
-
-- engineers join one pod room,
-- screen-share tracks carry active work context,
-- PodMan joins as a participant,
-- data packets carry interventions,
-- voice can be added as urgent escalation.
-
-Pitch line: "Unpushed work is invisible to GitHub, so real-time presence is the
-only way to coordinate before the push."
-
-### MongoDB + Voyage
-
-MongoDB is the learning proof:
-
-- observations, collisions, recommendations, interventions, and outcomes persist,
-- prior memory changes a later intervention,
-- exact recall is the MVP,
-- Voyage + Atlas Vector Search is the stronger sponsor-grade version after exact
-  recall works.
-
-### DigitalOcean
-
-DigitalOcean earns its place when:
-
-- frontend runs as a static site,
-- API runs as an HTTP service,
-- LiveKit agent runs as a worker,
-- public URL is shown in submission or demo.
-
-Local fallback is acceptable for stage reliability, but the submission should
-include the deployment URL if possible.
-
----
-
-## 11. Risks and mitigations
-
-| Risk                                   | Mitigation                                                                                                                       |
-| -------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------- |
-| Looks like a dashboard                 | Keep the UI quiet. Hero is card/message/action, not a grid.                                                                      |
-| Looks like a screenshot analyzer       | Always show screen signal + git truth + memory + action.                                                                         |
-| Interrupts too much                    | Default to cards, escalate to Hermes messages, reserve voice for urgency.                                                        |
-| Overclaims implemented features        | Mark voice, Hermes bridge, vectors, adaptive policy, research agent, real sync PR, and DO worker deploy incomplete until proven. |
-| Vision misses unpushed state           | Use scheduled `GIT_REPORT` for deterministic dirty/unpushed truth.                                                               |
-| Research recommendation lacks evidence | Show only concise evidence: stack fit, repo/tool health, install effort, docs/trust signal.                                      |
-| No visible learning                    | Build exact Mongo recall before vector search.                                                                                   |
-| LiveKit frame loop leaks memory        | Monitor agent memory during video consumption; throttle hard.                                                                    |
-| GitHub issue/PR backlog absent         | Do not invent issue-driven backlog; repo currently has no issues or PRs.                                                         |
-| Venue network failure                  | Rehearse on hotspot and keep recorded backup.                                                                                    |
-| DO worker deploy hangs                 | Deploy agent as worker, not health-checked service.                                                                              |
-
----
-
-## 12. Documentation reconciliation tasks
-
-After this plan is accepted, update the supporting docs so they stop conflicting
-with this file:
-
-- `README.md`: replace POST-screenshot-first language with LiveKit screen-track
-  agent architecture and Hermes action-layer wording.
-- `docs/idea.md`: broaden from blocker/dependency voice demo to card/message/
-  urgent-voice coordination plus research and memory.
-- `docs/livekit.md`: remove "Hermes does NOT subscribe to engineer screen
-  tracks"; current architecture uses backend agent screen subscription.
-- `docs/gemini.md`: keep structured vision, but mark Gemini Live as P1 and avoid
-  claiming voice is implemented.
-- `docs/mongodb.md`: align collection names with current code
-  (`observations`, `collisions`, `interventions`, `outcomes`, `pods`) and add
-  exact-signature recall.
-- `docs/digitalocean.md`: split API service and agent worker; do not deploy the
-  worker as a health-checked HTTP service; mark `infra/app.yaml` legacy or
-  reconcile it with `infra/.do/app.yaml`.
-- `docs/demo-setup.md`: update the script to include better-tool research,
-  learning recall, Hermes notification, and urgency-based voice.
-
----
-
-## 13. Acceptance checklist
-
-Before saying PodMan is demo-ready:
-
-- [ ] `pnpm format:check` passes or all failures are documented as unrelated.
-- [ ] `pnpm typecheck` passes.
-- [ ] Browser joins a real LiveKit room.
-- [ ] Browser publishes a screen-share track with the correct source.
-- [ ] Backend agent subscribes to the screen-share track.
-- [ ] Agent logs at least one parsed Gemini context from a real IDE screen.
-- [x] Local git report supplies dirty/unpushed truth on a schedule (`scripts/podman-agent.mjs` — 15 s poll → MongoDB `engineer_states`). Agent fusion still needed.
-- [x] Frontend renders a real intervention card.
-- [x] Hermes notification path works for teammate messages over the LiveKit data
-      channel.
-- [ ] Voice is heard only for urgent escalation or a fallback is declared.
-- [x] Outcome ACK writes to MongoDB and updates intervention status.
-- [x] `/api/memory/stats` shows counts increasing.
-- [x] Second similar situation uses prior exact memory in the message.
-- [ ] Research recommendation card is evidence-backed, or fallback collision demo
-      is used.
-- [x] Sync PR action creates a visible GitHub artifact if used in demo.
-- [ ] DigitalOcean deployment or local fallback is rehearsed.
-- [ ] Backup recording is ready on a separate device.
-
----
-
-## 14. Evidence appendix
-
-### Repo and GitHub state
-
-- Public repo: <https://github.com/karti-ai/podman>
-- Verified with authenticated `gh` on `2026-06-27`.
-- Default branch: `main`.
-- No GitHub issues or PRs existed at verification time.
-
-### Hackathon / event
-
-- AI Engineer World's Fair: <https://www.ai.engineer/worldsfair/2026>
-- Cerebral Valley hackathon page:
-  <https://cerebralvalley.ai/e/aiewf-hackathon-2026>
-
-### LiveKit
-
-- Screen share docs: <https://docs.livekit.io/transport/media/screenshare/>
-- Data packets docs: <https://docs.livekit.io/transport/data/packets/>
-- Node SDK reference: <https://docs.livekit.io/reference/client-sdk-node/>
-- Node SDK releases: <https://github.com/livekit/node-sdks/releases>
-- Node SDK issue risk: <https://github.com/livekit/node-sdks/issues/444>
-
-### Gemini
-
-- Structured output:
-  <https://ai.google.dev/gemini-api/docs/structured-output>
-- Media resolution: <https://ai.google.dev/gemini-api/docs/media-resolution>
-- Live API: <https://ai.google.dev/gemini-api/docs/live-api>
-
-### DigitalOcean
-
-- App Platform app spec:
-  <https://docs.digitalocean.com/products/app-platform/reference/app-spec/>
-
-### MongoDB
-
-- Vector Search index type:
-  <https://www.mongodb.com/docs/vector-search/index/vector-search-type/>
-- Node driver Atlas Vector Search:
-  <https://www.mongodb.com/docs/drivers/node/current/atlas-vector-search/>

docs/cont_learning.md

@@ -1,8 +1,9 @@
 # Continual-Learning Graph Spec
 
-> Owner: graph data + visualization. Status: demo-backed (live `team_model` reads land later).
+> Owner: graph data + visualization. Status: demo-backed / active.
 > Satisfies the documentation-first gate for the `backend/src/graph/*` and
-> `frontend/src/components/GraphView.tsx` files.
+> `frontend/src/components/GraphView.tsx` files. This file is the canonical
+> graph spec.
 
 ## What this is (and is NOT)
 
@@ -26,7 +27,9 @@ The graph lives in two places, both keyed by `podId`:
    { podId, graph: PodGraph, updatedAt }
    ```
 
-   `GET /api/pods/:podId/graph` returns `team_model.graph`, or a demo graph when none exists yet.
+   `GET /api/pods/:podId/graph` returns the live materialized graph first, then
+   `team_model.graph`, then a labeled demo graph when neither live nor seeded
+   data exists.
 
 2. **Normalized (for traversal):** the same nodes/edges are mirrored into two collections so
    the model can be walked with MongoDB `$graphLookup` (the graph-database pattern):
@@ -76,13 +79,31 @@ Additive routes in `backend/src/server.ts` (shared file — additive only).
 
 - `shared/src/graph.ts` — `PodGraph`, `PodGraphNode/Edge/Metric`, `GraphNodeDoc`, `GraphEdgeDoc`
 - `backend/src/graph/demo.ts` — `createDemoPodGraph(podId)` (grounded in the demo-pod crew)
-- `backend/src/graph/store.ts` — `loadPodGraph`, `seedGraph`, `reachFrom` (`$graphLookup`)
+- `backend/src/graph/live.ts` — **`materializePodGraph(podId)`**: builds the graph from the real
+  collections (pods, engineer_states, observations, collisions, interventions, outcomes)
+- `backend/src/graph/store.ts` — `loadPodGraph` (live → seeded → demo), `seedGraph`, `reachFrom` (`$graphLookup`)
 - `backend/src/graph/seed.ts` — `pnpm graph:seed` (writes demo into `team_model` + graph collections)
 - `frontend/src/lib/graph.ts` — `fetchPodGraph(podId)`
-- `frontend/src/components/GraphView.tsx` — dark-Bauhaus SVG graph (toggle from `App.tsx`)
+- `frontend/src/components/GraphView.tsx` — shadcn-themed SVG graph (theme-aware; toggle from `App.tsx`)
 
-## Demo-first plan
+## Live data → graph mapping
 
-1. Serve `createDemoPodGraph()` from the route (demo-stable, no DB dependency on the demo path).
-2. `pnpm graph:seed` writes the same graph into Mongo so `$graphLookup` is real, not a mock.
-3. Swap `loadPodGraph` to read live `team_model.graph` once the ingest pipeline populates it.
+`materializePodGraph` reads the 5 real collections per pod and emits a `PodGraph`:
+
+| Collection        | Produces                                                                   |
+| ----------------- | -------------------------------------------------------------------------- |
+| `pods.members`    | baseline **engineer** nodes                                                |
+| `engineer_states` | engineer `risk` if unpushed; **file** nodes (git paths parsed); `editing`  |
+| `observations`    | engineer `active`; **file** from `currentFile`; `editing` (strength=conf.) |
+| `collisions`      | **collision** nodes; `collides` (eng→col) + `touches` (file→col)           |
+| `interventions`   | **intervention** nodes; `warns` (col→intervention)                         |
+| `outcomes`        | `learned_from` (intervention→owner) on accepted; flips nodes to `learned`  |
+| `suppressions`    | `suppressed` activity beats — a dismissed signature recurred and PodMan stayed quiet (negative-feedback made visible; written at repeat time by the agent) |
+
+Metrics (learned owners / open risk paths / accept rate) are live counts.
+
+## Fallback order (`loadPodGraph`)
+
+1. **Live** — `materializePodGraph` from the real collections (returns `null` if only bare roster).
+2. **Seeded** — `team_model.graph` (from `pnpm graph:seed`).
+3. **Demo** — `createDemoPodGraph()` (stage safety; never an empty canvas).

docs/demo-setup.md

@@ -1,108 +0,0 @@
-# Demo Setup
-
-Pre-stage checklist for the 3-minute live demo. Do this on all 3 laptops before walking on stage.
-
----
-
-## Before demo day
-
-- [ ] `demo-pod` room created in LiveKit Cloud dashboard
-- [ ] Hermes deployed on DO (or confirmed running locally as fallback)
-- [ ] MongoDB Atlas cluster running, `MONGODB_URI` set in Hermes env
-- [ ] All `.env` vars populated and verified via `GET /health` returning `{ ok: true }`
-- [ ] Record a backup video of the full demo working end-to-end
-- [ ] Rehearse the demo script 3× with real audio
-
----
-
-## Laptop setup (all 3 machines)
-
-### Editor settings
-
-- Font size: **18pt or larger** — Gemini Vision must read file names and code
-- Single editor window — no split panes, no overlapping terminals
-- File tab visible with full file name shown (not truncated)
-- Light or dark theme is fine — avoid low-contrast themes
-
-### Browser
-
-- Chrome (best `getDisplayMedia` support)
-- PWA tab open and joined to `demo-pod`
-- Earbuds / headphones plugged in and tested
-- Volume: medium — PodMan voice should be clearly audible but not startle
-
-### Screen layout
-
-- Editor takes 2/3 of screen
-- Terminal takes bottom 1/3 (always visible)
-- No other windows on top
-
----
-
-## Demo file setup
-
-Pre-create these files in the demo repo before the demo:
-
-**Alice's machine:**
-
-- Open `auth/middleware.ts` — has visible function stubs
-- Terminal shows nothing running initially, then `Server running on :3001` at the right moment
-
-**Bob's machine:**
-
-- Open `frontend/login.tsx` — has visible form component code
-- Terminal idle
-
-**Carol's machine:**
-
-- Open `frontend/integration.ts` or similar
-- Terminal shows: `curl http://localhost:3001/auth` → `curl: (7) Failed to connect`
-
----
-
-## Demo script timing
-
-| Time  | Action                                          | Who         |
-| ----- | ----------------------------------------------- | ----------- |
-| 0:00  | All three join `demo-pod`                       | All         |
-| 0:05  | PodMan greets by voice                          | Hermes auto |
-| 0:20  | Alice opens `auth/middleware.ts`, starts typing | Alice       |
-| 0:45  | Bob opens `frontend/login.tsx`                  | Bob         |
-| 0:50  | Carol runs `curl` command, sees error           | Carol       |
-| ~1:20 | BLOCKER_DETECTED nudge fires                    | Hermes auto |
-| 1:50  | Alice starts her server (`node server.js`)      | Alice       |
-| ~2:00 | DEPENDENCY_READY nudge fires                    | Hermes auto |
-| 2:20  | Optional: show session 2 ownership warm-start   | Presenter   |
-| 2:45  | Close                                           | Presenter   |
-
----
-
-## Gemini Vision reliability tips
-
-- Keep font at 18pt+ throughout the demo — do not zoom out
-- Avoid opening file picker dialogs or overlapping modals during the demo
-- File names in editor tabs must be fully visible (not `auth/middle...`)
-- If Hermes logs show `confidence < 0.6` frames: bump font size, ensure file tab is clear
-- Terminal output must be on a single line — avoid long stack traces during demo
-
----
-
-## Cooldown note
-
-Hermes has a 3-minute cooldown between nudges per pod. For the demo, if you need to trigger a second event quickly:
-
-Option 1: restart Hermes between the two demo scenarios (resets cooldown state)
-Option 2: set `NUDGE_COOLDOWN_MS=0` via env var during demo (add this override to Hermes)
-
----
-
-## Fallback plan
-
-If any system fails on stage:
-
-1. **Hermes unreachable:** switch to local (`pnpm --filter backend dev`) — PWA auto-falls back to `localhost:8787`
-2. **Gemini Vision low confidence:** presenter narrates what PodMan "saw" while playing the backup video
-3. **LiveKit audio not working:** play backup video — show the nudge text cards on screen instead
-4. **Full system failure:** play the backup recording, narrate the demo live
-
-Always have the backup video on a separate device, not the same laptop running Hermes.

docs/demo.md

@@ -0,0 +1,231 @@
+# PodMan — Demo Scripts
+
+**Theme:** Continual Learning. Two scripts below: a **1-minute live script**
+(§ first) for showing real-time interventions fast with teammates, and the full
+**4-minute script** for the complete story. Practice the 4-min to land at 3:45.
+
+**The thesis (say this first, in either script):** AI is collapsing the cost of
+*writing* code. More and more of every codebase is authored with AI assist — and
+increasingly by **autonomous agents**. So the bottleneck of software engineering
+is shifting away from engineering itself toward **organization, management, and
+project coordination**. Pair a team with hundreds of agents all committing to the
+same repo at once and it becomes **physically impossible for a human to track
+progress or avoid stepping on someone else's work.** Code generation scaled;
+human coordination did not. That gap is the new bottleneck.
+
+**The one-line story:** writing code isn't the bottleneck anymore — *coordinating
+who (and what) is writing what* is. PodMan is a pair programmer for the whole
+team — humans **and** agents: it watches every actor's work in real time, gives
+everyone live status without anyone having to interrupt anyone, catches collisions
+before they land, and learns your team's dynamics so it nudges less and helps more
+over time.
+
+**The hook to land:** a "quick five-minute question" actually costs ~25 minutes of
+lost focus — for two people. Now multiply that across a team plus a swarm of
+agents nobody can watch. PodMan removes the reason to ask and surfaces the
+collision no human could have caught in time. That recovery time, saved across
+every actor, every day, is the value.
+
+---
+
+
+
+## 1-Minute Live Script (you + teammates — real-time interventions)
+
+**Hard limit 1:00.** Hits the tracks: real-time multimodal, on-device Gemma,
+Continual Learning, Self-Improvement, Recursive Intelligence.
+
+**Pre-flight:** pod open on `podman.live`, all joined, screen share + **sound on**;
+git watchers running; everyone has `README.md` open. On-device **Gemma** must be
+up as Hermes's voice (else Gemini TTS auto-falls-back — just drop the "on-device"
+word).
+
+**0:00–0:12 — Thesis**
+> "Code is almost free to write now — humans with AI, soon swarms of agents, all
+> on one repo. No human can track that. The bottleneck is coordination — and it
+> has to fix itself, live. Watch."
+
+**0:12–0:35 — Collision caught live (money shot)**
+- You + a teammate both edit `README.md`, save (unpushed).
+- Card appears on every screen + voice fires: _"<you> and <teammate> are both
+  editing README.md. Sync before pushing."_
+- Say: "Gemini Vision reads our screens, fused with local git, in real time —
+  and the alert is **spoken by a Gemma model on-device**. Neither of us asked."
+
+**0:35–0:52 — Self-improving (narrate)**
+- Third teammate edits too → **new** card + voice for the new pair (never goes
+  silent).
+- Say: "Every trace lands in **Atlas**; vector search recalls past collisions,
+  repeats come back tagged **'Seen before'** and escalate — no retraining. It
+  tunes its own coordination from its own outcomes."
+
+**0:52–1:00 — Close**
+> "Real-time awareness, on-device voice, a coordination layer that improves
+> itself — for humans and agents, zero interruptions."
+
+_Fallback:_ Gemma down → drop the on-device line. Voice silent → read it, point
+at the card. No card → switch the pair to a fresh file and re-save.
+
+---
+
+
+
+## The script (4:00)
+
+
+
+### 0:00–0:30 — The problem + hook
+
+> "AI made writing code almost free — humans with AI today, swarms of autonomous
+> agents tomorrow, all committing to the same repo. The bottleneck stopped being
+> engineering and became coordination: checking each other's work, re-planning
+> collisions, the constant 'what are you working on?' At agent scale no human can
+> even track it. A five-minute question already costs both people 25 minutes of
+> lost focus. PodMan is a pair programmer for the whole team — humans and agents:
+> it watches everyone's work live, so anyone sees another's status without
+> interrupting them, catches collisions before they land, and learns your team as
+> it goes."
+
+*On screen:* the pod view, two teammates joined, screen-share tiles live.
+
+### 0:30–1:05 — Real-time team awareness (LiveKit + Gemini Vision)
+
+- Point at the two live screen tiles. "These are real screen shares over
+**LiveKit**. Our agent subscribes to the tracks and samples frames."
+- "Each frame goes to **Gemini Vision**, which returns structured context — file,
+symbol, activity — not a chatbot, a perception layer."
+- Show the live activity stream filling in (Signals vs Reasoning sections).
+- Land the value: "This is the part that replaces 'what are you working on?' —
+every teammate's current work is just *visible*, in real time. Nobody had to
+ask."
+
+*Built-by-us callout:* `backend/src/vision/gemini.ts`, the LiveKit agent worker.
+
+### 1:05–1:40 — The catch (detection + first intervention)
+
+- Have alice and bob both edit the **same file** with unpushed changes.
+- "Normally nobody notices until merge time. GitHub can't see this — nothing's
+pushed. Our detector fuses live screen context with **local git truth** from a
+watcher on each laptop."
+- A collision card appears: *"alice + bob both on detector.ts (unpushed)."*
+- Let the **Gemini TTS** urgent voice fire once over LiveKit: *"alice and bob are
+both editing detector.ts. Please sync before pushing."*
+- Land the value: "That's a merge conflict and a wasted afternoon caught before it
+happened — and neither of them had to be tracking the other."
+
+*Built-by-us callout:* `collision/detector.ts`, `action/hermes.ts`,
+`voice/live.ts`.
+
+### 1:40–2:10 — Cross-channel overlap (research + code)
+
+- Keep alice editing `livekit.py`.
+- Have bob share a browser tab on LiveKit docs/SDK pages.
+- A collaboration nudge appears: *"🤝 bob is researching LiveKit agents
+(docs.livekit.io) while alice edits livekit.py — sync up before duplicating
+effort."*
+- Land the value: "This is not a merge conflict. PodMan caught duplicated effort
+across channels — code on one screen, research on another — and nudged the team
+before two people solved the same problem twice."
+
+*Built-by-us callout:* `vision/gemini.ts`, `collision/research.ts`,
+`memory/vectors.ts`.
+
+### 2:10–2:50 — Continual learning (the theme — the money shot)
+
+This is the differentiator. Two beats, both from pre-seeded memory:
+
+1. **It learned to stay quiet.** Trigger a pattern that was dismissed as a false
+  alarm earlier. "Last session a teammate marked this kind of alert as not a
+   real conflict. Watch — PodMan stays silent. No nagging." (No card fires.)
+2. **It learned to escalate.** Trigger the real-conflict pattern that was
+  accepted before. The card now says **"Seen before."** and goes straight to
+   the spoken urgent cue.
+
+- "The only input was one accept/dismiss tap. No retraining, no labeling. This is
+**MongoDB Atlas vector search** recalling similar past events plus a policy
+that adapts on the recalled outcome."
+- Optional: show `/api/memory/stats` counts climbing — accumulated experience.
+
+*Built-by-us callout:* `memory/vectors.ts` ($vectorSearch), `memory/policy.ts`
+(outcome-conditioned gate), `memory/store.ts`.
+
+### 2:50–3:30 — The five-minute meeting, killed (Gemini Live API)
+
+- Frame it: "Instead of breaking a teammate's focus to ask what they're up to,
+you ask PodMan."
+- Open the live voice conversation. Ask out loud: *"PodMan, what is everyone
+working on, and where is the collision detector implemented?"*
+- It answers with **real tool calls** — `search_repo`, git history, current
+collisions — not guesses.
+- "This is the **Gemini Live API**, streaming speech-to-speech over LiveKit, with
+custom function tools we wrote so it grounds every answer in the actual repo
+and live state. That's the status sync, answered in seconds, with zero recovery
+tax on anyone else."
+
+*Built-by-us callout:* `agents/podman-live-conversation/agent.py`.
+
+### 3:30–3:50 — Stack + close
+
+- "All on **DigitalOcean** — static frontend, API, and agent workers, supervised
+by systemd. The ambient score is **Gemini Lyria** generated per pod through the
+Interactions API."
+- Close: "Engineering ability stopped being the bottleneck — coordination is, and
+it only gets worse as agents start writing alongside us. PodMan gives a whole
+team, humans and agents, real-time awareness without the interruptions, catches
+collisions before they cost an afternoon, and learns each team's dynamics so it
+helps more over time. Saved focus, multiplied across every actor. That's
+continual learning, shipped."
+
+
+
+### 3:50–4:00 — Buffer / Q&A handoff
+
+---
+
+
+
+## Sponsor-prize coverage (say each at least once)
+
+
+| Prize            | Spoken moment                                                                    | Segment                |
+| ---------------- | -------------------------------------------------------------------------------- | ---------------------- |
+| **Gemini**       | Vision perception, Live API agent w/ tools, TTS voice, Lyria score               | 0:30, 1:05, 2:50, 3:30 |
+| **LiveKit**      | "real screen shares over LiveKit", agent subscribes, TTS audio track, live voice | 0:30, 1:05, 3:30       |
+| **MongoDB**      | "Atlas vector search recalling past events"                                      | 1:50                   |
+| **DigitalOcean** | "all on DigitalOcean, systemd-supervised workers"                                | 3:30                   |
+
+
+---
+
+
+
+## If something breaks (live recovery)
+
+
+| Failure                 | Recovery                                                                |
+| ----------------------- | ----------------------------------------------------------------------- |
+| Voice doesn't fire      | Cut to the card; say the line aloud; cards are the default path anyway. |
+| Live conversation drops | Skip 2:50–3:30; lean longer on the learning beat.                       |
+| Collision won't trigger | Use the backup recording for that beat; keep narrating.                 |
+| Agent flapping          | Pre-checked — but if so, `systemctl restart podman-platform-agent`.     |
+
+
+**Rule:** never debug on stage. Narrate, fall back to recording, keep moving.
+
+---
+
+
+
+## Tight timing summary
+
+
+| Time | Beat                                                       |
+| ---- | ---------------------------------------------------------- |
+| 0:00 | Problem (coordination cost) + hook + original-work line    |
+| 0:30 | Real-time team awareness — LiveKit + Gemini Vision         |
+| 1:05 | The catch — collision caught before merge                  |
+| 1:40 | Cross-channel overlap — research + code nudge              |
+| 2:10 | **Continual learning — quiet + escalate**                  |
+| 2:50 | The five-minute meeting, killed — Gemini Live conversation |
+| 3:30 | DigitalOcean + Lyria + close                               |
+| 3:50 | Buffer                                                     |

docs/digitalocean.md

@@ -58,6 +58,13 @@ The mirror at `infra/.do/app.yaml` is kept identical for DO UI/import workflows.
 - No HTTP route and no HTTP health check
 - Default room: `POD_ROOM=demo-pod`
 
+### Worker: live conversation agent (Python)
+
+- Source: `agents/podman-live-conversation/`
+- The Gemini Live voice agent (`gemini-3.1-flash-live-preview`), run with `uv`.
+- On the droplet it runs as `podman-live-conversation-agent.service`
+  (`infra/systemd/`). It is separate from the Node services and the TS agent.
+
 ---
 
 ## Required Runtime Environment
@@ -66,10 +73,15 @@ The mirror at `infra/.do/app.yaml` is kept identical for DO UI/import workflows.
 LIVEKIT_URL=wss://your-livekit-server.livekit.cloud
 LIVEKIT_API_KEY=...
 LIVEKIT_API_SECRET=...
+LIVEKIT_CONVERSATION_AGENT_NAME=podman-live-conversation
 
-GEMINI_API_KEY=...
+GEMINI_API_KEY=...                                  # GOOGLE_API_KEY also accepted
 GEMINI_VISION_MODEL=gemini-2.0-flash
-GEMINI_LIVE_MODEL=gemini-3.1-flash-tts-preview
+GEMINI_LIVE_MODEL=gemini-3.1-flash-tts-preview      # TTS voice
+GEMINI_CONVERSATION_MODEL=gemini-3.1-flash-live-preview
+GEMINI_EMBEDDING_MODEL=gemini-embedding-001
+GEMINI_TTS_VOICE=Charon
+# GEMINI_MUSIC_MODEL=lyria-3-clip-preview           # optional override
 
 GITHUB_TOKEN=...
 GITHUB_REPO=karti-ai/podman
@@ -82,8 +94,10 @@ PORT=8787
 POD_ROOM=demo-pod
 ```
 
-`VOYAGE_API_KEY` is optional for local/demo fallback. Without it, Mongo exact
-signature recall still works; Atlas Vector Search recall is skipped.
+`VOYAGE_API_KEY` is optional. Without it, Gemini embeddings provide vector
+recall; without any embedding provider, recall degrades to exact signature
+matching. The Lyria background score uses the Gemini Interactions API and the
+same `GEMINI_API_KEY`.
 
 ---
 
@@ -95,6 +109,17 @@ Build once:
 docker build -f infra/Dockerfile -t podman-backend .
 ```
 
+Or use the repository script and verifier:
+
+```bash
+pnpm build:container
+pnpm verify:containers
+```
+
+`verify:containers` uses Docker by default to match `build:container`. To verify
+against a Podman image store instead, run
+`VERIFY_CONTAINER_RUNTIME=podman pnpm verify:containers`.
+
 The image entrypoint runs `node backend/dist/server.js` when
 `PODMAN_PROCESS=server`, and `node backend/dist/agent.js` when
 `PODMAN_PROCESS=agent`. Do not run the combined Hermes supervisor inside App

docs/gemini.md

@@ -1,137 +1,128 @@
 # Gemini Integration Spec
 
-PodMan uses Gemini for two distinct jobs: **vision** (understanding screens) and **voice** (speaking nudges).
+Status: active / matches code.
+
+PodMan uses Gemini for five jobs, all through the `@google/genai` SDK
+(`GoogleGenAI`) with a single `GEMINI_API_KEY` (`GOOGLE_API_KEY` /
+`GOOGLE_GENERATIVE_AI_API_KEY` also accepted):
+
+1. **Vision** — turn screen frames into structured work context.
+2. **Embeddings** — vector recall over past coordination events.
+3. **TTS voice** — spoken urgent escalations over LiveKit.
+4. **Live conversation** — a real-time voice agent teammates talk to.
+5. **GenMedia (Lyria)** — a per-pod background score.
+
+Collision detection and intervention text are **deterministic in code**, not
+Gemini calls. PodMan does not ask Gemini "is this a conflict?" — that is decided
+by `backend/src/collision/detector.ts` from fused vision + git truth. This is a
+deliberate reliability choice for the live demo.
 
 ---
 
-## 1. Vision — Screen Understanding
+## 1. Vision — screen understanding
 
-**Model:** `gemini-2.0-flash` (fast, cheap, strong multimodal)
+**Model:** `GEMINI_VISION_MODEL` (default `gemini-2.0-flash`)
+**Code:** `backend/src/vision/gemini.ts` → `analyzeFrame()`
 
-**Trigger:** every 30s per active engineer, when Hermes receives a `POST /ingest` frame
+**Trigger:** the LiveKit agent samples a JPEG frame from each engineer's
+screen-share track (not an HTTP upload — frames arrive over LiveKit).
 
-**Input:** base64-encoded JPEG, max 1280×720, ~50–80KB after compression
+**Input:** a single base64 JPEG, sampled at low media resolution.
 
-**Prompt:**
-
-```
-You are analyzing a software engineer's screen during a coding session.
-Extract the following JSON. If you cannot determine a field with confidence above 0.7, set it to null.
+**Output:** structured JSON via `responseJsonSchema` (no markdown parsing):
 
+```ts
 {
-  "currentFile": "string | null",         // active file visible in editor tab or title bar
-  "inferredTask": "string | null",        // 1 sentence: what the engineer appears to be doing
-  "terminalVisible": true | false,        // is a terminal or CLI panel visible
-  "recentTerminalOutput": "string | null", // last meaningful line of terminal output if visible
-  "confidence": 0.0–1.0                  // your overall confidence in this extraction
+  mode: 'editing' | 'research', // browser/docs/SDK research vs editor work
+  currentFile: string,          // open file path, e.g. src/auth/session.ts
+  currentSymbol: string,        // function/class under the cursor
+  activity: string,             // editing | reading | debugging | terminal | PR review
+  hasUnpushedChanges: boolean,  // dirty git gutter / modified markers visible
+  researchTopic: string,        // e.g. "LiveKit agents setup", for research mode
+  researchSource: string,       // source domain, e.g. "docs.livekit.io"
+  confidence: number            // 0..1
 }
-
-Respond with valid JSON only. No explanation. No markdown.
 ```
 
-**Confidence gate:** if `confidence < 0.6`, Hermes discards the frame — no state update, no event detection triggered.
+When a frame shows a browser/docs/SDK page instead of an editor, Gemini Vision
+classifies it as `mode: "research"` and extracts the topic/source. That feeds the
+cross-channel overlap detector: one teammate researching LiveKit docs while
+another edits `livekit.py` becomes a collaboration nudge, not a merge-conflict
+alert. Editor/IDE frames remain `mode: "editing"` and use the existing file,
+symbol, activity, and dirty-change fields.
 
-**Rate limit:** 1 call per engineer per 30s. With 3 engineers = 6 calls/min ≈ $0.002/min at Flash pricing.
+**Latency/cost levers (in code):**
 
-**Demo setup requirement:** editors must have large font (18pt+), single window, file name clearly visible in tab. This is the primary reliability lever.
+- `thinkingConfig: { thinkingBudget: 0 }` — minimal thinking for the ambient loop.
+- `mediaResolution: MEDIA_RESOLUTION_LOW` — smaller image tokens.
+- Missing `confidence` defaults to `0.5`.
+
+**Demo reliability:** large editor font, single window, visible file tab. This is
+the primary lever for clean reads.
 
 ---
 
-## 2. Event Detection — Coordination Awareness
+## 2. Embeddings — semantic recall
 
-**Model:** `gemini-2.0-flash` (text only, fast)
+**Model:** `GEMINI_EMBEDDING_MODEL` (default `gemini-embedding-001`, 768 dims)
+**Code:** `backend/src/memory/vectors.ts`
 
-**Trigger:** after every successful state write to MongoDB, Hermes runs event detection over all active engineer contexts.
+Each collision is embedded into a short memory text (`file`, `symbol`,
+`engineers`, `severity`, unpushed flag) and stored on the `collisions` document.
+On a new collision PodMan embeds the query and runs MongoDB Atlas `$vectorSearch`
+(index `collision_embedding`) to recall similar past events and their outcomes.
 
-**Input:** JSON snapshot of all engineers' current states + ownership map
-
-**Prompt:**
-
-```
-You are a team coordination agent. Below is the current state of each engineer on the team.
-
-Engineer states:
-{{engineerStates}}
-
-Ownership map (who owns which files):
-{{ownershipMap}}
-
-Detect if any of these coordination events are occurring:
-- DEPENDENCY_READY: an engineer who was blocked or waiting now has what they need because another engineer completed relevant work
-- BLOCKER_DETECTED: an engineer appears stuck (same file, error in terminal, no progress) and another teammate could help
-- DUPLICATE_WORK: two or more engineers are working on the same file simultaneously
-
-If an event is detected, respond with:
-{
-  "event": "DEPENDENCY_READY" | "BLOCKER_DETECTED" | "DUPLICATE_WORK" | null,
-  "involvedEngineers": ["engineerId", ...],
-  "file": "string | null",
-  "reason": "1 sentence explanation"
-}
-
-If no event, respond with { "event": null }.
-Respond with valid JSON only.
-```
+**Provider order:** Voyage (`VOYAGE_API_KEY`, `voyage-4-lite`) is tried first when
+present; Gemini embeddings are the fallback. Without either, recall degrades to
+exact signature/file matching — the demo still works.
 
 ---
 
-## 3. Nudge Generation — Voice Message
+## 3. TTS voice — urgent escalation over LiveKit
 
-**Model:** `gemini-2.0-flash` (text only)
+**Model:** `GEMINI_LIVE_MODEL` (default `gemini-3.1-flash-tts-preview`)
+**Default voice:** `GEMINI_TTS_VOICE` (default `Charon`)
+**Code:** `backend/src/voice/live.ts` → `speak()` / `speakInRoom()`
 
-**Trigger:** when event detection returns a non-null event
-
-**Input:** event type + engineer names + file + reason
-
-**Prompt:**
-
-```
-You are PodMan, a friendly AI teammate. Generate a short spoken message (1–2 sentences max) to notify the team about this coordination event.
-
-Event: {{eventType}}
-Engineers involved: {{engineerNames}}
-File: {{file}}
-Context: {{reason}}
-
-Rules:
-- Use first names only
-- Be direct and specific
-- Do not use filler words
-- Sound natural when spoken aloud
-- Do not start with "Hey" or "Attention"
-
-Respond with the message text only.
-```
-
-**Example output:**
-
-> "Carol — Alice just got the auth endpoint running. You're clear to integrate."
+Flow: a short, natural voice line is generated for a critical collision, returned
+as audio, and published as a LiveKit microphone-source audio track. The track is
+held for the audio duration plus tail/hold so browsers do not cut playout short.
+Browser audio must be unlocked by a user gesture first. The frontend always
+renders the `VOICE_CUE` text as a fallback. See `docs/livekit.md` for delivery.
 
 ---
 
-## 4. Voice Output — Gemini TTS via LiveKit
+## 4. Live conversation — real-time voice agent
 
-**Model:** `gemini-3.1-flash-tts-preview`
+**Model:** `GEMINI_CONVERSATION_MODEL` (default `gemini-3.1-flash-live-preview`)
+**Code:** `agents/podman-live-conversation/agent.py` (Python LiveKit Agents,
+`google.realtime.RealtimeModel`)
 
-**Integration:** Hermes generates Gemini TTS audio and publishes it as a LiveKit audio track. The code still preserves a Gemini Live path for future available Live models.
+A teammate can start a live, streaming speech-to-speech session with PodMan. The
+agent answers using **function tools** rather than guessing, including:
 
-**Flow:**
+- `get_active_pod_context`, `get_recent_changes`, `search_team_memory`
+- `search_repo`, `repo_recent_commits`, `repo_find_commits` (repo + git history)
+- `record_conversation_note`
+- `delegate_to_hermes`, `abort_active_hermes_job` (hands work to the async Hermes
+  job runner — see `docs/hermes.md`)
 
-1. Nudge message text generated (step 3)
-2. Hermes passes text to Gemini Live via LiveKit Agents
-3. Gemini Live streams audio back in real-time
-4. LiveKit publishes audio into the pod room
-5. All participants hear it through their audio output
+Started/stopped via `POST /api/pods/:id/live-conversation/start` and `.../stop`.
 
-**Why Gemini Live (not plain TTS):**
+---
 
-- Streams audio directly — no intermediate WAV file conversion
-- Latency ~300–500ms from text to first audio packet
-- Natural-sounding voice
-- Strong prize story: Gemini Live 2.5 is the headline model
+## 5. GenMedia — Lyria background score
+
+**Model:** `lyria-3-clip-preview` (override with `GEMINI_MUSIC_MODEL`)
+**Endpoint:** Gemini **Interactions API** (`/v1beta/interactions`)
+**Code:** `backend/src/voice/music.ts`
+
+A pod-specific ~30s clip is generated through the Interactions API, cached in
+MongoDB, and served via `GET /api/pods/:id/music` to play as ambient room audio.
 
 ---
 
 ## Cooldown
 
-Per-pod cooldown of **3 minutes** between nudges. Prevents spam if multiple events fire simultaneously. Implemented in Hermes, not in Gemini.
+Per-pod cooldown (`NUDGE_COOLDOWN_MS`, default 180000 ms / 3 min) gates repeated
+interventions. Implemented in `backend/src/memory/policy.ts`, not in Gemini.

docs/hermes.md

@@ -0,0 +1,108 @@
+# Hermes Spec
+
+Status: active / matches code.
+
+"Hermes" is PodMan's **action layer** — the part that turns a detected problem
+into something a teammate sees, hears, or gets done. It spans three things:
+
+1. **Interventions** — cards, messages, and urgent voice in the pod room.
+2. **Async jobs** — longer tasks delegated from the live conversation agent.
+3. **Ops watchdog** — keeps the production services healthy.
+
+The LiveKit identity for the main agent is `podman-hermes`.
+
+---
+
+## 1. Interventions
+
+**Code:** `backend/src/agent/podman.ts`, `backend/src/action/hermes.ts`,
+`backend/src/voice/live.ts`.
+
+When the agent detects a collision, it runs the learning loop (recall → policy
+gate; see `docs/cont_learning.md`) and then publishes the **least intrusive**
+intervention that fits:
+
+- **Card / message** — a data-channel packet on the `podman.intervention` topic
+  (`publishHermesIntervention` / `publishHermesMessage`). Default path.
+- **Urgent voice** — only for `critical` collisions. `speak()` generates Gemini
+  TTS audio and publishes it as a LiveKit audio track.
+- **Research overlap nudge** — a collaboration card when one engineer is editing
+  a file while another is researching the same topic in docs/browser context.
+  This uses `suggestedAction.kind = "ping_teammate"` and is spoken once for the
+  demo beat, but it is explicitly **not** a merge conflict.
+
+Intervention text is short and deterministic (template, not an LLM call):
+`Conflict: alice + bob both on detector.ts (unpushed). Seen before.` The spoken
+line is phrased for natural TTS prosody. Each intervention is persisted to the
+`interventions` collection; the teammate's accept/dismiss returns via
+`POST /api/outcome`.
+
+Research-overlap text is also deterministic:
+`🤝 bob is researching LiveKit agents (docs.livekit.io) while alice edits livekit.py — sync up before duplicating effort.`
+
+A per-pod cooldown (`NUDGE_COOLDOWN_MS`, default 3 min) and a single-shot
+"active conflict" guard prevent repeat nagging; a conflict re-arms once it
+resolves.
+
+---
+
+## 2. Async Hermes jobs
+
+**Code:** `backend/src/hermes/jobs.ts`. **Storage:** `hermes_jobs` +
+`hermes_job_events` (see `docs/mongodb.md`).
+
+The live conversation agent can hand a longer task to Hermes via its
+`delegate_to_hermes` tool. Lifecycle:
+
+```
+queued → running → (waiting_for_confirmation) → completed | aborted | failed
+```
+
+`createHermesJob()` records the job, emits an `accepted` event, and kicks off
+`runHermesJob()` in the background. The runner gathers context and runs scoped,
+read-mostly steps based on the prompt and success criteria:
+
+- always: `git status --short --branch`, `git diff --stat`
+- if the ask mentions GitHub: a repo reachability check via the GitHub API
+- if it mentions Mongo/memory/telemetry: collection counts
+- if it mentions build/test/typecheck/broken: `pnpm typecheck`
+
+**Confirmation gate:** if `riskLevel === 'deploy_allowed'` and
+`requiresConfirmation`, the job parks at `waiting_for_confirmation` instead of
+acting. **Abort:** `abortHermesJob()` signals the runner's `AbortController`.
+
+Every step appends a `hermes_job_event` (redacted + truncated), which is both
+stored and published live to the room as a `HERMES_JOB_EVENT` data message from a
+short-lived `podman-hermes-job-*` identity. The conversation UI streams these via
+`GET /api/.../hermes-job/events/stream`.
+
+**Endpoints:** `POST /api/internal/hermes/jobs`,
+`GET /api/internal/hermes/jobs/:jobId`, `.../abort`, `.../events`,
+`.../events/stream`, plus the pod-scoped `.../live-conversation/:sessionId/hermes-job`.
+
+---
+
+## 3. Ops watchdog
+
+**Code:** `scripts/hermes-watchdog.mjs`, `scripts/hermes-sync-deploy.mjs`,
+`scripts/hermes-notify.mjs`. **Detail:** `docs/digitalocean.md`.
+
+systemd supervises the app processes; Hermes owns the loop around them:
+
+- `pnpm hermes:watchdog` checks systemd services, public routes, `/health`,
+  `/api/pods`, and `pnpm deploy:doctor`. Failures trigger targeted restarts.
+- `podman-hermes-watchdog.timer` runs it every 5 minutes.
+- `podman-hermes-sync-deploy.timer` polls `origin/main` every 2 minutes and, on a
+  clean tree, fast-forwards, builds, publishes `frontend/dist`, restarts
+  API/agent/Caddy, and runs the strict watchdog.
+- Reports go to `/var/log/podman/hermes-watchdog-latest.json`; set
+  `PODMAN_ALERT_WEBHOOK_URL` to forward failures to Discord/Slack/webhook.
+
+---
+
+## What Hermes is NOT
+
+- Not an autonomous code-writing agent. Job steps are scoped, read-mostly checks;
+  deploy-level actions require explicit confirmation.
+- Not a second collision detector. Detection is deterministic
+  (`collision/detector.ts`); Hermes only acts on the result.

docs/idea.md

@@ -1,93 +0,0 @@
-# PodMan — Idea
-
-## One-line value prop
-
-PodMan is a real-time AI team coordination agent that watches consented work signals, maintains live project memory, and proactively notifies collaborators when dependencies, blockers, or handoffs emerge — before anyone has to ask.
-
----
-
-## Problem
-
-Teams working on the same project lose time because progress is fragmented across people, editors, terminals, and half-finished messages. Coordination gaps — a completed endpoint, a resolved blocker, two engineers duplicating work — are discovered too late, causing idle time, broken handoffs, and missed dependencies.
-
-Slack doesn't help. Stand-ups are too slow. GitHub only knows pushed state.
-
----
-
-## Solution
-
-PodMan is an ambient AI agent that:
-
-1. Watches each engineer's screen via periodic snapshots (consented, browser-native)
-2. Extracts structured context using Gemini Vision — current file, inferred task, terminal state
-3. Maintains a shared live model of the team in MongoDB Atlas — who is doing what, who owns which files
-4. Detects coordination events: dependency ready, blocker detected, duplicate work
-5. Speaks proactively into the team's LiveKit room — engineers hear PodMan through their earbuds without leaving their editor
-
-**The AI's job is not to chat. It is to notice what teammates miss and say so, exactly when it matters.**
-
----
-
-## Target user
-
-Small software teams: hackathon squads, startup engineering teams, student dev teams collaborating in real time on a shared codebase.
-
----
-
-## Core AI job
-
-- Maintain per-person live context (file, task, terminal)
-- Infer shared project state (who owns what, what's blocked, what's ready)
-- Detect 3 coordination event types:
-  - `DEPENDENCY_READY` — engineer A was waiting on work engineer B just completed
-  - `BLOCKER_DETECTED` — engineer appears stuck; another teammate can unblock
-  - `DUPLICATE_WORK` — 2+ engineers working on the same file simultaneously
-- Generate a 1–2 sentence proactive voice nudge
-- Deliver it into the LiveKit room via Gemini Live 2.5
-
----
-
-## How it fits the Continual Learning track
-
-PodMan builds an **ownership map** in MongoDB that persists across sessions:
-
-- Session 1: PodMan needs 3–5 minutes of screen observations to infer who owns what
-- Session 2+: PodMan already knows. First nudge fires in under 30 seconds.
-
-The system gets demonstrably more useful the more it is used, with no user configuration required. That is the track definition met exactly.
-
----
-
-## Architecture (one paragraph)
-
-Each engineer opens a browser PWA on their laptop. The PWA captures a screen frame every 30 seconds via `getDisplayMedia` and POSTs it to Hermes, the server-side orchestrator running on DigitalOcean. Hermes calls Gemini Vision to extract structured context, writes it to MongoDB Atlas, updates the ownership map, and runs event detection across all active engineers. When a coordination event fires, Hermes generates a short spoken message and publishes it as audio into the team's LiveKit room via Gemini Live 2.5. Engineers hear PodMan through their earbuds. No Slack. No tab switching. No interruption to the editor flow.
-
----
-
-## Demo wow moment
-
-> Alice is building the auth endpoint. Carol is visibly blocked — her terminal shows `connection refused`. PodMan detects the blocker and says aloud: "Carol, looks like you're waiting on auth. Alice is actively building it — hang tight."
->
-> Two minutes later, Alice's server starts. PodMan says: "Carol, Bob — Alice just got the auth endpoint running. You're clear to integrate."
->
-> Nobody asked. Nobody pinged anyone on Slack. PodMan just knew.
-
----
-
-## What PodMan is NOT
-
-- Not a chat interface
-- Not a dashboard product
-- Not raw surveillance — engineers consent by joining the room and sharing their screen
-- Not a task manager
-- Not a GitHub integration (v1)
-
----
-
-## Prize alignment
-
-| Prize                 | How PodMan earns it                                                                                   |
-| --------------------- | ----------------------------------------------------------------------------------------------------- |
-| Best Gemini 3.5 / 2.5 | Gemini Vision for screen understanding + Gemini Live 2.5 for voice output                             |
-| Best LiveKit          | LiveKit is the real-time backbone for room presence and voice delivery — load-bearing, not decorative |
-| Best DigitalOcean     | Hermes deployed on DigitalOcean App Platform; MongoDB Atlas on DO-adjacent infrastructure             |

docs/livekit.md

@@ -1,15 +1,24 @@
 # LiveKit Integration Spec
 
-LiveKit is the real-time backbone for PodMan. It handles room presence and voice delivery. It is load-bearing — not decorative.
+Status: active / matches code.
+
+LiveKit is the real-time backbone for PodMan. It carries the **screen-share
+perception input**, the **intervention data channel**, and **all room audio**
+(Gemini TTS escalations, the Lyria score, and the live conversation agent). It is
+load-bearing, not decorative.
 
 ---
 
 ## Room structure
 
-- One LiveKit room per project pod: `room = podId`
-- Engineers join as named participants (e.g. `alice`, `bob`)
-- Hermes joins as `podman-hermes`
-- All participants stay connected for the duration of the session
+- One LiveKit room per pod: `room = podId`.
+- Engineers join as named participants (e.g. `alice`, `bob`).
+- PodMan runs **multiple agent identities** in/around a room:
+  - `podman-hermes` — the main vision + intervention agent (`@livekit/rtc-node`).
+  - `podman-live-conversation` — the Gemini Live voice agent (Python).
+  - short-lived `podman-hermes-job-*` publishers for async job events.
+- A fixed identity matters: a second `podman-hermes` evicts the first and they
+  flap, dropping interventions. systemd keeps exactly one alive in production.
 
 ---
 
@@ -17,88 +26,79 @@ LiveKit is the real-time backbone for PodMan. It handles room presence and voice
 
 **Joining:**
 
-1. PWA calls `POST /pods/:podId/token` → receives `{ token, url }`
-2. LiveKit client connects to the room with the token
-3. PWA publishes screen track via `getDisplayMedia`
-4. PWA sets mic enabled for ambient presence
+1. PWA calls `POST /api/token` with `{ podId, identity }` → `{ token, url }`.
+2. LiveKit client connects with the token.
+3. PWA publishes the screen track via `getDisplayMedia`.
+4. PWA enables mic for ambient presence (used by the conversation agent).
 
 **Receiving:**
 
-- LiveKit client automatically receives Hermes audio track
-- No special subscription needed — LiveKit delivers audio to all participants
-- PWA also listens for data channel messages from Hermes for UI card updates
+- Subscribes to remote agent audio tracks (TTS, Lyria, conversation) and attaches
+  them to a hidden audio sink.
+- Browser autoplay restrictions apply: the PWA calls `room.startAudio()` from a
+  user gesture (`Enable audio`, `Test PodMan voice`, `Share screen`, first room
+  click).
+- Listens on the data channel for cards and `VOICE_CUE` fallback text.
 
 **Data channel listener (PWA):**
 
 ```ts
 room.on(RoomEvent.DataReceived, (payload, participant) => {
-  if (participant?.identity !== 'podman-hermes') return;
-  const nudge = JSON.parse(new TextDecoder().decode(payload));
-  // nudge: { type, message, involvedEngineers, file, sentAt }
-  appendNudgeToFeed(nudge);
+  if (!participant?.identity.startsWith('podman-')) return;
+  const msg = JSON.parse(new TextDecoder().decode(payload));
+  // msg.type: COLLISION | ACK | GIT_REPORT | VOICE_CUE | HERMES_JOB_EVENT
+  appendInterventionToFeed(msg);
 });
 ```
 
+All data messages share the `podman.intervention` topic (`DATA_TOPIC`).
+
 ---
 
-## Hermes side (LiveKit Agent)
+## Agent side (`podman-hermes`)
 
-**Framework:** LiveKit Agents (Node.js)
+**Framework:** `@livekit/rtc-node`. **Code:** `backend/src/agent/podman.ts`,
+`backend/src/action/hermes.ts`, `backend/src/voice/live.ts`.
 
-**Startup:**
+1. Subscribes to engineers' screen-share tracks and samples frames for Gemini
+   Vision.
+2. Detects collisions, gates them through the learning policy, then publishes a
+   card/message on the data channel.
+3. For critical collisions, generates Gemini TTS audio and publishes it as a
+   microphone-source audio track, held for the audio duration plus a tail/hold
+   window so subscribers finish playout. Voice publishing logs frame count,
+   estimated duration, queued playout, and hold time for diagnostics.
 
-1. Hermes mints its own token via the same `createPodToken` function with `identity: 'podman-hermes'`
-2. Connects to the configured room as `podman-hermes`
-3. Registers as a LiveKit Agent with Gemini Live 2.5 as voice provider
+---
 
-**Voice delivery:**
+## Live conversation agent (`podman-live-conversation`)
 
-1. Nudge message text is ready (from Gemini text generation)
-2. Hermes passes text to Gemini Live 2.5 via LiveKit Agents voice pipeline
-3. Audio streams into the room in real-time
-4. All participants hear it
+**Framework:** LiveKit Agents for Python (`AgentSession`, `function_tool`,
+`google.realtime.RealtimeModel`). **Code:**
+`agents/podman-live-conversation/agent.py`.
 
-**Data channel message (sent alongside audio):**
-
-```ts
-const nudge = {
-  type: 'DEPENDENCY_READY' | 'BLOCKER_DETECTED' | 'DUPLICATE_WORK',
-  message: string,        // the spoken text
-  involvedEngineers: string[],
-  file: string | null,
-  sentAt: string,         // ISO timestamp
-};
-room.localParticipant.publishData(
-  new TextEncoder().encode(JSON.stringify(nudge)),
-  { reliable: true }
-);
-```
+Joins the pod room on demand (`POST /api/pods/:id/live-conversation/start`),
+streams speech-to-speech with Gemini Live, and answers using repo/git/memory
+function tools. It can delegate long tasks to the async Hermes job runner and
+narrate progress. See `docs/hermes.md`.
 
 ---
 
 ## Token endpoint
 
-Already implemented at `POST /api/token`.
-
-Hermes uses the same endpoint. Grants:
+`POST /api/token` mints room tokens for engineers and agents alike. Grants:
 
 - `roomJoin: true`
-- `canPublish: true` (for audio track)
-- `canPublishData: true` (for data channel)
+- `canPublish: true` (audio + screen)
+- `canPublishData: true` (data channel)
 - `canSubscribe: true`
 
----
-
-## Gemini voice model
-
-- Model ID: `gemini-3.1-flash-tts-preview`
-- Hermes generates Gemini TTS audio and publishes it as a LiveKit audio track.
-- The backend keeps a Gemini Live path for future model availability, but the verified deployment path uses TTS.
+Short-lived job publishers use `canSubscribe: false`.
 
 ---
 
 ## What LiveKit does NOT do in PodMan
 
-- No video tracks from Hermes
-- No mic transcription (not needed for v1)
-- No SFU mixing — standard room behavior is sufficient
+- No video tracks published by agents.
+- No mic transcription outside the live conversation agent.
+- No custom SFU mixing — standard room behavior is sufficient.

docs/mongodb.md

@@ -1,143 +1,216 @@
 # MongoDB Atlas Integration Spec
 
-MongoDB Atlas is PodMan's shared memory. It stores live engineer state, the ownership map that enables continual learning, coordination events, and nudge history.
+Status: demo-backed / active
+
+MongoDB Atlas is PodMan's shared memory. It stores live work observations,
+collision predictions (with vector embeddings for recall), interventions,
+outcomes, latest engineer state, the materialized Team memory graph, and async
+Hermes job runs.
+
+See also:
+
+- [`docs/cont_learning.md`](cont_learning.md) for outcome-backed team memory,
+  graph materialization, and `$graphLookup` traversal.
 
 ---
 
-## Collections
+## Current Collections
 
 ### `engineer_states`
 
-Latest context per engineer. Two writers, one collection — vision pipeline upserts vision fields, git watcher script upserts git fields independently. Hermes reads the merged document for event detection.
+Latest context per engineer. The local git watcher writes git fields; the vision
+pipeline may write screen-derived fields. Each writer updates only its own
+fields so MongoDB upserts merge cleanly.
 
-```ts
-{
-  _id: string,                       // engineerId (stable across sessions)
-  podId: string,
-  name: string,                      // display name
+Key fields:
 
-  // --- Vision fields (written by Hermes via POST /ingest) ---
-  currentFile: string | null,        // active file inferred from screen
-  inferredTask: string | null,       // what engineer appears to be doing
-  terminalVisible: boolean,
-  recentTerminalOutput: string | null,
-  confidence: number,                // Gemini Vision confidence (0–1)
-  visionUpdatedAt: Date,
+- `podId`
+- `name`
+- `currentFile`
+- `inferredTask`
+- `confidence`
+- `changedFiles`
+- `diffStat`
+- `recentCommit`
+- `branch`
+- `visionUpdatedAt`
+- `gitUpdatedAt`
+- `updatedAt`
 
-  // --- Git fields (written directly by scripts/podman-agent.mjs) ---
-  changedFiles: string[],            // files with uncommitted changes (git status)
-  diffStat: string | null,           // e.g. "auth/middleware.ts | 24 +++++"
-  recentCommit: string | null,       // most recent commit message
-  branch: string | null,             // current branch name
-  gitUpdatedAt: Date,
+Primary use: deterministic dirty/unpushed truth for collision detection and
+graph discovery.
 
-  // --- Shared ---
-  updatedAt: Date                    // most recent write from either source
-}
-```
+### `observations`
 
-**Index:** `{ podId: 1, updatedAt: -1 }`
+Structured perception events from consented screen context and agent inference.
 
-**Two writers, no conflict:** vision upsert uses `$set` on vision fields only; git upsert uses `$set` on git fields only. MongoDB upsert semantics merge them cleanly.
+Key fields:
 
-**Usage:** Hermes reads all documents for a given `podId` after each update to run event detection. Both vision and git context are available in the same document — `changedFiles` provides ground truth, `currentFile` provides screen context.
+- `podId`
+- `engineerId`
+- `currentFile`
+- `symbol`
+- `activity`
+- `confidence`
+- `observedAt`
+
+Primary use: observe/store proof and active editing edges in the Team memory
+graph.
+
+### `collisions`
+
+Predicted coordination risks, with memory enrichment for recall.
+
+Key fields:
+
+- `id`
+- `podId`
+- `file`
+- `symbol`
+- `engineers`
+- `severity`
+- `overlapKind` — optional; `file`/undefined for same-file collisions,
+  `research` for code-edit ↔ research overlaps.
+- `researchTopic`, `researchSource`, `researcher`, `editor` — optional fields
+  present only for research overlaps.
+- `memorySignature`
+- `githubState`
+- `detectedAt`
+- `memoryText` — short text embedded for recall
+- `embedding` — vector (Voyage `voyage-4-lite` or Gemini `gemini-embedding-001`)
+- `embeddingProvider` — `voyage` | `gemini`
+
+Vector index `collision_embedding` (Atlas Vector Search) powers `$vectorSearch`
+recall in `backend/src/memory/vectors.ts`. When Atlas vector search is
+unavailable, recall falls back to app-side cosine, then exact signature/file
+matching.
+
+Primary use: collision cards, vector + signature recall, and graph risk paths.
+
+### `interventions`
+
+Actions PodMan sent or suggested.
+
+Key fields:
+
+- `id`
+- `podId`
+- `collisionId`
+- `kind`
+- `message`
+- `suggestedAction`
+- `status`
+- `createdAt`
+
+Primary use: closing the loop from prediction to a visible card, Hermes message,
+or urgent voice cue.
+
+### `outcomes`
+
+Human or verifier supervision recorded through `POST /api/outcome`.
+
+Key fields:
+
+- `podId`
+- `interventionId`
+- `collisionId`
+- `accepted`
+- `wasRealCollision`
+- `recordedAt`
+
+Primary use: accepted and dismissed outcomes drive exact recall, suppression,
+and learned graph paths.
+
+### `suppressions`
+
+Durable negative-feedback proof: one record per *suppressed repeat* — a
+previously-dismissed collision signature recurred and PodMan stayed quiet.
+Written at repeat time by `backend/src/agent/podman.ts` (once per recurrence,
+re-armed on resolution), materialized as `suppressed` activity by
+`backend/src/graph/live.ts`.
+
+Key fields:
+
+- `id`
+- `podId`
+- `collisionId`
+- `file`
+- `engineers`
+- `priorInterventionId` — the dismissed intervention this repeat matched
+- `priorDismissedAt`
+- `suppressedAt` — the repeat time (drives recency in the activity stream)
+
+Index `{ podId: 1, suppressedAt: -1 }`. Counted in `/api/memory/stats`.
+**Preserve in any DB cleanup** — this is visible learning evidence, not noise.
+
+### `team_model`
+
+Durable per-pod summary memory.
+
+Key fields:
+
+- `podId`
+- `ownership`
+- `hotspots`
+- `graph`
+- `updatedAt`
+
+Primary use: stable Team memory, including seeded `graph` snapshots used after
+live materialization and before demo fallback.
+
+### `graph_nodes` and `graph_edges`
+
+Normalized mirror of the Team memory graph for MongoDB traversal.
+
+Indexes:
+
+- `graph_nodes`: `{ podId: 1, id: 1 }` unique
+- `graph_edges`: `{ podId: 1, source: 1 }`
+
+Primary use: `GET /api/pods/:podId/graph/reach/:id` with `$graphLookup`.
+
+### `hermes_jobs` and `hermes_job_events`
+
+Async Hermes task runs delegated from the live conversation agent (see
+`docs/hermes.md`).
+
+- `hermes_jobs` — one doc per job (`id` unique; `{ sessionId, status, updatedAt }`
+  index). Fields: `id`, `podId`, `sessionId`, `prompt`, `contextScope`,
+  `riskLevel`, `successCriteria`, `status`, `finalSummary`, timestamps.
+- `hermes_job_events` — append-only step log (`{ jobId, createdAt }` index):
+  `accepted`, `heartbeat`, `step_started`, `step_output`, `needs_confirmation`,
+  `step_completed`, `completed`, `aborted`, `failed`. Output is redacted +
+  truncated before storage and mirrored to the room over LiveKit.
+
+Primary use: durable, replayable record of what Hermes did, streamed live to the
+conversation UI.
 
 ---
 
-### `ownership_map`
+## Graph Truth Order
 
-Tracks who works on which files. Built up over the session. **Persists across sessions** — this is the continual learning artifact.
+`GET /api/pods/:podId/graph` follows this order:
 
-```ts
-{
-  _id: string,                    // `${podId}:${file}`
-  podId: string,
-  file: string,
-  primaryOwner: string,           // engineerId with most recent activity on this file
-  contributors: string[],         // all engineerIds observed on this file
-  observationCount: number,       // total frames where this file was seen
-  lastSeenAt: Date
-}
-```
+1. Live graph from real collections.
+2. Seeded graph from `team_model.graph` and mirrored graph records.
+3. Demo fallback graph for stage safety.
 
-**Index:** `{ podId: 1, file: 1 }` (unique)
-
-**Upsert logic:**
-
-- On each context update where `currentFile` is non-null:
-  - Increment `observationCount`
-  - Update `primaryOwner` to the engineer with the most recent `lastSeenAt` on this file
-  - Add engineerId to `contributors` if not present
-  - Update `lastSeenAt`
-
-**Continual learning:** Hermes loads this collection on startup for the pod. If history exists, it pre-populates the in-memory ownership cache before the first frame arrives.
+Seeded and fallback graphs are acceptable for demos only when labeled honestly.
 
 ---
 
-### `events`
+## Demo Proof Path
 
-Every coordination event detected by Hermes.
-
-```ts
-{
-  _id: ObjectId,
-  podId: string,
-  type: 'DEPENDENCY_READY' | 'BLOCKER_DETECTED' | 'DUPLICATE_WORK',
-  involvedEngineers: string[],
-  file: string | null,
-  reason: string,                 // 1-sentence explanation from Gemini
-  nudgeSent: boolean,             // false if suppressed by cooldown
-  detectedAt: Date
-}
-```
-
-**Index:** `{ podId: 1, detectedAt: -1 }`
+Observe screen/git state -> detect collision -> send intervention -> accept or
+dismiss outcome -> recall similar event -> show changed graph or changed
+behavior.
 
 ---
 
-### `nudges`
+## What MongoDB Does Not Store
 
-Every voice nudge sent to the room.
-
-```ts
-{
-  _id: ObjectId,
-  podId: string,
-  eventId: ObjectId,             // ref to events collection
-  targetEngineers: string[],
-  message: string,               // the spoken text
-  sentAt: Date
-}
-```
-
-**Index:** `{ podId: 1, sentAt: -1 }`
-
-**Cooldown check:** before sending a nudge, Hermes queries this collection for any nudge in the last 3 minutes for the same `podId`. If found, suppresses the new nudge and marks the event as `nudgeSent: false`.
-
----
-
-## Hermes startup sequence
-
-```
-1. Connect to Atlas using MONGODB_URI
-2. Load ownership_map for this podId
-3. Build in-memory cache: Map<file, { primaryOwner, contributors }>
-4. Begin accepting /ingest requests
-```
-
----
-
-## Atlas configuration
-
-- **Cluster tier:** M0 (free) is sufficient for hackathon scale
-- **Region:** same as DigitalOcean deployment (e.g. NYC1)
-- **Auth:** connection string in `MONGODB_URI` env var
-- **Collections created automatically** on first write (no schema migration needed)
-
----
-
-## What MongoDB does NOT store
-
-- Raw screenshot frames (too large — frames are processed in-memory by Hermes and discarded)
-- Full Gemini response objects (only extracted fields are stored)
-- Session recordings
+- Raw screenshot frames.
+- Screen recordings.
+- Secrets or credentials.
+- Full terminal logs.
+- Full Gemini response objects beyond extracted fields needed for memory.

docs/plans/research-overlap.md

@@ -0,0 +1,166 @@
+# Build spec: cross-channel overlap (code-edit ↔ research nudge)
+
+> Self-contained spec for an implementing agent. Everything needed to build is
+> here: current-state anchors, exact edits, code sketches, verification. Read
+> the referenced files before editing.
+
+## Context / why
+
+Today PodMan only fires when **two engineers touch the same file** (basename
+match) with unpushed changes — `backend/src/collision/detector.ts:36`. That makes
+the system feel like a one-file trick. The wow we want: detect a **code↔research
+overlap** — one teammate is *editing* `livekit.py` while another is *researching*
+the same topic in a browser (LiveKit docs/SDK). PodMan nudges:
+
+> 🤝 bob is deep in LiveKit docs while you edit livekit.py — sync up before duplicating effort.
+
+This reframes PodMan from merge-conflict detector to a **team-coordination agent
+that catches duplicated effort / knowledge overlap** — stronger continual-learning
+story, distinct demo beat.
+
+### Locked decisions
+- **Signal capture:** Gemini vision on the existing LiveKit screenshare. When a
+  teammate shares a browser/docs window, vision classifies it `research` and
+  extracts `{researchTopic, researchSource}`. No browser extension, no new client
+  surface. Reuses `backend/src/agent.ts` + `backend/src/vision/gemini.ts`.
+- **Matching:** semantic embeddings (reuse `embed()` + `cosine()` in
+  `backend/src/memory/vectors.ts`). Deterministic stem/keyword fallback fires when
+  an embed call returns `null`, so the demo path never depends on a live vector call.
+- **Framing:** collaboration nudge (`ping_teammate`), spoken once for the beat.
+
+## Current-state anchors (read these first)
+
+- `backend/src/collision/detector.ts:14-20` — `fileKey()` stem/basename logic to mirror.
+- `backend/src/collision/detector.ts:36-89` — `detectCollisions()` (same-file path; leave unchanged).
+- `backend/src/agent/podman.ts:85-116` — `onScreenFrame()` orchestration; `:124-126` `conflictKey()`; `:128-183` `handle()`.
+- `backend/src/agent/podman.ts:38-46` — `engineersOverlapOnFile()` (git ground-truth; research must skip it).
+- `backend/src/vision/gemini.ts:7-70` — `SCHEMA`, prompt, and `EngineerContext` mapping.
+- `backend/src/memory/vectors.ts:52-66` `cosine()`, `:68-70` private `embed()`.
+- `backend/src/action/hermes.ts:46-62` — `publishHermesIntervention()` (speaks only if `voiceLine` passed).
+- `frontend/src/livekit/useInterventions.ts:36-48` — data-channel handler (renders `intervention.message` verbatim).
+- `shared/src/engineer.ts:6-23` `EngineerContext`; `shared/src/collision.ts:7-28` `Collision`.
+
+**Off-spec gate:** nothing in `docs/` covers cross-channel overlap. Update specs
+in step 1 **before** code (repo documentation-first rule).
+
+## Concurrency / safety (several people build at once)
+
+- Shared-contract edits are **additive optional fields only** — no signature
+  changes. Safe.
+- `backend/src/agent/podman.ts` is hot: two in-place edits (`conflictKey`,
+  `handle` branch). `git pull --rebase` before pushing.
+- **No required frontend change** — nudge text rides in `intervention.message`,
+  already rendered by `frontend/src/components/PodView.tsx`.
+
+## Implementation steps
+
+### 1. Specs first
+- `docs/gemini.md` — vision classifies `editing` vs `research`; extracts `researchTopic`/`researchSource`.
+- `docs/hermes.md` — new intervention type **research overlap** (collaboration nudge, `ping_teammate`, spoken once); explicitly NOT a merge conflict.
+- `docs/mongodb.md` — new optional `Collision` fields.
+- `docs/demo.md` — insert ~30s beat after the same-file collision.
+
+### 2. Shared contract (additive, optional)
+`shared/src/engineer.ts` — add to `EngineerContext`:
+```ts
+mode?: 'editing' | 'research';
+researchTopic?: string;
+researchSource?: string;   // domain, e.g. "docs.livekit.io"
+```
+`shared/src/collision.ts` — add to `Collision`:
+```ts
+overlapKind?: 'file' | 'research'; // undefined = file (preserves current behavior)
+researchTopic?: string;
+researchSource?: string;
+researcher?: string;               // engineer doing research
+editor?: string;                   // engineer editing the file
+```
+
+### 3. Vision: classify editing vs research
+`backend/src/vision/gemini.ts` — extend `SCHEMA` with `mode`, `researchTopic`,
+`researchSource` (+ propertyOrdering). Update the prompt so a browser/docs/SDK
+frame returns `mode:'research'` + topic + source domain, else `mode:'editing'`
+with existing IDE fields. Map new fields into the returned `EngineerContext`.
+Keep `thinkingConfig.thinkingBudget:0` and `MEDIA_RESOLUTION_LOW`.
+
+### 4. Semantic matcher helper (reuse embed/cosine)
+`backend/src/memory/vectors.ts` — add and export:
+```ts
+export async function semanticSimilarity(a: string, b: string): Promise<number | null> {
+  const [va, vb] = await Promise.all([embed(a, 'query'), embed(b, 'document')]);
+  if (!va || !vb) return null;
+  return cosine(va, vb);
+}
+```
+
+### 5. New detector (additive file)
+`backend/src/env.ts` — add `RESEARCH_OVERLAP_THRESHOLD` (default `0.6`).
+
+`backend/src/collision/research.ts` (new):
+```ts
+export interface ResearchOpts { similarity?: (a: string, b: string) => Promise<number | null>; threshold?: number; }
+export async function detectResearchOverlaps(
+  contexts: EngineerContext[],
+  gitStates: Map<string, GitState> | undefined,
+  opts: ResearchOpts = {},
+): Promise<Collision[]>;
+```
+Logic:
+- **researchers** = contexts with `mode==='research'` && `researchTopic`.
+- **editor files** = ground truth from `gitStates[*].changedFiles` (reliable) plus
+  any `mode==='editing'` `currentFile`; each tagged with its engineer.
+- For each distinct (researcher, editor) pair on a file, score
+  `similarity("${topic} ${source}", "<file stem words> <symbol> <activity>")`
+  (default `similarity = semanticSimilarity`). Fire when `score >= threshold`
+  (default `RESEARCH_OVERLAP_THRESHOLD`).
+- **Fallback:** if `score === null`, deterministic stem/token overlap (mirror
+  `fileKey()` stemming) — guarantees `livekit` ↔ `livekit.py` fires offline.
+- Dedupe to best-scoring file per researcher; require distinct engineers.
+- Emit `Collision`: `id: col_research_<stem>_<Date.now()>`, `engineers:[editor, researcher]`,
+  `file:<editor file>`, `severity:'warn'`, `overlapKind:'research'`, plus
+  `researcher`, `editor`, `researchTopic`, `researchSource`.
+
+### 6. Wire into orchestrator — `backend/src/agent/podman.ts`
+- In `onScreenFrame`, after `detectCollisions(...)` (line ~100):
+  ```ts
+  const research = await detectResearchOverlaps([...this.contexts.values()], gitStates);
+  const collisions = [...fileCollisions, ...research];
+  ```
+  (concat **before** the re-arm + handle loops at `:104` / `:111` / `:115`).
+- `conflictKey()` (`:124`) — namespace by overlap kind so research and file
+  overlaps on the same file don't share an edge-trigger key:
+  ```ts
+  return `${collision.overlapKind ?? 'file'}:${comparableBasename(collision.file)}`;
+  ```
+- `gitOverlap` loop (`:111-113`) — guard: only call `engineersOverlapOnFile` when
+  `collision.overlapKind !== 'research'` (researcher won't have the file dirty;
+  leave `gitOverlap` undefined for research).
+- `handle()` (`:128`) — branch on `overlapKind === 'research'`:
+  - `message`: `` `🤝 ${researcher} is researching ${researchTopic}` + (researchSource ? ` (${researchSource})` : '') + ` while ${editor} edits ${shortFile} — sync up before duplicating effort.` ``
+  - `voiceLine`: `` `${researcher} is researching ${researchTopic} while ${editor} works on ${shortFile}. Worth a quick sync.` ``
+  - `suggestedAction.kind = 'ping_teammate'`.
+  - Pass `voiceLine` to `publishHermesIntervention` **regardless of severity** so
+    the beat is spoken once. (For file collisions keep existing
+    `severity === 'critical' ? voiceLine : undefined`.)
+  - Existing `recallSimilar` / `shouldIntervene` gate stays unchanged.
+
+### 7. Frontend (nice-to-have, cut if behind)
+`frontend/src/livekit/useInterventions.ts` — capture `msg.collision.overlapKind`;
+show a 🤝 badge on the card in `PodView.tsx`. Core path needs nothing.
+
+## Verification
+
+1. **Build:** `pnpm -r build` (shared builds first — order matters).
+2. **Detector (offline, deterministic):** harness calling `detectResearchOverlaps`
+   with stubbed `opts.similarity`:
+   - researcher `{mode:'research', researchTopic:'LiveKit agent init', researchSource:'docs.livekit.io'}`
+     + gitState with `livekit.py` dirty for another engineer → exactly one
+     `overlapKind:'research'` collision naming both.
+   - single engineer both sides → no overlap.
+   - `similarity` returns `null` → keyword fallback still fires on `livekit`.
+3. **Live:** run the agent (systemd on the box, or local); one participant shares a
+   browser tab on LiveKit docs, another keeps `livekit.py` dirty (git sidecar
+   running) → 🤝 nudge card + one-time spoken cue. Fires once (edge-triggered),
+   re-arms after the browser closes.
+4. **Regression:** same-file collision still fires, unaffected (separate
+   `conflictKey` namespace).

docs/plans/work-history-roi.md

@@ -0,0 +1,299 @@
+# Build spec: Work History "Coordination ROI" band
+
+> Self-contained spec for an implementing agent. Everything needed to build is
+> here: current-state anchors, exact edits, code sketches, verification. Read
+> the referenced files before editing. Changes are **additive** — one optional
+> field on a shared type, two new backend queries, one new presentational
+> component. No route signature changes, no DB writes, no new deps.
+
+## Context / why
+
+The Work History dialog (opens when you click a teammate's "History" button)
+today shows three raw counters (files / screen logs / git changes), a Recent
+files bar list, and a Timeline. It is pure **activity volume** — it summarizes
+nothing and shows none of PodMan's actual value.
+
+We add a **Coordination ROI band** at the top of the dialog that answers "what
+did PodMan save this person?": estimated rework-hours saved by clashes Hermes
+caught early, plus hard defensible counts. This is a *summary* layer — it must
+NOT re-stream the pod activity feed ("Team Memory"). Existing Recent files +
+Timeline sections stay exactly as they are, below the new band.
+
+### Locked decisions
+- **Primary story = saved time / ROI.** One number leads: `~Xh Ym rework saved`.
+- **Transparent heuristic.** The hours are a labeled estimate (`~`, `(est.)`)
+  with an info tooltip showing the per-clash breakdown. Technical judges can see
+  the model; we never claim precision.
+- **Backend extension required** (collisions/interventions are not in the
+  current `MemberWorkHistory` payload). Field is optional → old frontends and
+  pods with no collisions degrade gracefully (band hidden).
+- **Cut:** editing/research focus donut. ROI is the single story; a donut
+  dilutes it.
+- **Credit split** across involved engineers so a 2-person clash does not
+  double-count the pod total.
+
+## Heuristic (this is the contract — implement exactly)
+
+For each `collisions` doc in the window where the member is involved AND an
+`interventions` doc exists for it (Hermes actually surfaced it):
+
+1. **Eligibility (must be "real"):** count the collision only if
+   `gitOverlap === true` OR `severity === 'critical'`. Otherwise skip.
+2. **Weight by kind/severity:**
+   | condition | minutesEach |
+   |---|---|
+   | `overlapKind === 'research'` | 10 |
+   | `severity === 'critical'` (same-file) | 45 |
+   | `severity === 'warn'` (same-file) | 20 |
+   | `severity === 'info'` (same-file) | 10 |
+   (Evaluate research first; a research overlap is always 10 regardless of severity.)
+3. **Member share:** `minutesEach / max(1, engineers.length)`. Sum all shares →
+   `savedMinutes` (round to nearest integer).
+4. **breakdown[]:** group eligible collisions by label
+   (`"critical same-file"`, `"warn same-file"`, `"research overlap"`, etc.),
+   each entry `{ label, count, minutesEach }` — for the tooltip.
+
+Member "involved" = `engineers` array contains the member (case-insensitive),
+OR `researcher`/`editor` equals the member (case-insensitive). Reuse the
+existing `sameMember()` helper logic.
+
+Hard counts (no estimation):
+- `clashesCaught` = number of eligible collisions (the integer behind the hours).
+- `filesDeconflicted` = distinct `collision.file` values across eligible collisions.
+- `conflictFreeCommits` / `totalCommits`: see "commits" note below.
+
+### Commits note (keep simple, defensible)
+There is no per-commit log in the window. Use the git ground-truth we have:
+`totalCommits` = count of distinct `changedFiles` for the member from
+`engineer_states` (already loaded as `gitState.changedFiles.length`).
+`conflictFreeCommits` = `totalCommits - filesDeconflicted` (clamped ≥ 0). This
+reads as "files in flight that never hit a clash". Label it in the UI as
+**"conflict-free files"**, not commits, so the wording matches the data. (The
+band copy below already says "files".)
+
+## Current-state anchors (read these first)
+
+- `shared/src/member-history.ts:24-36` — `MemberWorkHistory` interface (add `roi?`).
+- `backend/src/activity/member-history.ts:73-174` — `getMemberWorkHistory()`.
+  - `:83-94` — the `Promise.all` that loads `observations` + `engineer_states`. Add collisions/interventions here.
+  - `:45-47` — `sameMember()` helper to reuse for involvement check.
+  - `:124` — `gitState` already in scope; `:169` uses `gitState.changedFiles.length`.
+  - `:161-173` — the returned object (add `roi`).
+- `backend/src/memory/db.ts:47-48` — canonical collection names `collisions`, `interventions` (typed `Collision`, `Intervention`).
+- `backend/src/activity/store.ts:167-178` — reference query shape for both collections.
+- `shared/src/collision.ts:7-36` — `Collision` (`engineers`, `severity`, `overlapKind`, `gitOverlap`, `researcher`, `editor`, `file`, `detectedAt`).
+- `shared/src/intervention.ts:8-18` — `Intervention` (`collisionId`, `podId`).
+- `frontend/src/components/PodView.tsx:33-35` — type imports from `@podman/shared`.
+- `frontend/src/components/PodView.tsx:1035-1041` — the `history && !loading && !error` block; the 3-stat grid is the insert point (band goes ABOVE it).
+- `frontend/src/components/PodView.tsx:1093-1100` — `HistoryStat` (style reference for new sub-stats).
+- `frontend/src/components/PodView.tsx` — `timeLabel()` exists for relative time; reuse if needed.
+- Route is unchanged: `backend/src/server.ts:502-506` already returns whatever `getMemberWorkHistory` produces.
+
+## Edit 1 — shared type (`shared/src/member-history.ts`)
+
+Add to the `MemberWorkHistory` interface (after `timeline`):
+
+```ts
+  /** Coordination ROI summary — clashes Hermes caught for this member. Optional
+   * so pods with no collisions / older payloads render without the band. */
+  roi?: MemberWorkHistoryRoi;
+}
+
+export interface MemberWorkHistoryRoi {
+  /** Estimated rework minutes saved (heuristic, labeled "~/est." in UI). */
+  savedMinutes: number;
+  /** Eligible collisions caught early (hard count). */
+  clashesCaught: number;
+  /** Distinct files that hit an eligible clash. */
+  filesDeconflicted: number;
+  /** Member files in flight that never hit a clash. */
+  conflictFreeFiles: number;
+  /** Total member files in flight (git changedFiles). */
+  totalFiles: number;
+  /** Per-kind breakdown for the tooltip. */
+  breakdown: { label: string; count: number; minutesEach: number }[];
+}
+```
+
+`shared/src/index.ts:56-59` already re-exports the member-history types via a
+`export type { ... }` block — add `MemberWorkHistoryRoi` to that list.
+
+## Edit 2 — backend (`backend/src/activity/member-history.ts`)
+
+1. Import the types: `import type { Collision } from '@podman/shared';` (Intervention only needs `collisionId`, can stay untyped or import too).
+2. In the `Promise.all` at `:83`, add two queries (windowed, podId-scoped):
+
+```ts
+db.collection<Collision>('collisions')
+  .find({ podId, detectedAt: { $gte: since } }, { projection: { _id: 0 } })
+  .sort({ detectedAt: -1 })
+  .limit(200)
+  .toArray(),
+db.collection<{ collisionId: string }>('interventions')
+  .find({ podId }, { projection: { collisionId: 1, _id: 0 } })
+  .toArray(),
+```
+
+3. After building `fileRows`, compute `roi` with a new local helper
+   `computeRoi(member, collisions, interventions, gitState)`:
+
+```ts
+function computeRoi(
+  member: string,
+  collisions: Collision[],
+  interventionCollisionIds: Set<string>,
+  changedFileCount: number,
+): MemberWorkHistoryRoi {
+  const involved = (c: Collision) =>
+    c.engineers?.some((e) => sameMember(e, member)) ||
+    sameMember(c.researcher, member) ||
+    sameMember(c.editor, member);
+
+  const eligible = collisions.filter(
+    (c) =>
+      involved(c) &&
+      interventionCollisionIds.has(c.id) &&
+      (c.gitOverlap === true || c.severity === 'critical'),
+  );
+
+  const weightOf = (c: Collision): { label: string; minutes: number } => {
+    if (c.overlapKind === 'research') return { label: 'research overlap', minutes: 10 };
+    if (c.severity === 'critical') return { label: 'critical same-file', minutes: 45 };
+    if (c.severity === 'warn') return { label: 'warn same-file', minutes: 20 };
+    return { label: 'info same-file', minutes: 10 };
+  };
+
+  let savedMinutes = 0;
+  const groups = new Map<string, { count: number; minutesEach: number }>();
+  for (const c of eligible) {
+    const { label, minutes } = weightOf(c);
+    savedMinutes += minutes / Math.max(1, c.engineers?.length ?? 1);
+    const g = groups.get(label) ?? { count: 0, minutesEach: minutes };
+    g.count += 1;
+    groups.set(label, g);
+  }
+
+  const filesDeconflicted = new Set(eligible.map((c) => c.file)).size;
+  const totalFiles = changedFileCount;
+  return {
+    savedMinutes: Math.round(savedMinutes),
+    clashesCaught: eligible.length,
+    filesDeconflicted,
+    conflictFreeFiles: Math.max(0, totalFiles - filesDeconflicted),
+    totalFiles,
+    breakdown: [...groups.entries()].map(([label, g]) => ({
+      label,
+      count: g.count,
+      minutesEach: g.minutesEach,
+    })),
+  };
+}
+```
+
+4. Build the intervention id set and attach to the return:
+
+```ts
+const interventionIds = new Set(interventions.map((i) => i.collisionId));
+const roi = computeRoi(member, collisions, interventionIds, gitState?.changedFiles?.length ?? 0);
+```
+
+Add `roi` to the returned object at `:161-173`. Always return it (it self-zeroes
+when there are no clashes); the frontend decides whether to show the band based
+on `clashesCaught`/`savedMinutes`.
+
+> Note `Collision.id` survives the `{ _id: 0 }` projection — `id` is a real field
+> (`shared/src/collision.ts:8`), distinct from Mongo `_id`. Do not project it out.
+
+## Edit 3 — frontend (`frontend/src/components/PodView.tsx`)
+
+1. Add `MemberWorkHistoryRoi` to the `@podman/shared` type import (`:33-35`).
+2. Insert `<RoiBand roi={history.roi} />` immediately inside the
+   `history && !loading && !error` block, BEFORE the `grid ... sm:grid-cols-3`
+   stat grid (`:1037`).
+3. New presentational component (place near `HistoryStat`, `:1093`):
+
+```tsx
+function formatSaved(minutes: number): string {
+  if (minutes < 60) return `~${minutes}m`;
+  const h = Math.floor(minutes / 60);
+  const m = minutes % 60;
+  return m ? `~${h}h ${m}m` : `~${h}h`;
+}
+
+function RoiBand({ roi }: { roi?: MemberWorkHistoryRoi }) {
+  if (!roi || roi.clashesCaught === 0) return null; // no clashes → no band
+  const conflictFree = roi.totalFiles
+    ? Math.round((roi.conflictFreeFiles / roi.totalFiles) * 100)
+    : 100;
+  return (
+    <section className="rounded-lg border bg-primary/5 p-4">
+      <div className="flex flex-wrap items-end justify-between gap-3">
+        <div>
+          <div className="flex items-center gap-1.5">
+            <p className="font-mono text-2xl font-semibold">{formatSaved(roi.savedMinutes)}</p>
+            <span className="text-sm text-muted-foreground">rework saved</span>
+            <RoiTooltip roi={roi} />
+          </div>
+          <p className="mt-0.5 text-xs text-muted-foreground">
+            estimated · clashes caught pre-commit
+          </p>
+        </div>
+        <div className="text-right">
+          <p className="font-mono text-lg font-medium">{roi.clashesCaught}</p>
+          <p className="text-xs text-muted-foreground">clashes caught early</p>
+        </div>
+      </div>
+      <div className="mt-3 h-2 overflow-hidden rounded-full bg-muted">
+        <div className="h-full rounded-full bg-primary" style={{ width: `${conflictFree}%` }} />
+      </div>
+      <p className="mt-1.5 text-[0.68rem] text-muted-foreground">
+        conflict-free: {roi.conflictFreeFiles} of {roi.totalFiles} files ·{' '}
+        {roi.filesDeconflicted} auto-deconflicted
+      </p>
+    </section>
+  );
+}
+```
+
+4. Tooltip — reuse the existing Tooltip primitives already imported in this file
+   (`Tooltip`, `TooltipTrigger`, `TooltipContent` — see the History button at
+   `:982-988`). `RoiTooltip` renders an `ⓘ`/`InfoIcon` trigger; content lists
+   `breakdown` rows as `{count} × {minutesEach}m  {label}` plus a footer line
+   `"split across engineers · est. only"`. Keep it a few lines.
+
+## Verification
+
+```bash
+pnpm -r build            # @podman/shared first, then backend + frontend typecheck
+```
+Manual / demo check (against a pod that has collisions, e.g. demo-pod):
+1. Open the app, click a teammate who was in a clash → History.
+2. Band shows at top: `~Xh Ym rework saved`, clashes-caught integer, conflict-free bar.
+3. Hover `ⓘ` → breakdown rows match the heuristic table.
+4. Click a teammate with **no** clashes → band absent, rest of dialog unchanged.
+5. Existing Recent files + Timeline sections render unchanged below the band.
+
+Quick data sanity (optional, on the box or via mongosh):
+```js
+db.collisions.find({ podId: "demo-pod" }).count()       // > 0 for a real band
+db.interventions.find({ podId: "demo-pod" }).count()    // surfaced clashes
+```
+
+## Coordination / merge risk (team is concurrent)
+
+- Touches two shared hot files: `shared/src/member-history.ts` and
+  `frontend/src/components/PodView.tsx`. Both edits are **additive** (one
+  optional field + one new component + one insert line). Low conflict risk, but
+  announce before pushing.
+- `git pull --rebase origin main` immediately before push. Never force-push main.
+- No changes to `/api/...` route signatures, no new deps, no Mongo writes.
+
+## Deploy (after merge, on the box — see CLAUDE.md ops)
+
+```bash
+cd /root/podman && git pull && pnpm -r build
+rm -rf /var/www/podman/* && cp -r frontend/dist/* /var/www/podman/
+systemctl restart podman-platform-api podman-platform-agent
+```
+(Frontend-visible change + backend payload change → both the static build and
+the API service must be refreshed.)

docs/superpowers/specs/2026-06-27-podman-design.md

@@ -1,135 +0,0 @@
----
-name: podman-design
-description: Full system design for PodMan — real-time AI team coordination agent using Gemini Vision, Gemini Live 2.5, LiveKit, and MongoDB Atlas
-metadata:
-  type: project
----
-
-# PodMan — System Design
-
-## Concept
-
-PodMan is a real-time AI team coordination agent for software teams. Engineers join a LiveKit room with earbuds. Each engineer's browser PWA captures their screen every 30s and sends it to Hermes (server-side orchestrator on DigitalOcean). Hermes uses Gemini Vision to extract structured context per engineer, detects coordination events, and speaks proactive nudges into the room via Gemini Live 2.5 through LiveKit. MongoDB Atlas stores team state and an ownership map that persists across sessions.
-
-**Track:** Continual Learning — the ownership map makes PodMan faster and smarter each session with no user configuration.
-
----
-
-## Architecture
-
-```
-┌──────────────── Engineer laptop (Browser PWA) ──────────────────┐
-│  getDisplayMedia → frame every 30s                               │
-│  HTTP POST /ingest → { screenshot, engineerId, podId }           │
-│  LiveKit room joined → receives voice audio from Hermes          │
-│  Earbuds: hears PodMan proactive nudges                          │
-└──────────────────────────────────────────────────────────────────┘
-                          │ POST /ingest
-                          ▼
-┌────────────────── HERMES (DigitalOcean) ─────────────────────────┐
-│  1. Receive frame → Gemini Vision → EngineerContext              │
-│  2. Write context to MongoDB (per-user state)                    │
-│  3. Update ownership map (file → engineer)                       │
-│  4. Run event detector over all active contexts                  │
-│  5. If event detected → Gemini generates voice message           │
-│  6. Push audio into LiveKit room via Gemini Live 2.5             │
-└──────────────────────────────────────────────────────────────────┘
-                          │ read/write
-                          ▼
-                   MongoDB Atlas
-         (engineer_states, ownership_map,
-          events, nudges)
-```
-
----
-
-## Components
-
-### PWA (local agent)
-
-- Joins LiveKit room via existing `joinPod` flow
-- Captures frame every 30s via `getDisplayMedia`, compresses to JPEG (1280×720, quality 0.7)
-- POSTs `{ engineerId, podId, screenshotBase64, capturedAt }` to `POST /ingest`
-- Receives Hermes audio track (automatic via LiveKit)
-- Listens for data channel messages → renders nudge feed
-- Two screens: join screen (built), active session screen (to build)
-
-### Hermes (orchestrator)
-
-- Express server + LiveKit Agent on DigitalOcean
-- `POST /ingest`: receives frame, queues for vision
-- Vision pipeline: Gemini 2.0 Flash → `EngineerContext`
-- Confidence gate: discard frames with confidence < 0.6
-- State writer: upsert `engineer_states` + `ownership_map` in MongoDB
-- Event detector: Gemini text prompt over all active states
-- Nudge generator: Gemini text → 1–2 sentence spoken message
-- Voice publisher: Gemini Live 2.5 via LiveKit Agents → audio into room
-- Data channel: sends structured nudge payload alongside audio
-- Cooldown: 3 min between nudges per pod
-
-### Gemini usage
-
-- **Vision:** `gemini-2.0-flash` — screen → `{ currentFile, inferredTask, terminalVisible, recentTerminalOutput, confidence }`
-- **Event detection:** `gemini-2.0-flash` — all engineer states → `{ event, involvedEngineers, file, reason }`
-- **Nudge generation:** `gemini-2.0-flash` — event → spoken message text
-- **Voice:** `gemini-3.1-flash-tts-preview` via LiveKit audio publication — text → audio
-
-### MongoDB Atlas (4 collections)
-
-- `engineer_states`: latest context per engineer, upserted each ingest
-- `ownership_map`: file → primaryOwner + contributors, persists across sessions (continual learning)
-- `events`: all detected coordination events
-- `nudges`: all voice nudges sent + cooldown history
-
-### LiveKit
-
-- One room per pod
-- Engineers publish screen track (used client-side for capture — Hermes does not subscribe)
-- Hermes joins as `podman-hermes`, publishes audio + data channel messages
-- Engineers receive audio automatically
-
----
-
-## Event types
-
-| Event              | Trigger                                                                    | Example nudge                                                                           |
-| ------------------ | -------------------------------------------------------------------------- | --------------------------------------------------------------------------------------- |
-| `BLOCKER_DETECTED` | Engineer stuck (error in terminal, same file N frames) + teammate can help | "Carol, looks like you're waiting on auth. Alice is actively building it — hang tight." |
-| `DEPENDENCY_READY` | Engineer A completes work that Engineer B was waiting on                   | "Carol, Bob — Alice just got the auth endpoint running. You're clear to integrate."     |
-| `DUPLICATE_WORK`   | 2+ engineers on same file simultaneously                                   | "Alice and Bob — you're both in login.tsx. Coordinate before pushing."                  |
-
----
-
-## Continual learning story
-
-The `ownership_map` collection persists across sessions. On Hermes startup:
-
-1. Load ownership map for this pod from Atlas
-2. Build in-memory cache: `Map<file, { primaryOwner, contributors }>`
-3. Event detection uses priors immediately — no ramp-up phase
-
-**Demo:** Session 1 takes 3 min to first nudge. Session 2 fires in < 30 seconds. That is the learning, visible on stage.
-
----
-
-## Demo flow (3 min)
-
-1. **(0:00)** Three engineers join pod. PodMan greets by voice.
-2. **(0:20)** Alice opens `auth/middleware.ts`. Hermes infers ownership.
-3. **(0:45)** Bob opens `frontend/login.tsx`. Carol's terminal shows connection refused.
-4. **(1:20) BLOCKER_DETECTED:** "Carol, looks like you're waiting on auth. Alice is actively building it — hang tight."
-5. **(2:00) DEPENDENCY_READY:** "Carol, Bob — Alice just got the auth endpoint running. You're clear to integrate."
-6. **(2:20)** Optional: session 2 warm-start comparison.
-7. **(2:45)** Close: "PodMan — the teammate that sees what Slack can't."
-
----
-
-## Key risks
-
-| Risk                                         | Mitigation                                        |
-| -------------------------------------------- | ------------------------------------------------- |
-| Gemini Vision accuracy                       | Large font, single editor window, confidence gate |
-| Gemini Live 2.5 + LiveKit Agents integration | Build together hour 5–7, have TTS fallback        |
-| Frame POST latency                           | JPEG compression, target < 500ms                  |
-| Event false positives                        | 3-min cooldown, pre-staged demo                   |
-| DO deploy failure                            | Hermes runs local, PWA defaults to localhost:8787 |

eslint.config.mjs

@@ -3,7 +3,13 @@ import tseslint from 'typescript-eslint';
 
 export default tseslint.config(
   {
-    ignores: ['**/dist/**', '**/build/**', '**/node_modules/**', '**/*.config.*'],
+    ignores: [
+      '**/dist/**',
+      '**/build/**',
+      '**/node_modules/**',
+      '**/.venv/**',
+      '**/*.config.*',
+    ],
   },
   js.configs.recommended,
   ...tseslint.configs.recommended,

frontend/index.html

@@ -4,7 +4,91 @@
     <meta charset="UTF-8" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" />
     <meta name="theme-color" content="#0b0f17" />
-    <title>PodMan</title>
+    <link rel="icon" type="image/svg+xml" href="/favicon.svg" />
+    <title>PodMan — the teammate that sees what git can’t</title>
+    <meta
+      name="description"
+      content="PodMan is an ambient AI teammate that watches your pod's screens in realtime and catches merge collisions before anyone pushes. Top 3 at the AI Engineer World's Fair 2026 Hackathon — built by Karti Tripathi, Ramis Hasanli, Yahya Alhinai, and Shakthi Bachala."
+    />
+    <meta name="author" content="Karti Tripathi, Ramis Hasanli, Yahya Alhinai, Shakthi Bachala" />
+    <link rel="canonical" href="https://podman.live/" />
+
+    <meta property="og:type" content="website" />
+    <meta property="og:site_name" content="PodMan" />
+    <meta property="og:url" content="https://www.podman.live/" />
+    <meta property="og:title" content="PodMan — the teammate that sees what git can’t" />
+    <meta
+      property="og:description"
+      content="Ambient AI teammate that watches your pod's screens in realtime and catches merge collisions before anyone pushes."
+    />
+    <meta property="og:image" content="https://www.podman.live/og.png" />
+    <meta property="og:image:width" content="1200" />
+    <meta property="og:image:height" content="630" />
+
+    <meta name="twitter:card" content="summary_large_image" />
+    <meta name="twitter:title" content="PodMan — the teammate that sees what git can’t" />
+    <meta
+      name="twitter:description"
+      content="Ambient AI teammate that catches merge collisions before anyone pushes."
+    />
+    <meta name="twitter:image" content="https://www.podman.live/og.png" />
+
+    <script type="application/ld+json">
+      {
+        "@context": "https://schema.org",
+        "@type": "SoftwareApplication",
+        "name": "PodMan",
+        "url": "https://podman.live",
+        "applicationCategory": "DeveloperApplication",
+        "operatingSystem": "Web",
+        "description": "An ambient AI teammate that watches your pod's screens in realtime and catches merge collisions, duplicated work, and missed handoffs before anyone pushes.",
+        "award": "Top 3 — AI Engineer World's Fair 2026 Hackathon (2nd overall of 95+ teams, LiveKit track winner, DigitalOcean Best Use)",
+        "author": [
+          {
+            "@type": "Person",
+            "name": "Karti Tripathi",
+            "url": "https://karti.ai",
+            "sameAs": "https://www.linkedin.com/in/kartitripathi/"
+          },
+          {
+            "@type": "Person",
+            "name": "Ramis Hasanli",
+            "sameAs": "https://www.linkedin.com/in/hasanliramis/"
+          },
+          {
+            "@type": "Person",
+            "name": "Yahya Alhinai",
+            "sameAs": "https://www.linkedin.com/in/yhinai/"
+          },
+          {
+            "@type": "Person",
+            "name": "Shakthi Bachala",
+            "sameAs": "https://www.linkedin.com/in/shakthi-bachala-09401510a/"
+          }
+        ]
+      }
+    </script>
+
+    <script>
+      // Tear down any service worker we shipped earlier (vite-plugin-pwa).
+      // PodMan runs no PWA in production: we deploy continuously and SW-driven
+      // reloads break the live demo. This unregisters leftover workers and
+      // clears their caches on every load so previously-affected browsers
+      // self-heal — no manual DevTools needed. It does NOT reload the page and
+      // is a no-op once nothing is registered.
+      if ('serviceWorker' in navigator) {
+        navigator.serviceWorker
+          .getRegistrations()
+          .then((regs) => regs.forEach((r) => r.unregister()))
+          .catch(() => {});
+        if (window.caches && caches.keys) {
+          caches
+            .keys()
+            .then((keys) => keys.forEach((k) => caches.delete(k)))
+            .catch(() => {});
+        }
+      }
+    </script>
   </head>
   <body>
     <div id="root"></div>

frontend/package.json

@@ -11,6 +11,8 @@
   },
   "dependencies": {
     "@base-ui/react": "^1.6.0",
+    "@clerk/react": "^6.11.1",
+    "@clerk/ui": "^1.23.0",
     "@fontsource-variable/geist": "^5.2.9",
     "@podman/shared": "workspace:*",
     "@shadcn/react": "^0.1.0",
@@ -28,6 +30,7 @@
     "react-day-picker": "^10.0.1",
     "react-dom": "^19.2.7",
     "react-resizable-panels": "^4.11.2",
+    "react-router-dom": "^7.18.1",
     "recharts": "3.8.0",
     "shadcn": "^4.12.0",
     "sonner": "^2.0.7",

frontend/public/favicon.svg

@@ -0,0 +1,64 @@
+<svg width="512" height="512" viewBox="0 0 512 512" fill="none" xmlns="http://www.w3.org/2000/svg" role="img" aria-labelledby="title desc">
+  <title id="title">PodMan Logo Mark</title>
+  <desc id="desc">A minimal rounded robot head with glowing eyes and a blue-violet antenna orb, optimized for white backgrounds.</desc>
+  <defs>
+    <filter id="softShadow" x="44" y="90" width="424" height="360" filterUnits="userSpaceOnUse" color-interpolation-filters="sRGB">
+      <feDropShadow dx="0" dy="14" stdDeviation="20" flood-color="#94A3B8" flood-opacity="0.22"/>
+      <feDropShadow dx="0" dy="4" stdDeviation="8" flood-color="#C7D2FE" flood-opacity="0.20"/>
+    </filter>
+    <filter id="eyeGlow" x="138" y="234" width="236" height="96" filterUnits="userSpaceOnUse" color-interpolation-filters="sRGB">
+      <feGaussianBlur stdDeviation="6" result="blur"/>
+      <feColorMatrix in="blur" type="matrix" values="0 0 0 0 0.27  0 0 0 0 0.42  0 0 0 0 1  0 0 0 0.78 0" result="glow"/>
+      <feMerge>
+        <feMergeNode in="glow"/>
+        <feMergeNode in="SourceGraphic"/>
+      </feMerge>
+    </filter>
+    <linearGradient id="shell" x1="122" y1="144" x2="390" y2="420" gradientUnits="userSpaceOnUse">
+      <stop offset="0" stop-color="#FFFFFF"/>
+      <stop offset="0.56" stop-color="#F7FAFF"/>
+      <stop offset="1" stop-color="#EDF3FF"/>
+    </linearGradient>
+    <linearGradient id="face" x1="154" y1="220" x2="358" y2="334" gradientUnits="userSpaceOnUse">
+      <stop offset="0" stop-color="#050A1F"/>
+      <stop offset="0.48" stop-color="#081038"/>
+      <stop offset="1" stop-color="#10237A"/>
+    </linearGradient>
+    <linearGradient id="orb" x1="218" y1="38" x2="292" y2="113" gradientUnits="userSpaceOnUse">
+      <stop stop-color="#65D5FF"/>
+      <stop offset="0.46" stop-color="#6A65FF"/>
+      <stop offset="1" stop-color="#9A5CFF"/>
+    </linearGradient>
+    <radialGradient id="eye" cx="0" cy="0" r="1" gradientUnits="userSpaceOnUse" gradientTransform="translate(256 280) rotate(90) scale(18)">
+      <stop offset="0" stop-color="#FFFFFF"/>
+      <stop offset="0.55" stop-color="#F6FBFF"/>
+      <stop offset="1" stop-color="#C8DDFF"/>
+    </radialGradient>
+    <linearGradient id="antenna" x1="256" y1="86" x2="256" y2="158" gradientUnits="userSpaceOnUse">
+      <stop stop-color="#4F63FF"/>
+      <stop offset="1" stop-color="#1E3A8A"/>
+    </linearGradient>
+  </defs>
+
+  <!-- transparent background; tuned to read clearly on white surfaces -->
+
+  <!-- Antenna -->
+  <rect x="250" y="87" width="12" height="82" rx="6" fill="url(#antenna)"/>
+  <circle cx="256" cy="70" r="31" fill="url(#orb)"/>
+  <circle cx="244" cy="56" r="9" fill="white" opacity="0.38"/>
+
+  <!-- Head shell -->
+  <g filter="url(#softShadow)">
+    <rect x="96" y="146" width="320" height="260" rx="92" fill="url(#shell)" stroke="#DDE6F3" stroke-width="2"/>
+    <rect x="104" y="154" width="304" height="244" rx="84" stroke="white" stroke-opacity="0.84" stroke-width="12"/>
+  </g>
+
+  <!-- Face visor -->
+  <g filter="url(#eyeGlow)">
+    <rect x="146" y="226" width="220" height="104" rx="46" fill="url(#face)"/>
+    <circle cx="202" cy="278" r="18" fill="url(#eye)"/>
+    <circle cx="310" cy="278" r="18" fill="url(#eye)"/>
+    <circle cx="202" cy="278" r="8" fill="white" opacity="0.96"/>
+    <circle cx="310" cy="278" r="8" fill="white" opacity="0.96"/>
+  </g>
+</svg>

frontend/public/og.svg

@@ -0,0 +1,16 @@
+<svg width="1200" height="630" viewBox="0 0 1200 630" xmlns="http://www.w3.org/2000/svg">
+  <rect width="1200" height="630" fill="#0b0f17" />
+  <g fill="none" stroke="#34d399" opacity="0.12">
+    <circle cx="1050" cy="140" r="70" stroke-width="6" />
+    <circle cx="1050" cy="140" r="140" stroke-width="5" />
+    <circle cx="1050" cy="140" r="215" stroke-width="4" />
+  </g>
+  <rect x="90" y="150" width="104" height="104" rx="24" fill="#0f1629" stroke="#1f2a3a" stroke-width="2" />
+  <circle cx="176" cy="170" r="8.5" fill="#34d399" />
+  <text x="142" y="228" text-anchor="middle" font-family="Helvetica, Arial, sans-serif" font-weight="bold" font-size="66" fill="#34d399">P</text>
+  <text x="222" y="232" font-family="Helvetica, Arial, sans-serif" font-weight="bold" font-size="68" fill="#e7eaf0">PodMan</text>
+  <text x="92" y="356" font-family="Helvetica, Arial, sans-serif" font-weight="bold" font-size="46" fill="#e7eaf0">The teammate that sees what git can&#8217;t.</text>
+  <text x="92" y="416" font-family="Helvetica, Arial, sans-serif" font-size="34" fill="#9aa4b2">Catches merge collisions before anyone pushes.</text>
+  <rect x="92" y="500" width="13" height="13" rx="3" fill="#34d399" />
+  <text x="118" y="512" font-family="Helvetica, Arial, sans-serif" font-weight="bold" font-size="30" fill="#34d399">podman.live</text>
+</svg>

frontend/public/podman-logo.svg

@@ -0,0 +1,64 @@
+<svg width="512" height="512" viewBox="0 0 512 512" fill="none" xmlns="http://www.w3.org/2000/svg" role="img" aria-labelledby="title desc">
+  <title id="title">PodMan Logo Mark</title>
+  <desc id="desc">A minimal rounded robot head with glowing eyes and a blue-violet antenna orb, optimized for white backgrounds.</desc>
+  <defs>
+    <filter id="softShadow" x="44" y="90" width="424" height="360" filterUnits="userSpaceOnUse" color-interpolation-filters="sRGB">
+      <feDropShadow dx="0" dy="14" stdDeviation="20" flood-color="#94A3B8" flood-opacity="0.22"/>
+      <feDropShadow dx="0" dy="4" stdDeviation="8" flood-color="#C7D2FE" flood-opacity="0.20"/>
+    </filter>
+    <filter id="eyeGlow" x="138" y="234" width="236" height="96" filterUnits="userSpaceOnUse" color-interpolation-filters="sRGB">
+      <feGaussianBlur stdDeviation="6" result="blur"/>
+      <feColorMatrix in="blur" type="matrix" values="0 0 0 0 0.27  0 0 0 0 0.42  0 0 0 0 1  0 0 0 0.78 0" result="glow"/>
+      <feMerge>
+        <feMergeNode in="glow"/>
+        <feMergeNode in="SourceGraphic"/>
+      </feMerge>
+    </filter>
+    <linearGradient id="shell" x1="122" y1="144" x2="390" y2="420" gradientUnits="userSpaceOnUse">
+      <stop offset="0" stop-color="#FFFFFF"/>
+      <stop offset="0.56" stop-color="#F7FAFF"/>
+      <stop offset="1" stop-color="#EDF3FF"/>
+    </linearGradient>
+    <linearGradient id="face" x1="154" y1="220" x2="358" y2="334" gradientUnits="userSpaceOnUse">
+      <stop offset="0" stop-color="#050A1F"/>
+      <stop offset="0.48" stop-color="#081038"/>
+      <stop offset="1" stop-color="#10237A"/>
+    </linearGradient>
+    <linearGradient id="orb" x1="218" y1="38" x2="292" y2="113" gradientUnits="userSpaceOnUse">
+      <stop stop-color="#65D5FF"/>
+      <stop offset="0.46" stop-color="#6A65FF"/>
+      <stop offset="1" stop-color="#9A5CFF"/>
+    </linearGradient>
+    <radialGradient id="eye" cx="0" cy="0" r="1" gradientUnits="userSpaceOnUse" gradientTransform="translate(256 280) rotate(90) scale(18)">
+      <stop offset="0" stop-color="#FFFFFF"/>
+      <stop offset="0.55" stop-color="#F6FBFF"/>
+      <stop offset="1" stop-color="#C8DDFF"/>
+    </radialGradient>
+    <linearGradient id="antenna" x1="256" y1="86" x2="256" y2="158" gradientUnits="userSpaceOnUse">
+      <stop stop-color="#4F63FF"/>
+      <stop offset="1" stop-color="#1E3A8A"/>
+    </linearGradient>
+  </defs>
+
+  <!-- transparent background; tuned to read clearly on white surfaces -->
+
+  <!-- Antenna -->
+  <rect x="250" y="87" width="12" height="82" rx="6" fill="url(#antenna)"/>
+  <circle cx="256" cy="70" r="31" fill="url(#orb)"/>
+  <circle cx="244" cy="56" r="9" fill="white" opacity="0.38"/>
+
+  <!-- Head shell -->
+  <g filter="url(#softShadow)">
+    <rect x="96" y="146" width="320" height="260" rx="92" fill="url(#shell)" stroke="#DDE6F3" stroke-width="2"/>
+    <rect x="104" y="154" width="304" height="244" rx="84" stroke="white" stroke-opacity="0.84" stroke-width="12"/>
+  </g>
+
+  <!-- Face visor -->
+  <g filter="url(#eyeGlow)">
+    <rect x="146" y="226" width="220" height="104" rx="46" fill="url(#face)"/>
+    <circle cx="202" cy="278" r="18" fill="url(#eye)"/>
+    <circle cx="310" cy="278" r="18" fill="url(#eye)"/>
+    <circle cx="202" cy="278" r="8" fill="white" opacity="0.96"/>
+    <circle cx="310" cy="278" r="8" fill="white" opacity="0.96"/>
+  </g>
+</svg>

frontend/src/App.tsx

@@ -1,16 +1,15 @@
 import { useEffect, useState } from 'react';
-import type { Room } from 'livekit-client';
 import {
-  AlertCircleIcon,
-  BrainCircuitIcon,
-  CircleDotIcon,
-  RadioTowerIcon,
-  RefreshCwIcon,
-  SparklesIcon,
-  UsersIcon,
-  WifiIcon,
-  ShieldCheckIcon,
-} from 'lucide-react';
+  Show,
+  SignUp,
+  SignInButton,
+  SignUpButton,
+  UserButton,
+  useAuth,
+  useUser,
+} from '@clerk/react';
+import type { Room } from 'livekit-client';
+import { AlertCircleIcon, RefreshCwIcon, SparklesIcon } from 'lucide-react';
 import type { Pod, PodInput } from '@podman/shared';
 import { joinPod } from './lib/pod.js';
 import * as api from './lib/api.js';
@@ -19,7 +18,6 @@ import { CreatePodForm } from './components/CreatePodForm.js';
 import { PodView } from './components/PodView.js';
 import { GraphView } from './components/GraphView.js';
 import { Alert, AlertDescription, AlertTitle } from '@/components/ui/alert';
-import { Badge } from '@/components/ui/badge';
 import { Button } from '@/components/ui/button';
 import {
   Card,
@@ -40,15 +38,39 @@ import {
 import { Skeleton } from '@/components/ui/skeleton';
 
 const SESSION_KEY = 'podman.session';
-const fmt = new Intl.NumberFormat('en', { notation: 'compact' });
+
+function pathPodId(): string | null {
+  const [segment] = window.location.pathname.split('/').filter(Boolean);
+  return segment ? decodeURIComponent(segment) : null;
+}
+
+function setPodPath(podId: string, replace = false): void {
+  const next = `/${encodeURIComponent(podId)}`;
+  if (window.location.pathname === next) return;
+  window.history[replace ? 'replaceState' : 'pushState']({}, '', next);
+}
+
+function setHomePath(): void {
+  if (window.location.pathname === '/') return;
+  window.history.pushState({}, '', '/');
+}
+
+function replacePath(path: string): void {
+  window.history.replaceState({}, '', path || '/');
+}
+
+function firstNameFrom(value: string | null | undefined): string {
+  return value?.trim().split(/\s+/).filter(Boolean)[0] ?? '';
+}
 
 export default function App() {
+  const { getToken, isLoaded, isSignedIn } = useAuth();
+  const { user } = useUser();
   const [pods, setPods] = useState<Pod[]>([]);
   const [loading, setLoading] = useState(true);
   const [pending, setPending] = useState<Set<string>>(new Set());
   const [error, setError] = useState<string | null>(null);
   const [presence, setPresence] = useState<Record<string, string[]>>({});
-  const [memory, setMemory] = useState<api.MemoryStats | null>(null);
   const [joinedPodId, setJoinedPodId] = useState<string | null>(null);
   const [member, setMember] = useState('');
   const [devMode, setDevMode] = useState(false);
@@ -57,18 +79,31 @@ export default function App() {
   const [graphPodId, setGraphPodId] = useState<string | null>(null);
 
   const joinedPod = joinedPodId ? (pods.find((p) => p.id === joinedPodId) ?? null) : null;
+  const userEmail = user?.primaryEmailAddress?.emailAddress;
+  const defaultMemberName =
+    user?.firstName?.trim() ||
+    firstNameFrom(user?.fullName) ||
+    firstNameFrom(userEmail?.split('@')[0]);
+  const currentUserProfile = {
+    displayName: defaultMemberName,
+    email: userEmail,
+    imageUrl: user?.imageUrl,
+  };
+
+  useEffect(() => {
+    api.setAuthTokenGetter(isSignedIn ? getToken : null);
+    return () => api.setAuthTokenGetter(null);
+  }, [getToken, isSignedIn]);
 
   async function refresh() {
     setLoading(true);
     try {
-      const [nextPods, nextPresence, nextMemory] = await Promise.all([
+      const [nextPods, nextPresence] = await Promise.all([
         api.listPods(),
         api.getPresence().catch(() => presence),
-        api.getMemoryStats().catch(() => memory),
       ]);
       setPods(nextPods);
       setPresence(nextPresence);
-      setMemory(nextMemory);
       setError(null);
     } catch (e) {
       setError((e as Error).message);
@@ -85,31 +120,44 @@ export default function App() {
       return n;
     });
 
-  async function connectToPod(podId: string, who: string) {
-    const result = await joinPod(podId, who, who);
-    setRoom(result.room);
-    setDevMode(result.mode === 'dev');
-    setMember(who);
-    setJoinedPodId(podId);
-    sessionStorage.setItem(SESSION_KEY, JSON.stringify({ podId, member: who }));
+  async function connectToPod(podId: string, who: string, replaceRoute = false) {
+    const previousPath = window.location.pathname;
+    setPodPath(podId, replaceRoute);
+    try {
+      const result = await joinPod(
+        podId,
+        who,
+        who,
+        isSignedIn ? getToken : undefined,
+        currentUserProfile,
+      );
+      setRoom(result.room);
+      setDevMode(result.mode === 'dev');
+      setMember(who);
+      setJoinedPodId(podId);
+      sessionStorage.setItem(SESSION_KEY, JSON.stringify({ podId, member: who }));
+    } catch (e) {
+      replacePath(previousPath);
+      throw e;
+    }
   }
 
   useEffect(() => {
+    if (!isSignedIn) {
+      setLoading(false);
+      return;
+    }
     void refresh();
-  }, []);
+  }, [isSignedIn]);
 
   useEffect(() => {
-    if (joinedPodId) return;
+    if (!isSignedIn || joinedPodId) return;
     let alive = true;
     const tick = async () => {
       try {
-        const [p, m] = await Promise.all([
-          api.getPresence(),
-          api.getMemoryStats().catch(() => memory),
-        ]);
+        const p = await api.getPresence();
         if (alive) {
           setPresence(p);
-          setMemory(m);
         }
       } catch {
         /* presence is best-effort */
@@ -121,11 +169,15 @@ export default function App() {
       alive = false;
       window.clearInterval(id);
     };
-  }, [joinedPodId]);
+  }, [isSignedIn, joinedPodId]);
 
   useEffect(() => {
+    if (!isSignedIn) return;
+    const routedPodId = pathPodId();
     const raw = sessionStorage.getItem(SESSION_KEY);
-    if (!raw) return;
+    if (!raw) {
+      return;
+    }
     let saved: { podId: string; member: string };
     try {
       saved = JSON.parse(raw);
@@ -133,17 +185,43 @@ export default function App() {
       sessionStorage.removeItem(SESSION_KEY);
       return;
     }
+    const podId = routedPodId ?? saved.podId;
     setRestoring(true);
     void (async () => {
       try {
-        await connectToPod(saved.podId, saved.member);
+        await connectToPod(podId, saved.member, !!routedPodId);
       } catch {
         sessionStorage.removeItem(SESSION_KEY);
       } finally {
         setRestoring(false);
       }
     })();
-  }, []);
+  }, [isSignedIn]);
+
+  useEffect(() => {
+    const onPopState = () => {
+      if (!isSignedIn) return;
+      const routedPodId = pathPodId();
+      if (!routedPodId) {
+        room?.disconnect();
+        setRoom(null);
+        setJoinedPodId(null);
+        return;
+      }
+      const raw = sessionStorage.getItem(SESSION_KEY);
+      if (!raw) return;
+      try {
+        const saved = JSON.parse(raw) as { member: string };
+        if (saved.member && routedPodId !== joinedPodId) {
+          void connectToPod(routedPodId, saved.member, true);
+        }
+      } catch {
+        sessionStorage.removeItem(SESSION_KEY);
+      }
+    };
+    window.addEventListener('popstate', onPopState);
+    return () => window.removeEventListener('popstate', onPopState);
+  }, [isSignedIn, joinedPodId, room]);
 
   async function run(key: string, fn: () => Promise<void>) {
     startPending(key);
@@ -163,7 +241,7 @@ export default function App() {
     startPending('new');
     setError(null);
     try {
-      const created = await api.createPod(input);
+      const created = await api.createPod(input, currentUserProfile);
       setPods((cur) => [...cur, created]);
     } catch (e) {
       setError((e as Error).message);
@@ -179,9 +257,10 @@ export default function App() {
     run(id, async () => {
       await api.deletePod(id);
       setPods((cur) => cur.filter((x) => x.id !== id));
+      if (pathPodId() === id) setHomePath();
     });
   const handleAddMember = (id: string, name: string) =>
-    run(id, async () => upsert(await api.addMember(id, name)));
+    run(id, async () => upsert(await api.addMember(id, name, currentUserProfile)));
   const handleRemoveMember = (id: string, name: string) =>
     run(id, async () => upsert(await api.removeMember(id, name)));
 
@@ -197,12 +276,15 @@ export default function App() {
     }
   }
 
-  async function handleAddAndJoin(pod: Pod, name: string) {
+  async function handleAddAndJoin(pod: Pod) {
     startPending(pod.id);
     setError(null);
     try {
-      upsert(await api.addMember(pod.id, name));
-      await connectToPod(pod.id, name);
+      if (!defaultMemberName) {
+        throw new Error('Sign in with Clerk before joining a pod.');
+      }
+      upsert(await api.addMember(pod.id, defaultMemberName, currentUserProfile));
+      await connectToPod(pod.id, defaultMemberName);
     } catch (e) {
       setError((e as Error).message);
     } finally {
@@ -215,22 +297,34 @@ export default function App() {
     setRoom(null);
     setJoinedPodId(null);
     sessionStorage.removeItem(SESSION_KEY);
+    setHomePath();
     void refresh();
   }
 
   const showReconnecting = restoring || (joinedPodId !== null && joinedPod === null);
-  const liveNames = Array.from(new Set(Object.values(presence).flat()));
-  const liveTotal = liveNames.length;
-  const totalMembers = pods.reduce((sum, p) => sum + p.members.length, 0);
-  const activeRooms = Object.values(presence).filter((names) => names.length > 0).length;
-  const podManOnline = liveNames.some((name) => name.toLowerCase() === 'podman');
-  const latestActivity = memory
-    ? memory.observations + memory.collisions + memory.interventions + memory.outcomes
-    : 0;
+
+  if (!isLoaded) {
+    return (
+      <div className="grid min-h-screen place-items-center bg-background text-foreground">
+        <Skeleton className="h-12 w-64" />
+      </div>
+    );
+  }
+
+  if (!isSignedIn) {
+    return <AuthGate />;
+  }
 
   if (joinedPod) {
     return (
-      <PodView team={joinedPod} me={member} room={room} devMode={devMode} onLeave={handleLeave} />
+      <PodView
+        team={joinedPod}
+        me={member}
+        room={room}
+        devMode={devMode}
+        currentUserProfile={currentUserProfile}
+        onLeave={handleLeave}
+      />
     );
   }
 
@@ -241,50 +335,38 @@ export default function App() {
   return (
     <div className="min-h-screen bg-background text-foreground">
       <div className="mx-auto flex min-h-screen w-full max-w-[1440px] flex-col gap-6 px-4 py-4 sm:px-6 lg:px-8">
-        <header className="sticky top-0 z-10 -mx-4 flex flex-col gap-5 border-b bg-background/86 px-4 pb-5 pt-2 backdrop-blur-xl sm:-mx-6 sm:px-6 lg:-mx-8 lg:px-8">
-          <div className="flex flex-col gap-4 lg:flex-row lg:items-end lg:justify-between">
+        <header className="sticky top-0 z-10 -mx-4 border-b bg-background/86 px-4 pb-4 pt-2 backdrop-blur-xl sm:-mx-6 sm:px-6 lg:-mx-8 lg:px-8">
+          <div className="flex flex-col gap-4 sm:flex-row sm:items-center sm:justify-between">
             <div className="flex min-w-0 items-center gap-3">
-              <div className="grid size-10 place-items-center rounded-lg bg-primary text-sm font-semibold text-primary-foreground shadow-sm">
-                PM
-              </div>
+              <img
+                src="/podman-logo.svg"
+                alt=""
+                className="size-11 shrink-0 rounded-lg"
+                aria-hidden="true"
+              />
               <div className="min-w-0">
-                <div className="flex flex-wrap items-center gap-2">
-                  <h1 className="text-[1.95rem] font-semibold leading-none tracking-tight">
-                    PodMan
-                  </h1>
-                  <Badge variant={podManOnline ? 'default' : 'secondary'}>
-                    <CircleDotIcon data-icon="inline-start" />
-                    {podManOnline ? 'online' : 'standby'}
-                  </Badge>
-                </div>
-                <p className="text-sm text-muted-foreground">
-                  Live engineering rooms, team memory, and intervention routing.
-                </p>
+                <h1 className="text-[1.95rem] font-semibold leading-none tracking-tight">PodMan</h1>
               </div>
             </div>
 
             <div className="flex items-center gap-2">
-              <Badge variant="outline" className="h-8 rounded-lg px-3">
-                <ShieldCheckIcon data-icon="inline-start" />
-                Privacy-limited
-              </Badge>
-              <Button variant="outline" onClick={() => setGraphPodId(pods[0]?.id ?? 'demo-pod')}>
-                <BrainCircuitIcon data-icon="inline-start" />
-                Team memory
-              </Button>
+              <Show when="signed-out">
+                <SignInButton mode="modal">
+                  <Button variant="outline">Sign in</Button>
+                </SignInButton>
+                <SignUpButton mode="modal">
+                  <Button>Sign up</Button>
+                </SignUpButton>
+              </Show>
+              <Show when="signed-in">
+                <UserButton />
+              </Show>
               <Button variant="outline" onClick={() => void refresh()} disabled={loading}>
                 <RefreshCwIcon data-icon="inline-start" />
                 Refresh
               </Button>
             </div>
           </div>
-
-          <div className="grid gap-2 sm:grid-cols-2 lg:grid-cols-4">
-            <StatPill icon={WifiIcon} label="Live" value={fmt.format(liveTotal)} />
-            <StatPill icon={RadioTowerIcon} label="Rooms" value={fmt.format(activeRooms)} />
-            <StatPill icon={UsersIcon} label="Roster" value={fmt.format(totalMembers)} />
-            <StatPill icon={BrainCircuitIcon} label="Memory" value={fmt.format(latestActivity)} />
-          </div>
         </header>
 
         {error && (
@@ -318,9 +400,6 @@ export default function App() {
                   <p className="text-xs font-medium uppercase text-muted-foreground">Workspaces</p>
                   <h2 className="text-xl font-semibold tracking-tight">Active pods</h2>
                 </div>
-                <p className="max-w-xl text-sm leading-6 text-muted-foreground">
-                  Join the room that matches your current workstream.
-                </p>
               </div>
 
               {loading ? (
@@ -336,12 +415,14 @@ export default function App() {
                       pod={pod}
                       busy={pending.has(pod.id)}
                       presence={presence[pod.id] ?? []}
+                      currentUserProfile={currentUserProfile}
                       onJoin={handleJoin}
                       onAddAndJoin={handleAddAndJoin}
                       onAddMember={handleAddMember}
                       onRemoveMember={handleRemoveMember}
                       onUpdate={handleUpdate}
                       onDelete={handleDelete}
+                      onOpenGraph={setGraphPodId}
                     />
                   ))}
                 </div>
@@ -355,29 +436,23 @@ export default function App() {
                     <EmptyDescription>Create the first room for this team.</EmptyDescription>
                   </EmptyHeader>
                   <EmptyContent>
-                    <CreatePodForm busy={pending.has('new')} onCreate={handleCreate} compact />
+                    <CreatePodForm
+                      busy={pending.has('new')}
+                      defaultMemberName={defaultMemberName}
+                      onCreate={handleCreate}
+                      compact
+                    />
                   </EmptyContent>
                 </Empty>
               )}
             </section>
 
             <aside className="flex flex-col gap-4">
-              <CreatePodForm busy={pending.has('new')} onCreate={handleCreate} />
-              <Card>
-                <CardHeader>
-                  <CardTitle>Operating brief</CardTitle>
-                  <CardDescription>Current coordination signals.</CardDescription>
-                </CardHeader>
-                <CardContent className="space-y-3">
-                  <BriefLine label="Notification default" value="Card" />
-                  <BriefLine label="Escalation" value="Hermes voice only when urgent" />
-                  <BriefLine label="Memory events" value={fmt.format(latestActivity)} />
-                  <BriefLine
-                    label="Live people"
-                    value={liveNames.length ? liveNames.join(', ') : 'None'}
-                  />
-                </CardContent>
-              </Card>
+              <CreatePodForm
+                busy={pending.has('new')}
+                defaultMemberName={defaultMemberName}
+                onCreate={handleCreate}
+              />
             </aside>
           </main>
         )}
@@ -386,33 +461,42 @@ export default function App() {
   );
 }
 
-function StatPill({
-  icon: Icon,
-  label,
-  value,
-}: {
-  icon: React.ComponentType<{ className?: string }>;
-  label: string;
-  value: string;
-}) {
+function AuthGate() {
   return (
-    <div className="flex min-h-16 items-center gap-3 rounded-lg border bg-card/90 px-3 py-2 shadow-sm">
-      <div className="grid size-8 place-items-center rounded-md bg-muted">
-        <Icon className="size-4 text-muted-foreground" />
-      </div>
-      <div className="min-w-0">
-        <p className="text-xs font-medium uppercase text-muted-foreground">{label}</p>
-        <p className="text-base font-medium">{value}</p>
-      </div>
-    </div>
-  );
-}
+    <div className="min-h-screen bg-background text-foreground">
+      <div className="mx-auto flex min-h-screen w-full max-w-[1120px] flex-col px-4 py-4 sm:px-6 lg:px-8">
+        <header className="flex items-center justify-between border-b pb-4 pt-2">
+          <div className="flex min-w-0 items-center gap-3">
+            <img
+              src="/podman-logo.svg"
+              alt=""
+              className="size-11 shrink-0 rounded-lg"
+              aria-hidden="true"
+            />
+            <h1 className="text-[1.95rem] font-semibold leading-none tracking-tight">PodMan</h1>
+          </div>
+          <SignInButton mode="modal">
+            <Button variant="outline">Sign in</Button>
+          </SignInButton>
+        </header>
 
-function BriefLine({ label, value }: { label: string; value: string }) {
-  return (
-    <div className="flex items-start justify-between gap-4 rounded-md bg-muted/45 px-3 py-2">
-      <span className="text-sm text-muted-foreground">{label}</span>
-      <span className="max-w-44 text-right text-sm font-medium">{value}</span>
+        <main className="grid flex-1 items-center gap-8 py-8 lg:grid-cols-[minmax(0,1fr)_420px]">
+          <section className="max-w-xl">
+            <p className="text-xs font-medium uppercase text-muted-foreground">Team memory</p>
+            <h2 className="mt-2 text-3xl font-semibold tracking-tight">
+              Create your account to enter PodMan
+            </h2>
+            <p className="mt-3 text-base text-muted-foreground">
+              PodMan saves your context across pods so agents can learn from your work in every room
+              you join.
+            </p>
+          </section>
+
+          <div className="flex justify-center lg:justify-end">
+            <SignUp routing="hash" />
+          </div>
+        </main>
+      </div>
     </div>
   );
 }

frontend/src/Landing.tsx

@@ -0,0 +1,307 @@
+import { useCallback } from 'react';
+import {
+  TrophyIcon,
+  ChevronDownIcon,
+  EyeIcon,
+  GitMergeIcon,
+  UsersIcon,
+  BellIcon,
+  RadioIcon,
+  DatabaseIcon,
+  SparklesIcon,
+  PlayIcon,
+  MicIcon,
+} from 'lucide-react';
+
+/**
+ * Public marketing landing page for podman.live.
+ * Rendered at "/" without ClerkProvider — needs no secrets.
+ * The app (private beta) lives at "/app".
+ */
+
+const TEAM = [
+  { name: 'Karti Tripathi', url: 'https://www.linkedin.com/in/kartitripathi/' },
+  { name: 'Ramis Hasanli', url: 'https://www.linkedin.com/in/hasanliramis/' },
+  { name: 'Yahya Alhinai', url: 'https://www.linkedin.com/in/yhinai/' },
+  { name: 'Shakthi Bachala', url: 'https://www.linkedin.com/in/shakthi-bachala-09401510a/' },
+];
+
+export function Landing() {
+  const scrollToStory = useCallback(() => {
+    document.getElementById('story')?.scrollIntoView({ behavior: 'smooth', block: 'start' });
+  }, []);
+
+  return (
+    <div className="min-h-screen scroll-smooth bg-[#0b0f17] text-white/90 antialiased">
+      {/* ambient glows */}
+      <div className="pointer-events-none fixed inset-0 overflow-hidden">
+        <div className="absolute -top-40 left-1/2 h-[38rem] w-[38rem] -translate-x-1/2 rounded-full bg-indigo-600/20 blur-[120px]" />
+        <div className="absolute top-1/3 -right-32 h-[26rem] w-[26rem] rounded-full bg-cyan-500/10 blur-[110px]" />
+      </div>
+
+      {/* top nav */}
+      <header className="relative z-20 mx-auto flex max-w-6xl items-center justify-between px-6 py-5">
+        <a href="#top" className="flex items-center gap-2.5">
+          <img src="/podman-logo.svg" alt="PodMan" className="h-7 w-7" />
+          <span className="text-[15px] font-semibold tracking-tight text-white">PodMan</span>
+        </a>
+        <span className="inline-flex items-center gap-2 rounded-full border border-white/15 bg-white/5 px-4 py-1.5 text-sm font-medium text-white/70">
+          <LiveDot />
+          Beta soon
+        </span>
+      </header>
+
+      {/* hero */}
+      <section id="top" className="relative z-10 mx-auto flex max-w-3xl flex-col items-center px-6 pt-16 pb-24 text-center sm:pt-24">
+        <button
+          onClick={scrollToStory}
+          className="group mb-8 inline-flex items-center gap-2 rounded-full border border-amber-300/30 bg-gradient-to-r from-amber-400/15 to-amber-200/5 px-4 py-1.5 text-sm font-medium text-amber-200 transition-colors hover:border-amber-300/50"
+        >
+          <TrophyIcon className="size-4" />
+          Top 3 — AI Engineer World&apos;s Fair Hackathon 2026
+          <ChevronDownIcon className="size-4 transition-transform group-hover:translate-y-0.5" />
+        </button>
+
+        <h1 className="text-5xl font-semibold leading-[1.05] tracking-tight text-white sm:text-7xl">
+          PodMan
+        </h1>
+        <p className="mt-5 bg-gradient-to-r from-indigo-300 via-sky-300 to-cyan-200 bg-clip-text text-2xl font-medium text-transparent sm:text-3xl">
+          The teammate that sees what git can&apos;t.
+        </p>
+        <p className="mx-auto mt-6 max-w-xl text-base leading-relaxed text-white/60 sm:text-lg">
+          An ambient AI teammate that watches your pod&apos;s screens in realtime — catching merge
+          collisions, duplicated work, and missed handoffs before anyone pushes.
+        </p>
+
+        {/* award chips */}
+        <div className="mt-9 flex flex-wrap items-center justify-center gap-2.5">
+          {[
+            { label: '2nd Overall · 95+ teams', accent: 'text-amber-200 border-amber-300/25 bg-amber-400/10' },
+            { label: 'LiveKit Track — Winner', accent: 'text-sky-200 border-sky-300/25 bg-sky-400/10' },
+            { label: 'DigitalOcean — Best Use', accent: 'text-cyan-200 border-cyan-300/25 bg-cyan-400/10' },
+          ].map((c) => (
+            <span
+              key={c.label}
+              className={`rounded-full border px-3.5 py-1.5 text-[13px] font-medium ${c.accent}`}
+            >
+              {c.label}
+            </span>
+          ))}
+        </div>
+
+        {/* CTAs */}
+        <div className="mt-10 flex flex-col items-center gap-3 sm:flex-row">
+          <button
+            onClick={scrollToStory}
+            className="inline-flex h-11 items-center justify-center gap-2 rounded-full bg-gradient-to-r from-indigo-500 to-cyan-400 px-7 text-sm font-semibold text-[#0b0f17] shadow-lg shadow-indigo-500/20 transition-transform hover:scale-[1.02]"
+          >
+            Read the story <ChevronDownIcon className="size-4" />
+          </button>
+          <BetaPill />
+        </div>
+
+        <button
+          onClick={scrollToStory}
+          aria-label="Scroll to read"
+          className="mt-20 animate-bounce text-white/40 transition-colors hover:text-white/70"
+        >
+          <ChevronDownIcon className="size-7" />
+        </button>
+      </section>
+
+      {/* story */}
+      <Section id="story" eyebrow="How it happened" title="Built on stage, in about 24 hours.">
+        <div className="space-y-5 text-[15px] leading-relaxed text-white/70">
+          <p>
+            PodMan was built at the{' '}
+            <span className="text-white">AI Engineer World&apos;s Fair 2026 Hackathon</span> (June
+            27–28) against 95+ teams. It took{' '}
+            <span className="text-amber-200">2nd place overall</span>, and won both the{' '}
+            <span className="text-sky-200">LiveKit</span> track and{' '}
+            <span className="text-cyan-200">DigitalOcean&apos;s Best Use</span> award.
+          </p>
+          <p>
+            We shipped the live demo in a single sprint — a LiveKit room, Gemini watching the
+            screen-share, and a voice that speaks up the moment two engineers drift toward the same
+            code. There wasn&apos;t time on the clock to give it a proper home.
+          </p>
+          <p className="text-white/90">
+            So this is that home — and we&apos;re actively building PodMan out from the hackathon
+            prototype into something a team can actually run every day.
+          </p>
+        </div>
+      </Section>
+
+      {/* what it does */}
+      <Section id="what" eyebrow="What it does" title="A teammate in the room, not another dashboard.">
+        <div className="grid gap-4 sm:grid-cols-2">
+          <Feature
+            icon={<EyeIcon className="size-5" />}
+            title="Ambient awareness"
+            body="Joins your pod's LiveKit room and samples every screen-share in realtime — no bots to invoke, no commands to remember."
+          />
+          <Feature
+            icon={<GitMergeIcon className="size-5" />}
+            title="Merge-collision radar"
+            body="Recognizes when two people are converging on the same files or feature and warns them before the conflict ever reaches a push."
+          />
+          <Feature
+            icon={<UsersIcon className="size-5" />}
+            title="Duplicated-work detection"
+            body="Notices when effort overlaps across the team and surfaces it early, so two engineers don't quietly build the same thing."
+          />
+          <Feature
+            icon={<BellIcon className="size-5" />}
+            title="Handoff nudges"
+            body="Speaks up about missed handoffs and stalled threads — and learns which nudges actually helped, so it stays useful, not noisy."
+          />
+        </div>
+      </Section>
+
+      {/* how it works */}
+      <Section id="how" eyebrow="Under the hood" title="Realtime vision, memory, and a voice.">
+        <div className="grid gap-4 sm:grid-cols-3">
+          <Stack icon={<RadioIcon className="size-5" />} name="LiveKit" note="Realtime transport for the shared room and voice delivery." />
+          <Stack icon={<SparklesIcon className="size-5" />} name="Gemini" note="Vision + event detection + the live voice that nudges the team." />
+          <Stack icon={<DatabaseIcon className="size-5" />} name="MongoDB" note="Engineer state, ownership map, events, and which nudges landed." />
+        </div>
+        <div className="mt-6 flex flex-wrap gap-2 text-[13px] text-white/50">
+          {['LiveKit', 'Gemini Live', 'MongoDB Atlas', 'Voyage embeddings', 'Modular MAX', 'Hermes ops'].map((t) => (
+            <span key={t} className="rounded-md border border-white/10 bg-white/[0.03] px-2.5 py-1">
+              {t}
+            </span>
+          ))}
+        </div>
+      </Section>
+
+      {/* demo */}
+      <Section id="demo" eyebrow="See it" title="The 60-second demo.">
+        <div className="overflow-hidden rounded-2xl border border-white/10 bg-black/40 shadow-2xl">
+          <div className="relative w-full" style={{ paddingBottom: '56.25%' }}>
+            <iframe
+              className="absolute inset-0 h-full w-full"
+              src="https://www.youtube-nocookie.com/embed/bWJIsIWTgr0"
+              title="PodMan demo"
+              allow="accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture"
+              allowFullScreen
+            />
+          </div>
+        </div>
+        <div className="mt-4 flex items-center gap-2 text-sm text-white/40">
+          <PlayIcon className="size-4" /> Watch the pod get its warning before the collision.
+        </div>
+      </Section>
+
+      {/* built by / team */}
+      <Section id="team" eyebrow="Built by" title="The team behind PodMan.">
+        <div className="flex flex-wrap gap-3">
+          {TEAM.map((p) => (
+            <a
+              key={p.name}
+              href={p.url}
+              target="_blank"
+              rel="noopener noreferrer"
+              className="rounded-full border border-white/10 bg-white/[0.03] px-4 py-2 text-[15px] font-medium text-white/80 transition-colors hover:border-cyan-300/40 hover:text-white"
+            >
+              {p.name}
+            </a>
+          ))}
+        </div>
+      </Section>
+
+      {/* final CTA — beta coming soon */}
+      <section className="relative z-10 mx-auto max-w-3xl px-6 py-24 text-center">
+        <div className="rounded-3xl border border-white/10 bg-gradient-to-b from-white/[0.06] to-transparent px-8 py-14">
+          <MicIcon className="mx-auto size-8 text-cyan-300" />
+          <h2 className="mt-5 text-3xl font-semibold tracking-tight text-white sm:text-4xl">
+            The private beta is coming soon.
+          </h2>
+          <p className="mx-auto mt-4 max-w-md text-[15px] leading-relaxed text-white/60">
+            We&apos;re building PodMan out from the hackathon prototype into something a team runs
+            every day. The private beta opens soon.
+          </p>
+          <div className="mt-8 flex justify-center">
+            <BetaPill className="px-6 py-3 text-[15px]" />
+          </div>
+        </div>
+      </section>
+
+      {/* footer */}
+      <footer className="relative z-10 border-t border-white/10">
+        <div className="mx-auto flex max-w-6xl flex-col items-center justify-between gap-3 px-6 py-8 text-sm text-white/40 sm:flex-row">
+          <div className="flex items-center gap-2">
+            <img src="/podman-logo.svg" alt="" className="h-5 w-5 opacity-70" />
+            <span>PodMan · podman.live</span>
+          </div>
+          <span>Built at AI Engineer World&apos;s Fair 2026 · 2nd Overall</span>
+        </div>
+      </footer>
+    </div>
+  );
+}
+
+function LiveDot() {
+  return (
+    <span className="relative flex size-1.5">
+      <span className="absolute inline-flex h-full w-full animate-ping rounded-full bg-cyan-400/70" />
+      <span className="relative inline-flex size-1.5 rounded-full bg-cyan-400" />
+    </span>
+  );
+}
+
+function BetaPill({ className = '' }: { className?: string }) {
+  return (
+    <span
+      className={`inline-flex items-center gap-2 rounded-full border border-white/15 bg-white/5 px-5 py-2.5 text-sm font-medium text-white/70 ${className}`}
+    >
+      <LiveDot />
+      Private beta — coming soon
+    </span>
+  );
+}
+
+function Section({
+  id,
+  eyebrow,
+  title,
+  children,
+}: {
+  id: string;
+  eyebrow: string;
+  title: string;
+  children: React.ReactNode;
+}) {
+  return (
+    <section id={id} className="relative z-10 border-t border-white/[0.06] py-20">
+      <div className="mx-auto max-w-3xl px-6">
+        <p className="text-sm font-medium tracking-wide text-cyan-300/80 uppercase">{eyebrow}</p>
+        <h2 className="mt-3 text-3xl font-semibold tracking-tight text-white sm:text-4xl">{title}</h2>
+        <div className="mt-8">{children}</div>
+      </div>
+    </section>
+  );
+}
+
+function Feature({ icon, title, body }: { icon: React.ReactNode; title: string; body: string }) {
+  return (
+    <div className="rounded-2xl border border-white/10 bg-white/[0.03] p-6 transition-colors hover:border-white/20">
+      <div className="flex size-10 items-center justify-center rounded-xl bg-gradient-to-br from-indigo-500/20 to-cyan-400/20 text-cyan-200">
+        {icon}
+      </div>
+      <h3 className="mt-4 text-lg font-semibold text-white">{title}</h3>
+      <p className="mt-2 text-[14px] leading-relaxed text-white/60">{body}</p>
+    </div>
+  );
+}
+
+function Stack({ icon, name, note }: { icon: React.ReactNode; name: string; note: string }) {
+  return (
+    <div className="rounded-2xl border border-white/10 bg-white/[0.03] p-6">
+      <div className="flex items-center gap-2.5 text-white">
+        <span className="text-cyan-200">{icon}</span>
+        <span className="text-base font-semibold">{name}</span>
+      </div>
+      <p className="mt-3 text-[14px] leading-relaxed text-white/60">{note}</p>
+    </div>
+  );
+}

frontend/src/components/CreatePodForm.tsx

@@ -17,17 +17,19 @@ import { cn } from '@/lib/utils';
 export function CreatePodForm({
   busy,
   onCreate,
+  defaultMemberName = '',
   compact = false,
 }: {
   busy: boolean;
   onCreate: (input: PodInput) => Promise<void>;
+  defaultMemberName?: string;
   compact?: boolean;
 }) {
   const [open, setOpen] = useState(compact);
   const [name, setName] = useState('');
   const [repo, setRepo] = useState('karti-ai/podman');
   const [description, setDescription] = useState('');
-  const [firstMember, setFirstMember] = useState('');
+  const [firstMember, setFirstMember] = useState(defaultMemberName);
 
   async function submit() {
     if (!name.trim()) return;
@@ -40,7 +42,7 @@ export function CreatePodForm({
       });
       setName('');
       setDescription('');
-      setFirstMember('');
+      setFirstMember(defaultMemberName);
       if (!compact) setOpen(false);
     } catch {
       /* parent owns the visible error */

frontend/src/components/GraphView.tsx

@@ -1,95 +1,36 @@
-import { useEffect, useMemo, useState, type CSSProperties } from 'react';
-import type { PodGraph, PodGraphNode, PodGraphEdge, PodGraphNodeKind } from '@podman/shared';
-import { fetchPodGraph } from '../lib/graph.js';
+import { useEffect, useMemo, useState } from 'react';
+import type { PodGraph } from '@podman/shared';
+import { fetchPodGraph, backendEventsUrl } from '../lib/graph.js';
+import { Button } from '@/components/ui/button';
+import { ToggleGroup, ToggleGroupItem } from '@/components/ui/toggle-group';
+import { GraphCanvas } from './graph/GraphCanvas.js';
+import { MetricsRail } from './graph/MetricsRail.js';
+import { LearningLoop } from './graph/LearningLoop.js';
+import { ActivityStream } from './graph/ActivityStream.js';
+import { SelectedNodePanel } from './graph/SelectedNodePanel.js';
+import { highlightFor, flowNarrative, NODE_LEGEND, EDGE_LEGEND, type Mode } from './graph/encoding.js';
 
-type Mode = 'risk' | 'learn' | 'all';
+const POLL_MS = 5000;
 
-const KIND_COLOR: Record<PodGraphNodeKind, string> = {
-  engineer: '#3B5BFF',
-  file: '#ECE7DA',
-  feature: '#F6C445',
-  collision: '#E2403A',
-  intervention: '#8b6cff',
-};
-
-const EDGE: Record<PodGraphEdge['kind'], { c: string; w: number; dash?: boolean }> = {
-  owns: { c: '#3B5BFF', w: 2.6 },
-  editing: { c: '#ECE7DA', w: 2 },
-  touches: { c: '#5d5d66', w: 1.6 },
-  collides: { c: '#E2403A', w: 3.2 },
-  warns: { c: '#F6C445', w: 3.2 },
-  learned_from: { c: '#8b6cff', w: 2.4, dash: true },
-};
-
-function NodeShape({ node }: { node: PodGraphNode }) {
-  const c = KIND_COLOR[node.kind];
-  const { x, y } = node;
-  switch (node.kind) {
-    case 'engineer':
-      return <rect x={x - 15} y={y - 15} width={30} height={30} fill={c} />;
-    case 'file':
-      return (
-        <rect
-          x={x - 15}
-          y={y - 15}
-          width={30}
-          height={30}
-          fill="none"
-          stroke={c}
-          strokeWidth={2.6}
-        />
-      );
-    case 'feature':
-      return <circle cx={x} cy={y} r={17} fill={c} />;
-    case 'collision':
-      return <polygon points={`${x},${y - 18} ${x + 17},${y + 13} ${x - 17},${y + 13}`} fill={c} />;
-    case 'intervention':
-      return (
-        <polygon points={`${x},${y - 18} ${x + 18},${y} ${x},${y + 18} ${x - 18},${y}`} fill={c} />
-      );
-    default:
-      return null;
+// Note: pm-enter must NOT use animation-fill-mode (both/forwards) — a held final
+// keyframe (opacity:1) would override the .pm-dim cascade and defeat dimming.
+const GRAPH_CSS = `
+  .pm-node{cursor:grab;transition:opacity .25s ease}
+  .pm-node:active{cursor:grabbing}
+  .pm-edge{transition:opacity .25s ease}
+  .pm-lbl{fill:var(--foreground);font-size:11px;font-weight:500;pointer-events:none;
+    paint-order:stroke;stroke:var(--card);stroke-width:3.5px;stroke-linejoin:round}
+  .pm-dim{opacity:.14}
+  .pm-enter{animation:pm-fade .45s ease}
+  .pm-dash{animation:pm-flow 1s linear infinite}
+  .pm-pulse{animation:pm-pulse 1.7s ease-in-out infinite}
+  @keyframes pm-fade{from{opacity:0}to{opacity:1}}
+  @keyframes pm-flow{to{stroke-dashoffset:-26}}
+  @keyframes pm-pulse{0%,100%{opacity:.45}50%{opacity:1}}
+  @media (prefers-reduced-motion:reduce){
+    .pm-enter,.pm-dash,.pm-pulse{animation:none}
   }
-}
-
-interface Highlight {
-  nodes: Set<string>;
-  edges: Set<string>;
-}
-
-function highlightFor(graph: PodGraph, mode: Mode, selected: string | null): Highlight | null {
-  if (selected) {
-    const es = graph.edges.filter((e) => e.source === selected || e.target === selected);
-    return {
-      nodes: new Set([selected, ...es.flatMap((e) => [e.source, e.target])]),
-      edges: new Set(es.map((e) => e.id)),
-    };
-  }
-  if (mode === 'all') return null;
-  const kinds: PodGraphEdge['kind'][] =
-    mode === 'risk' ? ['collides', 'warns', 'learned_from'] : ['learned_from', 'warns'];
-  const collisions = new Set(graph.nodes.filter((n) => n.kind === 'collision').map((n) => n.id));
-  const es = graph.edges.filter(
-    (e) =>
-      kinds.includes(e.kind) ||
-      (mode === 'risk' && (collisions.has(e.target) || collisions.has(e.source))),
-  );
-  return {
-    nodes: new Set(es.flatMap((e) => [e.source, e.target])),
-    edges: new Set(es.map((e) => e.id)),
-  };
-}
-
-const LEGEND: Array<{ label: string; swatch: CSSProperties }> = [
-  { label: 'engineer', swatch: { background: '#3B5BFF' } },
-  { label: 'file', swatch: { border: '2px solid #ECE7DA' } },
-  { label: 'feature', swatch: { background: '#F6C445', borderRadius: '50%' } },
-  {
-    label: 'collision',
-    swatch: { background: '#E2403A', clipPath: 'polygon(50% 0,100% 100%,0 100%)' },
-  },
-  { label: 'intervention', swatch: { background: '#8b6cff', transform: 'rotate(45deg)' } },
-];
+`;
 
 export function GraphView({ podId, onClose }: { podId: string; onClose: () => void }) {
   const [graph, setGraph] = useState<PodGraph | null>(null);
@@ -99,29 +40,67 @@ export function GraphView({ podId, onClose }: { podId: string; onClose: () => vo
 
   useEffect(() => {
     let alive = true;
+    let nudge: number | null = null;
     setGraph(null);
     setError(null);
-    fetchPodGraph(podId)
-      .then((g) => alive && setGraph(g))
-      .catch((e: unknown) => alive && setError(e instanceof Error ? e.message : String(e)));
+    setSelected(null);
+
+    const load = () =>
+      fetchPodGraph(podId)
+        .then((g) => {
+          if (alive) {
+            setGraph(g);
+            setError(null);
+          }
+        })
+        .catch((e: unknown) => {
+          if (alive) setError(e instanceof Error ? e.message : String(e));
+        });
+
+    void load();
+    const poll = window.setInterval(() => void load(), POLL_MS);
+
+    // Best-effort realtime nudge: refetch (debounced) when the agent broadcasts.
+    let ws: WebSocket | null = null;
+    try {
+      ws = new WebSocket(backendEventsUrl());
+      ws.onmessage = () => {
+        if (nudge != null) return;
+        nudge = window.setTimeout(() => {
+          nudge = null;
+          void load();
+        }, 800);
+      };
+    } catch {
+      /* event bus is optional */
+    }
+
     return () => {
       alive = false;
+      window.clearInterval(poll);
+      if (nudge != null) window.clearTimeout(nudge);
+      ws?.close();
     };
   }, [podId]);
 
-  const hi = useMemo(
-    () => (graph ? highlightFor(graph, mode, selected) : null),
-    [graph, mode, selected],
-  );
   const nodeById = useMemo(() => new Map((graph?.nodes ?? []).map((n) => [n.id, n])), [graph]);
-  const sel = selected ? nodeById.get(selected) : undefined;
-  const relCount = selected
-    ? (graph?.edges ?? []).filter((e) => e.source === selected || e.target === selected).length
-    : 0;
+  // A selected node can vanish across a poll/WS refresh. Ignore a stale id so the
+  // graph doesn't dim entirely (highlightFor would otherwise light only a dead id).
+  const liveSelected = selected && nodeById.has(selected) ? selected : null;
+  useEffect(() => {
+    if (selected && graph && !nodeById.has(selected)) setSelected(null);
+  }, [graph, nodeById, selected]);
 
-  const dimNode = (id: string) => (hi ? !hi.nodes.has(id) : false);
-  const dimEdge = (id: string) => (hi ? !hi.edges.has(id) : false);
-  const hotEdge = (id: string) => (hi ? hi.edges.has(id) : false);
+  const highlight = useMemo(
+    () => (graph ? highlightFor(graph, mode, liveSelected) : null),
+    [graph, mode, liveSelected],
+  );
+  const sel = liveSelected ? nodeById.get(liveSelected) : undefined;
+  const relCount = liveSelected
+    ? (graph?.edges ?? []).filter((e) => e.source === liveSelected || e.target === liveSelected)
+        .length
+    : 0;
+  const flow = graph && liveSelected ? flowNarrative(graph, liveSelected) : '';
 
   function pick(next: Mode) {
     setMode(next);
@@ -129,200 +108,107 @@ export function GraphView({ podId, onClose }: { podId: string; onClose: () => vo
   }
 
   return (
-    <div className="pm-graph">
-      <style>{`
-        .pm-graph{--bg:#0c0c0e;--panel:#141417;--line:#2a2a31;--paper:#ECE7DA;--mut:#8d897e;--red:#E2403A;--yel:#F6C445;--vio:#8b6cff;
-          font-family:'Space Grotesk',system-ui,sans-serif;background:var(--bg);color:var(--paper);border:1px solid var(--line);border-radius:14px;overflow:hidden}
-        .pm-graph *{box-sizing:border-box}
-        .pm-hd{display:flex;align-items:center;justify-content:space-between;padding:16px 20px;border-bottom:3px solid var(--paper)}
-        .pm-ttl{font-weight:800;font-size:18px;letter-spacing:.14em;text-transform:uppercase;font-family:Archivo,'Space Grotesk',sans-serif}
-        .pm-sub{font-size:10px;letter-spacing:.3em;color:var(--mut);text-transform:uppercase;margin-top:5px}
-        .pm-x{background:transparent;border:1px solid var(--line);color:var(--paper);font-size:11px;letter-spacing:.1em;text-transform:uppercase;padding:7px 12px;border-radius:2px;cursor:pointer}
-        .pm-x:hover{border-color:var(--paper)}
-        .pm-bar{display:flex;gap:8px;padding:12px 16px;border-bottom:1px solid var(--line);flex-wrap:wrap}
-        .pm-btn{font-size:11px;letter-spacing:.12em;text-transform:uppercase;color:var(--paper);background:transparent;border:1px solid var(--line);padding:7px 12px;cursor:pointer;border-radius:2px}
-        .pm-btn:hover{border-color:var(--paper)}
-        .pm-btn.on{background:var(--red);border-color:var(--red);color:#fff}
-        .pm-grid{display:grid;grid-template-columns:180px 1fr 240px}
-        .pm-col{padding:14px}
-        .pm-railR{border-left:1px solid var(--line);background:#17171b}
-        .pm-st{font-size:11px;letter-spacing:.24em;text-transform:uppercase;color:var(--mut);margin:2px 0 12px}
-        .pm-kpi{border:1px solid var(--line);border-left:5px solid var(--vio);padding:10px 11px;margin-bottom:10px}
-        .pm-num{font-weight:800;font-size:26px;line-height:.9;font-variant-numeric:tabular-nums;font-family:Archivo,sans-serif}
-        .pm-klab{font-size:10px;letter-spacing:.16em;text-transform:uppercase;color:var(--mut);margin-top:6px}
-        .pm-kdet{font-size:10px;color:var(--mut);margin-top:5px;line-height:1.4}
-        .pm-canvas{background:var(--panel);border-left:1px solid var(--line);border-right:1px solid var(--line);min-height:472px}
-        .pm-canvas svg{width:100%;height:auto;display:block}
-        .pm-node{cursor:pointer}
-        .pm-lbl{font-weight:500;font-size:11px;letter-spacing:.06em;fill:var(--paper);text-transform:uppercase}
-        .pm-dim{opacity:.12;transition:opacity .25s}
-        .pm-dkind{font-size:10px;letter-spacing:.24em;text-transform:uppercase;color:var(--mut)}
-        .pm-dname{font-weight:800;font-size:20px;margin:5px 0 8px;font-family:Archivo,sans-serif}
-        .pm-drow{display:flex;justify-content:space-between;font-size:12px;padding:6px 0;border-bottom:1px solid var(--line);color:var(--mut)}
-        .pm-drow b{color:var(--paper);font-weight:500}
-        .pm-note{font-size:12px;color:var(--mut);line-height:1.5;margin-top:10px}
-        .pm-legend{display:flex;gap:14px;flex-wrap:wrap;padding:10px 16px;border-top:1px solid var(--line);font-size:10px;letter-spacing:.06em;text-transform:uppercase;color:var(--mut)}
-        .pm-lg{display:flex;align-items:center;gap:6px}
-        .pm-sw{width:13px;height:13px;display:inline-block}
-        @media(max-width:760px){.pm-grid{grid-template-columns:1fr}.pm-railR{border-left:0;border-top:1px solid var(--line)}.pm-canvas{border:0;border-top:1px solid var(--line)}}
-      `}</style>
+    <div className="min-h-screen bg-background text-foreground">
+      <style>{GRAPH_CSS}</style>
+      <div className="mx-auto w-full max-w-7xl px-4 py-4 sm:px-6 lg:px-8">
+        <div className="overflow-hidden rounded-xl border bg-card text-card-foreground shadow-sm">
+          {/* Header */}
+          <div className="flex items-center justify-between gap-3 border-b px-5 py-4">
+            <div className="min-w-0">
+              <div className="flex items-center gap-2">
+                <h2 className="font-heading text-base font-medium">Team memory</h2>
+                <span className="inline-flex items-center gap-1.5 rounded-full border px-2 py-0.5 text-[0.65rem] font-medium uppercase tracking-wide text-muted-foreground">
+                  <span className="pm-pulse inline-block size-1.5 rounded-full bg-[#16a34a]" />
+                  Live
+                </span>
+              </div>
+              <p className="mt-0.5 truncate text-xs text-muted-foreground">
+                What PodMan learned · {podId}
+              </p>
+            </div>
+            <Button variant="outline" size="sm" onClick={onClose}>
+              ← Pods
+            </Button>
+          </div>
 
-      <div className="pm-hd">
-        <div>
-          <div className="pm-ttl">Team memory</div>
-          <div className="pm-sub">What PodMan learned · {podId}</div>
-        </div>
-        <button className="pm-x" onClick={onClose}>
-          ← Pods
-        </button>
-      </div>
+          {/* Toggles */}
+          <div className="flex flex-wrap items-center gap-2 border-b px-4 py-3">
+            <ToggleGroup
+              type="single"
+              value={mode}
+              onValueChange={(v) => v && pick(v as Mode)}
+              variant="outline"
+              size="sm"
+            >
+              <ToggleGroupItem value="risk">Risk path</ToggleGroupItem>
+              <ToggleGroupItem value="learn">Learning edges</ToggleGroupItem>
+              <ToggleGroupItem value="all">Whole graph</ToggleGroupItem>
+            </ToggleGroup>
+            <span className="ml-auto hidden text-xs text-muted-foreground sm:inline">
+              Drag to rearrange · double-click to release · click to inspect
+            </span>
+          </div>
 
-      <div className="pm-bar">
-        <button
-          className={`pm-btn ${mode === 'risk' && !selected ? 'on' : ''}`}
-          onClick={() => pick('risk')}
-        >
-          Risk path
-        </button>
-        <button
-          className={`pm-btn ${mode === 'learn' && !selected ? 'on' : ''}`}
-          onClick={() => pick('learn')}
-        >
-          Learning edges
-        </button>
-        <button
-          className={`pm-btn ${mode === 'all' && !selected ? 'on' : ''}`}
-          onClick={() => pick('all')}
-        >
-          Whole graph
-        </button>
-      </div>
+          {error && <p className="px-4 py-4 text-sm text-destructive">Graph error: {error}</p>}
+          {!graph && !error && (
+            <p className="px-4 py-10 text-center text-sm text-muted-foreground">Loading graph…</p>
+          )}
 
-      {error && (
-        <p style={{ padding: '16px', color: '#ff7d76', fontSize: 13 }}>Graph error: {error}</p>
-      )}
-      {!graph && !error && (
-        <p style={{ padding: '16px', color: '#8d897e', fontSize: 13 }}>Loading graph…</p>
-      )}
+          {graph && (
+            <>
+              {/* Metrics · graph · learning loop */}
+              <div className="grid gap-4 p-4 lg:grid-cols-[180px_minmax(0,1fr)_212px]">
+                <MetricsRail metrics={graph.metrics} />
 
-      {graph && (
-        <>
-          <div className="pm-grid">
-            <div className="pm-col">
-              <div className="pm-st">Workflow metrics</div>
-              {graph.metrics.map((m) => (
-                <div className="pm-kpi" key={m.label}>
-                  <div className="pm-num">{m.value}</div>
-                  <div className="pm-klab">{m.label}</div>
-                  <div className="pm-kdet">{m.detail}</div>
+                <div className="flex min-h-[440px] flex-col overflow-hidden rounded-xl border bg-card">
+                  <GraphCanvas
+                    graph={graph}
+                    highlight={highlight}
+                    selected={liveSelected}
+                    onSelect={setSelected}
+                  />
                 </div>
-              ))}
-            </div>
 
-            <div className="pm-canvas">
-              <svg viewBox="0 0 720 472" role="img" aria-label="PodMan team-memory graph">
-                {graph.edges.map((e) => {
-                  const a = nodeById.get(e.source);
-                  const b = nodeById.get(e.target);
-                  if (!a || !b) return null;
-                  const s = EDGE[e.kind];
-                  return (
-                    <line
-                      key={e.id}
-                      className={dimEdge(e.id) ? 'pm-dim' : undefined}
-                      x1={a.x}
-                      y1={a.y}
-                      x2={b.x}
-                      y2={b.y}
-                      stroke={s.c}
-                      strokeWidth={hotEdge(e.id) ? s.w + 1.6 : s.w}
-                      strokeDasharray={s.dash ? '7 6' : undefined}
-                      strokeLinecap="round"
-                    />
-                  );
-                })}
-                {graph.nodes.map((n) => (
-                  <g
-                    key={n.id}
-                    className={`pm-node ${dimNode(n.id) ? 'pm-dim' : ''}`}
-                    role="button"
-                    tabIndex={0}
-                    aria-label={`${n.kind}: ${n.label}`}
-                    onClick={() => setSelected((cur) => (cur === n.id ? null : n.id))}
-                    onKeyDown={(ev) => {
-                      if (ev.key === 'Enter' || ev.key === ' ') {
-                        ev.preventDefault();
-                        setSelected((cur) => (cur === n.id ? null : n.id));
-                      }
-                    }}
-                  >
-                    <NodeShape node={n} />
-                    <text className="pm-lbl" x={n.x} y={n.y + 33} textAnchor="middle">
-                      {n.label.toUpperCase()}
-                    </text>
-                  </g>
+                {graph.loop?.steps?.length ? <LearningLoop loop={graph.loop} /> : <div />}
+              </div>
+
+              {/* Activity stream · selected node */}
+              <div className="grid gap-4 border-t px-4 py-4 lg:grid-cols-[minmax(0,1fr)_320px]">
+                <div className="rounded-xl border bg-card p-4">
+                  <ActivityStream events={graph.activity ?? []} />
+                </div>
+                <div className="rounded-xl border bg-muted/40 p-4">
+                  <SelectedNodePanel node={sel} relCount={relCount} flow={flow} mode={mode} />
+                </div>
+              </div>
+
+              {/* Legend */}
+              <div className="flex flex-wrap items-center gap-x-3 gap-y-1.5 border-t px-4 py-2.5 text-xs text-muted-foreground">
+                {NODE_LEGEND.map((l) => (
+                  <span key={l.label} className="flex items-center gap-1.5">
+                    <span className="inline-block size-3" style={l.swatch} />
+                    {l.label}
+                  </span>
                 ))}
-              </svg>
-            </div>
-
-            <div className="pm-col pm-railR">
-              {sel ? (
-                <>
-                  <div className="pm-dkind">{sel.kind}</div>
-                  <div className="pm-dname">{sel.label}</div>
-                  <div className="pm-drow">
-                    <span>Status</span>
-                    <b
-                      style={{
-                        color:
-                          sel.status === 'risk'
-                            ? '#E2403A'
-                            : sel.status === 'learned'
-                              ? '#b7a4ff'
-                              : '#ECE7DA',
-                      }}
-                    >
-                      {sel.status}
-                    </b>
-                  </div>
-                  <div className="pm-drow">
-                    <span>Relationships</span>
-                    <b>{relCount}</b>
-                  </div>
-                  <div className="pm-note">{sel.summary}</div>
-                </>
-              ) : (
-                <>
-                  <div className="pm-dkind">Continual learning</div>
-                  <div className="pm-dname">It learned</div>
-                  <div className="pm-note">
-                    Violet <b style={{ color: '#b7a4ff' }}>learned_from</b> edges are ownership
-                    PodMan retained from accepted interventions — the graph gets sharper every
-                    session. Click any node to trace its relationships.
-                  </div>
-                </>
-              )}
-            </div>
-          </div>
-
-          <div className="pm-legend">
-            {LEGEND.map((l) => (
-              <span className="pm-lg" key={l.label}>
-                <span className="pm-sw" style={l.swatch} />
-                {l.label}
-              </span>
-            ))}
-            <span className="pm-lg">
-              <span className="pm-sw" style={{ background: '#E2403A', height: 3 }} />
-              collides
-            </span>
-            <span className="pm-lg">
-              <span className="pm-sw" style={{ background: '#8b6cff', height: 3 }} />
-              learned_from
-            </span>
-          </div>
-        </>
-      )}
+                <span className="mx-1 h-3 w-px bg-border" aria-hidden />
+                {EDGE_LEGEND.map((l) => (
+                  <span key={l.label} className="flex items-center gap-1.5">
+                    <span
+                      className="inline-block h-[3px] w-3.5"
+                      style={
+                        l.dash
+                          ? { backgroundImage: `repeating-linear-gradient(90deg, ${l.color} 0 3px, transparent 3px 6px)` }
+                          : { background: l.color }
+                      }
+                    />
+                    {l.label}
+                  </span>
+                ))}
+              </div>
+            </>
+          )}
+        </div>
+      </div>
     </div>
   );
 }

frontend/src/components/PodCard.tsx

@@ -1,7 +1,19 @@
 import { useState } from 'react';
-import { MoreHorizontalIcon, PlusIcon, Trash2Icon, UserRoundIcon, VideoIcon } from 'lucide-react';
+import {
+  BrainCircuitIcon,
+  MoreHorizontalIcon,
+  Trash2Icon,
+  UserRoundIcon,
+  VideoIcon,
+} from 'lucide-react';
 import type { Pod, PodInput } from '@podman/shared';
-import { Avatar, AvatarBadge, AvatarFallback, AvatarGroup } from '@/components/ui/avatar';
+import {
+  Avatar,
+  AvatarBadge,
+  AvatarFallback,
+  AvatarGroup,
+  AvatarImage,
+} from '@/components/ui/avatar';
 import { Badge } from '@/components/ui/badge';
 import { Button } from '@/components/ui/button';
 import {
@@ -9,7 +21,6 @@ import {
   CardAction,
   CardContent,
   CardDescription,
-  CardFooter,
   CardHeader,
   CardTitle,
 } from '@/components/ui/card';
@@ -36,24 +47,31 @@ export function PodCard({
   pod,
   busy,
   presence,
-  onJoin,
+  currentUserProfile,
+  onJoin: _onJoin,
   onAddAndJoin,
-  onAddMember,
+  onAddMember: _onAddMember,
   onRemoveMember: _onRemoveMember,
   onUpdate,
   onDelete,
+  onOpenGraph,
 }: {
   pod: Pod;
   busy: boolean;
   presence: string[];
+  currentUserProfile?: {
+    displayName: string;
+    email?: string;
+    imageUrl?: string;
+  };
   onJoin: (pod: Pod, member: string) => void;
-  onAddAndJoin: (pod: Pod, name: string) => void;
+  onAddAndJoin: (pod: Pod) => void;
   onAddMember: (id: string, name: string) => void;
   onRemoveMember: (id: string, name: string) => void;
   onUpdate: (id: string, patch: PodInput) => void;
   onDelete: (id: string) => void;
+  onOpenGraph: (id: string) => void;
 }) {
-  const [newMember, setNewMember] = useState('');
   const [editing, setEditing] = useState(false);
   const [draft, setDraft] = useState<PodInput>({
     name: pod.name,
@@ -62,8 +80,14 @@ export function PodCard({
   });
 
   const inRoom = (name: string) => presence.some((p) => p.toLowerCase() === name.toLowerCase());
+  const profileForMember = (name: string) =>
+    pod.memberProfiles?.[name] ??
+    ([currentUserProfile?.displayName, currentUserProfile?.email]
+      .filter(Boolean)
+      .some((value) => value?.toLowerCase() === name.toLowerCase())
+      ? currentUserProfile
+      : undefined);
   const active = presence.length > 0;
-  const primaryMember = pod.members[0] ?? '';
 
   function saveEdit() {
     onUpdate(pod.id, {
@@ -74,12 +98,8 @@ export function PodCard({
     setEditing(false);
   }
 
-  function submitMember(join: boolean) {
-    const name = newMember.trim();
-    if (!name) return;
-    if (join) onAddAndJoin(pod, name);
-    else onAddMember(pod.id, name);
-    setNewMember('');
+  function join() {
+    onAddAndJoin(pod);
   }
 
   return (
@@ -100,6 +120,10 @@ export function PodCard({
               </DropdownMenuTrigger>
               <DropdownMenuContent align="end">
                 <DropdownMenuGroup>
+                  <DropdownMenuItem onSelect={() => onOpenGraph(pod.id)}>
+                    <BrainCircuitIcon />
+                    Team memory
+                  </DropdownMenuItem>
                   <DropdownMenuItem onSelect={() => setEditing(true)}>Edit pod</DropdownMenuItem>
                   <DropdownMenuItem
                     variant="destructive"
@@ -132,12 +156,16 @@ export function PodCard({
 
             <div className="flex items-center justify-between gap-4">
               <AvatarGroup>
-                {pod.members.slice(0, 4).map((member) => (
-                  <Avatar key={member} title={member}>
-                    <AvatarFallback>{initials(member)}</AvatarFallback>
-                    {inRoom(member) && <AvatarBadge />}
-                  </Avatar>
-                ))}
+                {pod.members.slice(0, 4).map((member) => {
+                  const profile = profileForMember(member);
+                  return (
+                    <Avatar key={member} title={profile?.email ?? member}>
+                      {profile?.imageUrl && <AvatarImage src={profile.imageUrl} alt={member} />}
+                      <AvatarFallback>{initials(member)}</AvatarFallback>
+                      {inRoom(member) && <AvatarBadge />}
+                    </Avatar>
+                  );
+                })}
                 {pod.members.length > 4 && <span className="text-sm text-muted-foreground">+</span>}
               </AvatarGroup>
               <div className="flex items-center gap-1.5 text-sm text-muted-foreground">
@@ -146,45 +174,14 @@ export function PodCard({
               </div>
             </div>
 
-            <div className="flex gap-2">
-              <Input
-                placeholder="Your name"
-                value={newMember}
-                onChange={(e) => setNewMember(e.target.value)}
-                onKeyDown={(e) => {
-                  if (e.key === 'Enter') submitMember(true);
-                }}
-              />
-              <Button
-                variant="outline"
-                size="icon"
-                onClick={() => submitMember(false)}
-                disabled={busy || !newMember.trim()}
-              >
-                <PlusIcon />
-                <span className="sr-only">Add member</span>
+            <div className="flex justify-end">
+              <Button className="min-w-24" onClick={join} disabled={busy}>
+                <VideoIcon data-icon="inline-start" />
+                Join
               </Button>
             </div>
           </div>
         </CardContent>
-
-        <CardFooter className="justify-between gap-2">
-          <Button
-            variant="outline"
-            onClick={() => primaryMember && onJoin(pod, primaryMember)}
-            disabled={busy || !primaryMember}
-          >
-            <VideoIcon data-icon="inline-start" />
-            Join
-          </Button>
-          <Button
-            className="min-w-28"
-            onClick={() => submitMember(true)}
-            disabled={busy || !newMember.trim()}
-          >
-            Add and join
-          </Button>
-        </CardFooter>
       </Card>
 
       <Dialog open={editing} onOpenChange={setEditing}>

frontend/src/components/graph/ActivityStream.tsx

@@ -0,0 +1,52 @@
+import type { PodGraphActivity } from '@podman/shared';
+import { ScrollArea } from '@/components/ui/scroll-area';
+import { ACTIVITY_TAG } from './encoding.js';
+
+const fmtTime = new Intl.DateTimeFormat([], { hour: '2-digit', minute: '2-digit', hour12: false });
+
+function timeOf(at: string): string {
+  const t = new Date(at).getTime();
+  return Number.isFinite(t) ? fmtTime.format(t) : '--:--';
+}
+
+export function ActivityStream({ events }: { events: PodGraphActivity[] }) {
+  return (
+    <div className="flex h-full flex-col">
+      <p className="mb-2 text-xs font-medium uppercase tracking-wide text-muted-foreground">
+        Activity stream
+      </p>
+      {events.length === 0 ? (
+        <p className="text-sm text-muted-foreground">No activity yet.</p>
+      ) : (
+        <ScrollArea className="h-[176px] pr-3">
+          <ul className="space-y-1.5">
+            {events.map((e) => {
+              const tag = ACTIVITY_TAG[e.kind];
+              return (
+                <li key={e.id} className="pm-enter flex items-start gap-2.5 text-sm">
+                  <span className="mt-0.5 shrink-0 font-mono text-xs tabular-nums text-muted-foreground">
+                    {timeOf(e.at)}
+                  </span>
+                  <span
+                    className="mt-0.5 shrink-0 rounded px-1.5 py-0.5 text-[0.6rem] font-semibold uppercase tracking-wide"
+                    style={{ color: tag.color, background: `${tag.color}1a` }}
+                  >
+                    {tag.label}
+                  </span>
+                  <span className="min-w-0 flex-1 leading-snug">
+                    <span className="text-foreground/90">{e.title}</span>
+                    {e.detail && (
+                      <span className="block text-xs leading-snug text-muted-foreground">
+                        {e.detail}
+                      </span>
+                    )}
+                  </span>
+                </li>
+              );
+            })}
+          </ul>
+        </ScrollArea>
+      )}
+    </div>
+  );
+}

frontend/src/components/graph/GraphCanvas.tsx

@@ -0,0 +1,333 @@
+import {
+  useCallback,
+  useEffect,
+  useRef,
+  useState,
+  type ReactElement,
+  type PointerEvent,
+} from 'react';
+import type { PodGraph, PodGraphNode, PodGraphNodeKind } from '@podman/shared';
+import { ForceSim } from './forceSim.js';
+import { EDGE, KIND_COLOR, nodeRadius, type Highlight } from './encoding.js';
+
+const W = 760;
+const H = 480;
+const MARGIN = 48;
+
+/** Map the server's 0..720×0..472 layout into the canvas as a seed position. */
+function mapX(x: number): number {
+  return MARGIN + (Math.max(0, Math.min(720, x)) / 720) * (W - 2 * MARGIN);
+}
+function mapY(y: number): number {
+  return MARGIN + (Math.max(0, Math.min(472, y)) / 472) * (H - 2 * MARGIN);
+}
+
+function linkDistance(kind: string): number {
+  if (kind === 'collides') return 122;
+  if (kind === 'owns') return 104;
+  if (kind === 'learned_from') return 150;
+  return 134;
+}
+function linkStrength(strength: number): number {
+  return Math.max(0.18, Math.min(0.9, strength));
+}
+
+/** Stable +/- so parallel edges between the same pair fan to opposite sides. */
+function curveSign(id: string): number {
+  let h = 0;
+  for (let i = 0; i < id.length; i++) h = (h + id.charCodeAt(i)) % 2;
+  return h === 0 ? 1 : -1;
+}
+
+function edgePath(ax: number, ay: number, bx: number, by: number, id: string): string {
+  const dx = bx - ax;
+  const dy = by - ay;
+  const len = Math.hypot(dx, dy) || 1;
+  const nx = -dy / len;
+  const ny = dx / len;
+  const off = curveSign(id) * len * 0.13;
+  const cx = (ax + bx) / 2 + nx * off;
+  const cy = (ay + by) / 2 + ny * off;
+  return `M${ax.toFixed(1)},${ay.toFixed(1)} Q${cx.toFixed(1)},${cy.toFixed(1)} ${bx.toFixed(1)},${by.toFixed(1)}`;
+}
+
+function nodeShape(
+  kind: PodGraphNodeKind,
+  color: string,
+  cx: number,
+  cy: number,
+  r: number,
+): ReactElement | null {
+  switch (kind) {
+    case 'engineer':
+      return <rect x={cx - r} y={cy - r} width={r * 2} height={r * 2} rx={4} fill={color} />;
+    case 'file':
+      return (
+        <rect
+          x={cx - r}
+          y={cy - r}
+          width={r * 2}
+          height={r * 2}
+          rx={4}
+          fill="var(--card)"
+          stroke={color}
+          strokeWidth={2.4}
+        />
+      );
+    case 'feature':
+      return <circle cx={cx} cy={cy} r={r} fill={color} />;
+    case 'collision':
+      return (
+        <polygon
+          points={`${cx},${cy - r} ${cx + r},${cy + r * 0.78} ${cx - r},${cy + r * 0.78}`}
+          fill={color}
+        />
+      );
+    case 'intervention':
+      return (
+        <polygon points={`${cx},${cy - r} ${cx + r},${cy} ${cx},${cy + r} ${cx - r},${cy}`} fill={color} />
+      );
+    default:
+      return null;
+  }
+}
+
+function showLabel(
+  node: PodGraphNode,
+  dimmed: boolean,
+  hovered: boolean,
+  selected: boolean,
+): boolean {
+  if (hovered || selected) return true;
+  if (dimmed) return false;
+  // Collisions cluster and often share a filename — reveal on hover/select only.
+  if (node.kind === 'collision') return false;
+  return true;
+}
+
+interface DragState {
+  id: string;
+  pointerId: number;
+  moved: boolean;
+}
+
+export function GraphCanvas({
+  graph,
+  highlight,
+  selected,
+  onSelect,
+}: {
+  graph: PodGraph;
+  highlight: Highlight | null;
+  selected: string | null;
+  onSelect: (id: string | null) => void;
+}) {
+  const svgRef = useRef<SVGSVGElement | null>(null);
+  const simRef = useRef<ForceSim | null>(null);
+  if (!simRef.current) simRef.current = new ForceSim(W, H);
+  const rafRef = useRef<number | null>(null);
+  const dragRef = useRef<DragState | null>(null);
+  const sigRef = useRef<string>('');
+  const [, setFrame] = useState(0);
+  const [hovered, setHovered] = useState<string | null>(null);
+
+  const loop = useCallback(() => {
+    const sim = simRef.current;
+    if (!sim) return;
+    const working = sim.tick();
+    setFrame((f) => (f + 1) % 1_000_000);
+    if (working || dragRef.current) {
+      rafRef.current = requestAnimationFrame(loop);
+    } else {
+      rafRef.current = null;
+    }
+  }, []);
+
+  const ensureRaf = useCallback(() => {
+    if (rafRef.current == null) rafRef.current = requestAnimationFrame(loop);
+  }, [loop]);
+
+  // Rebuild the simulation when the graph data changes, preserving positions.
+  useEffect(() => {
+    const sim = simRef.current;
+    if (!sim) return;
+    const nodeInputs = graph.nodes.map((n) => ({
+      id: n.id,
+      radius: nodeRadius(n),
+      seedX: mapX(n.x),
+      seedY: mapY(n.y),
+    }));
+    const linkInputs = graph.edges.map((e) => ({
+      source: e.source,
+      target: e.target,
+      distance: linkDistance(e.kind),
+      strength: linkStrength(e.strength),
+    }));
+    const sig =
+      nodeInputs
+        .map((n) => n.id)
+        .sort()
+        .join(',') +
+      '|' +
+      graph.edges
+        .map((e) => e.id)
+        .sort()
+        .join(',');
+    const first = sigRef.current === '';
+    const changed = sig !== sigRef.current;
+    sim.setData(nodeInputs, linkInputs);
+    if (changed) {
+      sigRef.current = sig;
+      sim.reheat(first ? 1 : 0.5);
+    }
+    // Always (re)arm the loop — ensureRaf is idempotent via the rafRef==null
+    // guard. This must NOT be gated on `changed`: under React StrictMode the
+    // dev double-invoke cancels the frame between effect passes, and pass 2 sees
+    // an unchanged sig, so a `changed`-gated start would leave the sim frozen.
+    if (sim.nodes.length) ensureRaf();
+  }, [graph, ensureRaf]);
+
+  // Clean up the animation frame on unmount.
+  useEffect(() => {
+    return () => {
+      if (rafRef.current != null) cancelAnimationFrame(rafRef.current);
+      rafRef.current = null;
+    };
+  }, []);
+
+  function toSvg(evt: PointerEvent): { x: number; y: number } {
+    const svg = svgRef.current;
+    if (!svg) return { x: 0, y: 0 };
+    const ctm = svg.getScreenCTM();
+    if (!ctm) return { x: 0, y: 0 };
+    const p = new DOMPoint(evt.clientX, evt.clientY).matrixTransform(ctm.inverse());
+    return { x: p.x, y: p.y };
+  }
+
+  function onNodePointerDown(evt: PointerEvent, id: string) {
+    evt.stopPropagation();
+    const sim = simRef.current;
+    if (!sim) return;
+    (evt.currentTarget as Element).setPointerCapture(evt.pointerId);
+    dragRef.current = { id, pointerId: evt.pointerId, moved: false };
+    const { x, y } = toSvg(evt);
+    sim.pin(id, x, y);
+    sim.setActive(true);
+    ensureRaf();
+  }
+
+  function onNodePointerMove(evt: PointerEvent) {
+    const drag = dragRef.current;
+    const sim = simRef.current;
+    if (!drag || !sim || drag.pointerId !== evt.pointerId) return;
+    drag.moved = true;
+    const { x, y } = toSvg(evt);
+    sim.pin(drag.id, x, y);
+    ensureRaf();
+  }
+
+  function onNodePointerUp(evt: PointerEvent, id: string) {
+    const drag = dragRef.current;
+    const sim = simRef.current;
+    if (!drag || !sim || drag.pointerId !== evt.pointerId) return;
+    (evt.currentTarget as Element).releasePointerCapture?.(evt.pointerId);
+    sim.setActive(false);
+    // A press that never moved is a click — toggle selection (node stays pinned).
+    if (!drag.moved) onSelect(selected === id ? null : id);
+    dragRef.current = null;
+    ensureRaf();
+  }
+
+  function onNodeDoubleClick(id: string) {
+    const sim = simRef.current;
+    if (!sim) return;
+    sim.unpin(id);
+    sim.reheat(0.5);
+    ensureRaf();
+  }
+
+  const sim = simRef.current;
+  const dimNode = (id: string) => (highlight ? !highlight.nodes.has(id) : false);
+  const dimEdge = (id: string) => (highlight ? !highlight.edges.has(id) : false);
+  const hotEdge = (id: string) => (highlight ? highlight.edges.has(id) : false);
+
+  return (
+    <svg
+      ref={svgRef}
+      viewBox={`0 0 ${W} ${H}`}
+      role="img"
+      aria-label="PodMan team-memory graph — drag nodes to rearrange"
+      className="block h-full max-h-[560px] w-full touch-none select-none"
+      onPointerDown={() => onSelect(null)}
+    >
+      <g>
+        {graph.edges.map((e) => {
+          const a = sim?.get(e.source);
+          const b = sim?.get(e.target);
+          if (!a || !b) return null;
+          const style = EDGE[e.kind];
+          const hot = hotEdge(e.id);
+          return (
+            <path
+              key={e.id}
+              className={`pm-edge pm-enter ${dimEdge(e.id) ? 'pm-dim' : ''} ${e.kind === 'learned_from' ? 'pm-dash' : ''}`}
+              d={edgePath(a.x, a.y, b.x, b.y, e.id)}
+              fill="none"
+              stroke={style.c}
+              strokeWidth={hot ? style.w + 1.4 : style.w}
+              strokeOpacity={hot ? 1 : 0.78}
+              strokeDasharray={style.dash ? '7 6' : undefined}
+              strokeLinecap="round"
+            />
+          );
+        })}
+      </g>
+      <g>
+        {graph.nodes.map((n) => {
+          const p = sim?.get(n.id);
+          if (!p) return null;
+          const r = p.radius;
+          const dimmed = dimNode(n.id);
+          const isHover = hovered === n.id;
+          const isSel = selected === n.id;
+          const color = KIND_COLOR[n.kind];
+          const pinned = p.fx != null;
+          return (
+            <g
+              key={n.id}
+              className={`pm-node pm-enter ${dimmed ? 'pm-dim' : ''}`}
+              role="button"
+              tabIndex={0}
+              aria-label={`${n.kind}: ${n.label}`}
+              onPointerDown={(ev) => onNodePointerDown(ev, n.id)}
+              onPointerMove={onNodePointerMove}
+              onPointerUp={(ev) => onNodePointerUp(ev, n.id)}
+              onDoubleClick={() => onNodeDoubleClick(n.id)}
+              onMouseEnter={() => setHovered(n.id)}
+              onMouseLeave={() => setHovered((cur) => (cur === n.id ? null : cur))}
+              onKeyDown={(ev) => {
+                if (ev.key === 'Enter' || ev.key === ' ') {
+                  ev.preventDefault();
+                  onSelect(selected === n.id ? null : n.id);
+                }
+              }}
+            >
+              {(isSel || isHover) && (
+                <circle cx={p.x} cy={p.y} r={r + 7} fill="none" stroke={color} strokeWidth={2} strokeOpacity={0.5} />
+              )}
+              {pinned && !isSel && !isHover && (
+                <circle cx={p.x} cy={p.y} r={r + 4} fill="none" stroke={color} strokeWidth={1} strokeDasharray="2 3" strokeOpacity={0.4} />
+              )}
+              {nodeShape(n.kind, color, p.x, p.y, r)}
+              {showLabel(n, dimmed, isHover, isSel) && (
+                <text className="pm-lbl" x={p.x} y={p.y + r + 13} textAnchor="middle">
+                  {n.label}
+                </text>
+              )}
+            </g>
+          );
+        })}
+      </g>
+    </svg>
+  );
+}

frontend/src/components/graph/LearningLoop.tsx

@@ -0,0 +1,49 @@
+import type { PodLearningLoop } from '@podman/shared';
+import { BLUE } from './encoding.js';
+
+/**
+ * The continual-learning loop rail: observe → store → predict → outcome → adapt.
+ * The active stage (most-recent activity) gets a pulsing accent bar + ring.
+ */
+export function LearningLoop({ loop }: { loop: PodLearningLoop }) {
+  return (
+    <div className="space-y-1">
+      <p className="mb-2 text-xs font-medium uppercase tracking-wide text-muted-foreground">
+        Learning loop
+      </p>
+      {loop.steps.map((s, i) => {
+        const active = s.status === 'active' || s.key === loop.activeStep;
+        return (
+          <div key={s.key}>
+            <div
+              className="relative overflow-hidden rounded-lg border bg-card py-2 pl-3.5 pr-3 shadow-sm transition-colors data-[active=true]:bg-accent/40"
+              data-active={active}
+              style={active ? { boxShadow: `inset 0 0 0 1px ${BLUE}55` } : undefined}
+            >
+              <span
+                aria-hidden
+                className={`absolute inset-y-0 left-0 w-1 ${active ? 'pm-pulse' : ''}`}
+                style={{ background: active ? BLUE : 'var(--border)' }}
+              />
+              <div className="flex items-baseline justify-between gap-2">
+                <p className="text-[0.7rem] font-medium uppercase tracking-wide text-muted-foreground">
+                  <span className="tabular-nums">{String(i + 1).padStart(2, '0')}</span> {s.label}
+                </p>
+                <p className="font-heading text-sm font-semibold tabular-nums">{s.value}</p>
+              </div>
+              <p className="mt-0.5 text-xs leading-snug text-muted-foreground">{s.detail}</p>
+            </div>
+            {i < loop.steps.length - 1 && (
+              <p
+                aria-hidden
+                className="py-0.5 text-center text-xs leading-none text-muted-foreground/60"
+              >
+                ↓
+              </p>
+            )}
+          </div>
+        );
+      })}
+    </div>
+  );
+}

frontend/src/components/graph/MetricsRail.tsx

@@ -0,0 +1,37 @@
+import type { PodGraphMetric } from '@podman/shared';
+import { BLUE, RED, VIOLET, GREEN, AMBER } from './encoding.js';
+
+const ACCENTS: Array<{ test: RegExp; color: string }> = [
+  { test: /risk|collision|open/i, color: RED },
+  { test: /accept/i, color: GREEN },
+  { test: /learn|owner|adapt/i, color: VIOLET },
+  { test: /vector|memory|store/i, color: AMBER },
+];
+
+function accentFor(label: string, i: number): string {
+  for (const a of ACCENTS) if (a.test.test(label)) return a.color;
+  return [BLUE, RED, VIOLET, GREEN, AMBER][i % 5] ?? BLUE;
+}
+
+export function MetricsRail({ metrics }: { metrics: PodGraphMetric[] }) {
+  return (
+    <div className="space-y-2.5">
+      <p className="text-xs font-medium uppercase tracking-wide text-muted-foreground">
+        Workflow metrics
+      </p>
+      {metrics.map((m, i) => (
+        <div
+          key={m.label}
+          className="rounded-lg border bg-card py-2.5 pl-3 pr-3 shadow-sm"
+          style={{ borderLeftWidth: 3, borderLeftColor: accentFor(m.label, i) }}
+        >
+          <p className="font-heading text-2xl font-semibold leading-none tabular-nums">{m.value}</p>
+          <p className="mt-1.5 text-[0.7rem] font-medium uppercase tracking-wide text-muted-foreground">
+            {m.label}
+          </p>
+          <p className="mt-1 text-xs leading-snug text-muted-foreground">{m.detail}</p>
+        </div>
+      ))}
+    </div>
+  );
+}

frontend/src/components/graph/SelectedNodePanel.tsx

@@ -0,0 +1,63 @@
+import type { PodGraphNode } from '@podman/shared';
+import { Badge } from '@/components/ui/badge';
+import { statusColor, modeBlurb, VIOLET, type Mode } from './encoding.js';
+
+export function SelectedNodePanel({
+  node,
+  relCount,
+  flow,
+  mode,
+}: {
+  node: PodGraphNode | undefined;
+  relCount: number;
+  flow: string;
+  mode: Mode;
+}) {
+  if (!node) {
+    return (
+      <div className="flex h-full flex-col">
+        <p className="mb-2 text-xs font-medium uppercase tracking-wide text-muted-foreground">
+          {mode === 'learn' ? 'Learning edges' : mode === 'all' ? 'Whole graph' : 'Risk path'}
+        </p>
+        <h3 className="mb-2 font-heading text-base font-medium">What you're looking at</h3>
+        <p className="text-sm leading-relaxed text-muted-foreground">{modeBlurb(mode)}</p>
+        <p className="mt-3 text-sm leading-relaxed text-muted-foreground">
+          Click any node to trace its{' '}
+          <span className="font-medium" style={{ color: VIOLET }}>
+            flow
+          </span>{' '}
+          — what PodMan saw, flagged, and learned. Drag to rearrange.
+        </p>
+      </div>
+    );
+  }
+  return (
+    <div className="flex h-full flex-col">
+      <p className="text-xs font-medium uppercase tracking-wide text-muted-foreground">
+        {node.kind}
+      </p>
+      <h3 className="mb-2 mt-0.5 font-heading text-lg font-medium">{node.label}</h3>
+      <div className="flex items-center justify-between border-b py-1.5 text-sm text-muted-foreground">
+        <span>Status</span>
+        <Badge variant="outline" style={{ color: statusColor(node.status) }}>
+          {node.status}
+        </Badge>
+      </div>
+      <div className="flex items-center justify-between border-b py-1.5 text-sm text-muted-foreground">
+        <span>Relationships</span>
+        <span className="font-medium text-foreground">{relCount}</span>
+      </div>
+      {flow && (
+        <>
+          <p className="mt-2.5 text-[0.7rem] font-medium uppercase tracking-wide text-muted-foreground">
+            Flow
+          </p>
+          <p className="mt-1 text-sm leading-relaxed text-foreground/90">{flow}</p>
+        </>
+      )}
+      {node.summary && node.summary !== flow && (
+        <p className="mt-2 text-xs leading-relaxed text-muted-foreground">{node.summary}</p>
+      )}
+    </div>
+  );
+}

frontend/src/components/graph/encoding.ts

@@ -0,0 +1,211 @@
+import type { CSSProperties } from 'react';
+import type {
+  PodGraph,
+  PodGraphNode,
+  PodGraphEdge,
+  PodGraphNodeKind,
+  PodGraphActivityKind,
+} from '@podman/shared';
+
+/**
+ * Fixed, light-readable hues for the node/edge encoding. Kept stable across
+ * light/dark so kinds stay distinguishable; only the chrome uses shadcn tokens.
+ */
+export const BLUE = '#2563eb';
+export const SLATE = '#475569';
+export const SLATE_EDGE = '#94a3b8';
+export const SLATE_FAINT = '#cbd5e1';
+export const AMBER = '#d97706';
+export const RED = '#dc2626';
+export const VIOLET = '#7c3aed';
+export const GREEN = '#16a34a';
+
+/** Tag color + short label per activity-stream kind. */
+export const ACTIVITY_TAG: Record<PodGraphActivityKind, { color: string; label: string }> = {
+  editing: { color: SLATE, label: 'EDITING' },
+  collision: { color: RED, label: 'COLLISION' },
+  intervention: { color: AMBER, label: 'NUDGE' },
+  outcome: { color: GREEN, label: 'OUTCOME' },
+  learned: { color: VIOLET, label: 'LEARNED' },
+  agent: { color: BLUE, label: 'AGENT' },
+  suppressed: { color: VIOLET, label: 'SUPPRESSED' },
+};
+
+export const KIND_COLOR: Record<PodGraphNodeKind, string> = {
+  engineer: BLUE,
+  file: SLATE,
+  feature: AMBER,
+  collision: RED,
+  intervention: VIOLET,
+};
+
+export interface EdgeStyle {
+  c: string;
+  w: number;
+  dash?: boolean;
+}
+
+export const EDGE: Record<PodGraphEdge['kind'], EdgeStyle> = {
+  owns: { c: BLUE, w: 2.4 },
+  editing: { c: SLATE_EDGE, w: 1.9 },
+  touches: { c: SLATE_FAINT, w: 1.5 },
+  collides: { c: RED, w: 2.8 },
+  warns: { c: AMBER, w: 2.8 },
+  learned_from: { c: VIOLET, w: 2.4, dash: true },
+};
+
+/** Collision/drawing radius for a node — scaled by its 0..1 weight. */
+export function nodeRadius(node: PodGraphNode): number {
+  const base = node.kind === 'collision' || node.kind === 'intervention' ? 14 : 13;
+  return base + Math.max(0, Math.min(1, node.weight)) * 7;
+}
+
+export function statusColor(status: string): string {
+  if (status === 'risk') return RED;
+  if (status === 'learned') return VIOLET;
+  if (status === 'active') return BLUE;
+  return 'var(--muted-foreground)';
+}
+
+export type Mode = 'risk' | 'learn' | 'all';
+
+export interface Highlight {
+  nodes: Set<string>;
+  edges: Set<string>;
+}
+
+/**
+ * The lit set for the current mode/selection. A selected node lights its
+ * incident edges + neighbors; otherwise the mode lights the risk or learning
+ * chain (collision → intervention → learned_from). `all` lights everything.
+ */
+export function highlightFor(graph: PodGraph, mode: Mode, selected: string | null): Highlight | null {
+  if (selected) {
+    const es = graph.edges.filter((e) => e.source === selected || e.target === selected);
+    return {
+      nodes: new Set([selected, ...es.flatMap((e) => [e.source, e.target])]),
+      edges: new Set(es.map((e) => e.id)),
+    };
+  }
+  if (mode === 'all') return null;
+  const kinds: PodGraphEdge['kind'][] =
+    mode === 'risk' ? ['collides', 'warns', 'learned_from'] : ['learned_from', 'warns'];
+  const collisions = new Set(graph.nodes.filter((n) => n.kind === 'collision').map((n) => n.id));
+  const es = graph.edges.filter(
+    (e) =>
+      kinds.includes(e.kind) ||
+      (mode === 'risk' && (collisions.has(e.target) || collisions.has(e.source))),
+  );
+  return {
+    nodes: new Set(es.flatMap((e) => [e.source, e.target])),
+    edges: new Set(es.map((e) => e.id)),
+  };
+}
+
+function joinNames(ids: string[], label: (id: string) => string): string {
+  const u = [...new Set(ids)].map(label);
+  if (u.length <= 1) return u[0] ?? '';
+  if (u.length === 2) return `${u[0]} and ${u[1]}`;
+  return `${u.slice(0, -1).join(', ')} and ${u[u.length - 1]}`;
+}
+
+/**
+ * A plain-English walk of the flow through a node — what PodMan saw, flagged,
+ * suggested, and learned — so clicking a node explains the path, not just shows
+ * attributes. Built by traversing the node's incident edges.
+ */
+export function flowNarrative(graph: PodGraph, nodeId: string): string {
+  const byId = new Map(graph.nodes.map((n) => [n.id, n]));
+  const node = byId.get(nodeId);
+  if (!node) return '';
+  const label = (id: string): string => byId.get(id)?.label ?? id;
+  const out = graph.edges.filter((e) => e.source === nodeId);
+  const inc = graph.edges.filter((e) => e.target === nodeId);
+
+  switch (node.kind) {
+    case 'engineer': {
+      const edits = out.filter((e) => e.kind === 'editing').map((e) => e.target);
+      const collisions = out.filter((e) => e.kind === 'collides');
+      const owns = out.filter((e) => e.kind === 'owns').map((e) => label(e.target));
+      const learned = inc.some((e) => e.kind === 'learned_from');
+      const parts: string[] = [];
+      if (edits.length) parts.push(`${node.label} is working in ${joinNames(edits, label)}.`);
+      if (collisions.length)
+        parts.push(
+          `PodMan flagged ${collisions.length} overlap${collisions.length === 1 ? '' : 's'} involving ${node.label}.`,
+        );
+      if (learned)
+        parts.push(
+          `From an accepted intervention PodMan learned ${node.label} owns ${owns[0] ?? 'this file'} — retained across sessions.`,
+        );
+      else if (owns.length) parts.push(`PodMan has ${node.label} owning ${joinNames(owns, (s) => s)}.`);
+      return parts.join(' ') || `${node.label} has no active flow right now.`;
+    }
+    case 'file': {
+      const editors = inc.filter((e) => e.kind === 'editing' || e.kind === 'owns').map((e) => e.source);
+      const hasCollision = out.some((e) => e.kind === 'touches');
+      const parts: string[] = [];
+      if (editors.length) parts.push(`${node.label} is being edited by ${joinNames(editors, label)}.`);
+      if (hasCollision)
+        parts.push('Two of those edits overlap before push, so PodMan opened a collision on it.');
+      return parts.join(' ') || node.summary || node.label;
+    }
+    case 'collision': {
+      const engineers = inc.filter((e) => e.kind === 'collides').map((e) => e.source);
+      const fileEdge = inc.find((e) => e.kind === 'touches');
+      const file = fileEdge ? label(fileEdge.source) : 'the same file';
+      const intervention = out.find((e) => e.kind === 'warns');
+      let s = `${joinNames(engineers, label) || 'Two engineers'} are both editing ${file} before pushing — the overlap git can't see.`;
+      if (intervention) s += ` PodMan stepped in and suggested a ${label(intervention.target)}.`;
+      return s;
+    }
+    case 'intervention': {
+      const colEdge = inc.find((e) => e.kind === 'warns');
+      const learned = out.find((e) => e.kind === 'learned_from');
+      // Resolve the collision's underlying file via its touches edge (file → collision).
+      let file = '';
+      if (colEdge) {
+        const fileEdge = graph.edges.find((e) => e.kind === 'touches' && e.target === colEdge.source);
+        file = fileEdge ? label(fileEdge.source) : '';
+      }
+      let s = `PodMan offered a ${node.label}${file ? ` for the overlap on ${file}` : ''}.`;
+      if (learned)
+        s += ` The pod accepted it, so PodMan learned ${label(learned.target)} owns ${file || 'the file'} — the graph got sharper.`;
+      return s;
+    }
+    case 'feature': {
+      const contributors = inc.filter((e) => e.kind === 'owns' || e.kind === 'touches').map((e) => e.source);
+      return contributors.length
+        ? `${node.label} is built on work by ${joinNames(contributors, label)}.`
+        : node.summary || node.label;
+    }
+    default:
+      return node.summary ?? '';
+  }
+}
+
+/** Short explainer for the current view when nothing is selected. */
+export function modeBlurb(mode: Mode): string {
+  if (mode === 'learn')
+    return 'The violet learned_from links are ownership PodMan kept from accepted interventions — the graph sharpens every session.';
+  if (mode === 'all')
+    return 'Everyone, every file, and every collision and intervention PodMan is tracking for this pod.';
+  return 'The lit path: files where two editors collide before push → the nudge PodMan sent → what it learned.';
+}
+
+export const NODE_LEGEND: Array<{ label: string; swatch: CSSProperties }> = [
+  { label: 'engineer', swatch: { background: BLUE } },
+  { label: 'file', swatch: { border: `2px solid ${SLATE}` } },
+  { label: 'feature', swatch: { background: AMBER, borderRadius: '50%' } },
+  { label: 'collision', swatch: { background: RED, clipPath: 'polygon(50% 0,100% 100%,0 100%)' } },
+  { label: 'intervention', swatch: { background: VIOLET, transform: 'rotate(45deg)' } },
+];
+
+export const EDGE_LEGEND: Array<{ label: string; color: string; dash?: boolean }> = [
+  { label: 'collides', color: RED },
+  { label: 'warns', color: AMBER },
+  { label: 'learned_from', color: VIOLET, dash: true },
+  { label: 'owns', color: BLUE },
+  { label: 'editing', color: SLATE_EDGE },
+  { label: 'touches', color: SLATE_FAINT },
+];

frontend/src/components/graph/forceSim.ts

@@ -0,0 +1,284 @@
+/**
+ * A tiny dependency-free force-directed layout — the same family of forces as
+ * d3-force (charge repulsion, link springs, centering, collision) integrated
+ * with velocity-Verlet and an annealing `alpha`. Kept in-house so the dynamic
+ * graph adds no new package / lockfile churn to a fast-moving shared `main`.
+ *
+ * Usage: `setData()` (diff-preserving — existing nodes keep their position),
+ * then drive `tick()` from a requestAnimationFrame loop until `settled()`.
+ */
+
+export interface SimNodeInput {
+  id: string;
+  /** Drawing/collision radius. */
+  radius: number;
+  /** Initial position hint (e.g. the server layout), used only for new nodes. */
+  seedX: number;
+  seedY: number;
+}
+
+export interface SimLinkInput {
+  source: string;
+  target: string;
+  /** Preferred rest length of the spring. */
+  distance: number;
+  /** 0..1 spring strength. */
+  strength: number;
+}
+
+export interface SimNode {
+  id: string;
+  x: number;
+  y: number;
+  vx: number;
+  vy: number;
+  /** When non-null the node is pinned (dragged) and forces don't move it. */
+  fx: number | null;
+  fy: number | null;
+  radius: number;
+}
+
+const ALPHA_MIN = 0.001;
+const ALPHA_DECAY = 1 - Math.pow(ALPHA_MIN, 1 / 300); // settle in ~300 ticks
+const FRICTION = 0.62; // velocity retained per tick
+const REPEL = 4400; // charge repulsion strength — must dominate centering or the graph collapses
+const LINK_K = 0.45; // spring stiffness multiplier
+const CENTER_STRENGTH = 0.014; // gentle positional pull — only keeps the cloud roughly centered
+const RECENTER = 0.5; // per-tick centroid recentering (no compression, keeps graph framed)
+const COLLIDE_PAD = 12;
+const COLLIDE_STRENGTH = 1; // hard separation so linked nodes never stack
+const COLLIDE_ITERS = 2;
+const BOUND_PAD = 30; // keep nodes this far inside the canvas edges
+
+export class ForceSim {
+  nodes: SimNode[] = [];
+  links: SimLinkInput[] = [];
+  alpha = 1;
+  private byId = new Map<string, SimNode>();
+  private alphaTarget = 0;
+  private center: { x: number; y: number };
+  private width: number;
+  private height: number;
+
+  constructor(width: number, height: number) {
+    this.width = width;
+    this.height = height;
+    this.center = { x: width / 2, y: height / 2 };
+  }
+
+  settled(): boolean {
+    return this.alpha < ALPHA_MIN && this.alphaTarget === 0;
+  }
+
+  reheat(a = 0.7): void {
+    this.alpha = Math.max(this.alpha, a);
+  }
+
+  /** Hold the simulation warm while dragging, then release. */
+  setActive(active: boolean): void {
+    this.alphaTarget = active ? 0.18 : 0;
+    if (active) this.reheat(0.25);
+  }
+
+  get(id: string): SimNode | undefined {
+    return this.byId.get(id);
+  }
+
+  pin(id: string, x: number, y: number): void {
+    const n = this.byId.get(id);
+    if (n) {
+      n.fx = x;
+      n.fy = y;
+    }
+  }
+
+  unpin(id: string): void {
+    const n = this.byId.get(id);
+    if (n) {
+      n.fx = null;
+      n.fy = null;
+    }
+  }
+
+  /** Replace the graph, preserving the positions/pins of nodes that persist. */
+  setData(nodeInputs: SimNodeInput[], linkInputs: SimLinkInput[]): { added: string[] } {
+    const prev = this.byId;
+    const next = new Map<string, SimNode>();
+    const added: string[] = [];
+    for (const inp of nodeInputs) {
+      const old = prev.get(inp.id);
+      if (old) {
+        old.radius = inp.radius;
+        next.set(inp.id, old);
+      } else {
+        next.set(inp.id, {
+          id: inp.id,
+          x: inp.seedX + (Math.random() - 0.5) * 14,
+          y: inp.seedY + (Math.random() - 0.5) * 14,
+          vx: 0,
+          vy: 0,
+          fx: null,
+          fy: null,
+          radius: inp.radius,
+        });
+        added.push(inp.id);
+      }
+    }
+    this.byId = next;
+    this.nodes = [...next.values()];
+    this.links = linkInputs.filter((l) => next.has(l.source) && next.has(l.target));
+    return { added };
+  }
+
+  /** Advance one step. Returns false when already settled (no work done). */
+  tick(): boolean {
+    if (this.settled()) return false;
+    this.alpha += (this.alphaTarget - this.alpha) * ALPHA_DECAY;
+    const a = this.alpha;
+    this.applyCharge(a);
+    this.applyLinks(a);
+    this.applyCenter(a);
+    for (let k = 0; k < COLLIDE_ITERS; k++) this.applyCollide();
+    const maxX = this.width - BOUND_PAD;
+    const maxY = this.height - BOUND_PAD;
+    for (const n of this.nodes) {
+      if (n.fx != null) {
+        n.x = n.fx;
+        n.vx = 0;
+      } else {
+        n.vx *= FRICTION;
+        n.x += n.vx;
+        if (n.x < BOUND_PAD) {
+          n.x = BOUND_PAD;
+          n.vx = 0;
+        } else if (n.x > maxX) {
+          n.x = maxX;
+          n.vx = 0;
+        }
+      }
+      if (n.fy != null) {
+        n.y = n.fy;
+        n.vy = 0;
+      } else {
+        n.vy *= FRICTION;
+        n.y += n.vy;
+        if (n.y < BOUND_PAD) {
+          n.y = BOUND_PAD;
+          n.vy = 0;
+        } else if (n.y > maxY) {
+          n.y = maxY;
+          n.vy = 0;
+        }
+      }
+    }
+    return true;
+  }
+
+  private applyCharge(alpha: number): void {
+    const ns = this.nodes;
+    for (let i = 0; i < ns.length; i++) {
+      const a = ns[i];
+      if (!a) continue;
+      for (let j = i + 1; j < ns.length; j++) {
+        const b = ns[j];
+        if (!b) continue;
+        let dx = b.x - a.x;
+        let dy = b.y - a.y;
+        let d2 = dx * dx + dy * dy;
+        if (d2 === 0) {
+          dx = (j - i) * 0.5;
+          dy = (i + 1) * 0.4;
+          d2 = dx * dx + dy * dy;
+        }
+        const dist = Math.sqrt(d2);
+        const force = (REPEL * alpha) / d2;
+        const ux = dx / dist;
+        const uy = dy / dist;
+        a.vx -= ux * force;
+        a.vy -= uy * force;
+        b.vx += ux * force;
+        b.vy += uy * force;
+      }
+    }
+  }
+
+  private applyLinks(alpha: number): void {
+    for (const link of this.links) {
+      const s = this.byId.get(link.source);
+      const t = this.byId.get(link.target);
+      if (!s || !t) continue;
+      let dx = t.x - s.x;
+      let dy = t.y - s.y;
+      let d2 = dx * dx + dy * dy;
+      if (d2 === 0) {
+        dx = 0.5;
+        dy = 0.5;
+        d2 = 0.5;
+      }
+      const dist = Math.sqrt(d2);
+      const k = ((dist - link.distance) / dist) * alpha * link.strength * LINK_K;
+      const mx = dx * k * 0.5;
+      const my = dy * k * 0.5;
+      s.vx += mx;
+      s.vy += my;
+      t.vx -= mx;
+      t.vy -= my;
+    }
+  }
+
+  private applyCenter(alpha: number): void {
+    const n = this.nodes.length;
+    if (!n) return;
+    // Recenter the whole cloud so its centroid sits at canvas center (this does
+    // NOT compress the layout — repulsion/links set the spread), plus a gentle
+    // positional pull so stray/isolated nodes don't park against the edge.
+    let cx = 0;
+    let cy = 0;
+    for (const nd of this.nodes) {
+      cx += nd.x;
+      cy += nd.y;
+    }
+    cx = (this.center.x - cx / n) * RECENTER;
+    cy = (this.center.y - cy / n) * RECENTER;
+    for (const nd of this.nodes) {
+      if (nd.fx == null) {
+        nd.x += cx;
+        nd.vx += (this.center.x - nd.x) * CENTER_STRENGTH * alpha;
+      }
+      if (nd.fy == null) {
+        nd.y += cy;
+        nd.vy += (this.center.y - nd.y) * CENTER_STRENGTH * alpha;
+      }
+    }
+  }
+
+  private applyCollide(): void {
+    const ns = this.nodes;
+    for (let i = 0; i < ns.length; i++) {
+      const a = ns[i];
+      if (!a) continue;
+      for (let j = i + 1; j < ns.length; j++) {
+        const b = ns[j];
+        if (!b) continue;
+        let dx = b.x - a.x;
+        let dy = b.y - a.y;
+        const d2 = dx * dx + dy * dy;
+        const min = a.radius + b.radius + COLLIDE_PAD;
+        if (d2 >= min * min) continue;
+        let dist = Math.sqrt(d2);
+        if (dist === 0) {
+          dx = j - i;
+          dy = i + 1;
+          dist = Math.sqrt(dx * dx + dy * dy) || 1;
+        }
+        const push = ((min - dist) / dist) * 0.5 * COLLIDE_STRENGTH;
+        const ox = dx * push;
+        const oy = dy * push;
+        if (a.fx == null) a.x -= ox;
+        if (a.fy == null) a.y -= oy;
+        if (b.fx == null) b.x += ox;
+        if (b.fy == null) b.y += oy;
+      }
+    }
+  }
+}

frontend/src/hooks/use-pod-activity.ts

@@ -0,0 +1,63 @@
+import { useEffect, useMemo, useState } from 'react';
+import type { PodActivityEvent } from '@podman/shared';
+import { getPodActivity, podActivityStreamUrl } from '../lib/api';
+
+export function usePodActivity(podId: string | null, me: string) {
+  const [events, setEvents] = useState<PodActivityEvent[]>([]);
+  const [connected, setConnected] = useState(false);
+  const [error, setError] = useState<string | null>(null);
+
+  useEffect(() => {
+    if (!podId) return;
+    let alive = true;
+    const load = async () => {
+      try {
+        const snapshot = await getPodActivity(podId);
+        if (alive) {
+          setEvents(snapshot);
+          setError(null);
+        }
+      } catch (e) {
+        if (alive) setError((e as Error).message);
+      }
+    };
+
+    void load();
+    const source = new EventSource(podActivityStreamUrl(podId));
+    source.addEventListener('open', () => {
+      if (alive) setConnected(true);
+    });
+    source.addEventListener('snapshot', (event) => {
+      if (!alive) return;
+      setEvents(JSON.parse((event as MessageEvent<string>).data) as PodActivityEvent[]);
+      setConnected(true);
+      setError(null);
+    });
+    source.addEventListener('error', () => {
+      if (alive) {
+        setConnected(false);
+        setError('Realtime activity stream reconnecting');
+      }
+    });
+
+    return () => {
+      alive = false;
+      source.close();
+    };
+  }, [podId]);
+
+  return useMemo(() => {
+    const mine = events.filter((event) => belongsTo(event, me));
+    const team = events.filter((event) => !belongsTo(event, me));
+    return { events, mine, team, connected, error };
+  }, [connected, error, events, me]);
+}
+
+function belongsTo(event: PodActivityEvent, me: string): boolean {
+  const normalized = me.trim().toLowerCase();
+  if (!normalized) return false;
+  const names = [event.actor, ...(event.actors ?? [])]
+    .filter(Boolean)
+    .map((name) => name!.trim().toLowerCase());
+  return names.includes(normalized);
+}

frontend/src/lib/api.ts

@@ -1,4 +1,12 @@
-import type { InterventionOutcome, Pod, PodInput } from '@podman/shared';
+import type {
+  InterventionOutcome,
+  HermesJob,
+  HermesJobEvent,
+  MemberWorkHistory,
+  Pod,
+  PodActivityEvent,
+  PodInput,
+} from '@podman/shared';
 
 const BACKEND_URL =
   import.meta.env.VITE_BACKEND_URL ||
@@ -6,11 +14,53 @@ const BACKEND_URL =
     ? 'http://localhost:8787'
     : '');
 
+type AuthTokenGetter = () => Promise<string | null>;
+
+let authTokenGetter: AuthTokenGetter | null = null;
+
+export function setAuthTokenGetter(getter: AuthTokenGetter | null): void {
+  authTokenGetter = getter;
+}
+
+async function requestHeaders(init?: HeadersInit): Promise<Headers> {
+  const next = new Headers(init);
+  const token = await authTokenGetter?.();
+  if (token) next.set('authorization', `Bearer ${token}`);
+  return next;
+}
+
+async function apiFetch(input: string, init: RequestInit = {}): Promise<Response> {
+  return fetch(input, {
+    ...init,
+    headers: await requestHeaders(init.headers),
+  });
+}
+
 export interface MemoryStats {
   observations: number;
   collisions: number;
   interventions: number;
   outcomes: number;
+  userPodContext?: number;
+}
+
+export interface LiveConversationSession {
+  sessionId: string;
+  podId: string;
+  identity: string;
+  displayName: string;
+  room: string;
+  url: string;
+  token: string;
+  startedAt: string;
+  lastEventAt?: string;
+  endedAt?: string;
+}
+
+export interface UserProfilePayload {
+  displayName?: string;
+  email?: string;
+  imageUrl?: string;
 }
 
 async function json<T>(res: Response): Promise<T> {
@@ -21,16 +71,19 @@ async function json<T>(res: Response): Promise<T> {
   return res.json() as Promise<T>;
 }
 
+const JSON_HEADERS = { 'content-type': 'application/json' } as const;
+
 /** Mint a LiveKit token from the backend. */
 export async function fetchToken(params: {
   room: string;
   identity: string;
   name: string;
   githubLogin?: string;
+  profile?: UserProfilePayload;
 }): Promise<{ token: string; url: string }> {
-  const res = await fetch(`${BACKEND_URL}/api/token`, {
+  const res = await apiFetch(`${BACKEND_URL}/api/token`, {
     method: 'POST',
-    headers: { 'content-type': 'application/json' },
+    headers: JSON_HEADERS,
     body: JSON.stringify(params),
   });
   return json(res);
@@ -38,9 +91,9 @@ export async function fetchToken(params: {
 
 /** Record an intervention outcome for the policy learning loop. */
 export async function postOutcome(outcome: InterventionOutcome): Promise<void> {
-  const res = await fetch(`${BACKEND_URL}/api/outcome`, {
+  const res = await apiFetch(`${BACKEND_URL}/api/outcome`, {
     method: 'POST',
-    headers: { 'content-type': 'application/json' },
+    headers: JSON_HEADERS,
     body: JSON.stringify(outcome),
   });
   if (!res.ok) throw new Error(`outcome post failed: ${res.status}`);
@@ -52,9 +105,9 @@ export async function createSyncPr(input: {
   summary?: string;
 }): Promise<{ url: string; number: number }> {
   return json(
-    await fetch(`${BACKEND_URL}/api/sync-pr`, {
+    await apiFetch(`${BACKEND_URL}/api/sync-pr`, {
       method: 'POST',
-      headers: { 'content-type': 'application/json' },
+      headers: JSON_HEADERS,
       body: JSON.stringify(input),
     }),
   );
@@ -63,58 +116,151 @@ export async function createSyncPr(input: {
 // --- Pods CRUD ---
 
 export async function listPods(): Promise<Pod[]> {
-  return json(await fetch(`${BACKEND_URL}/api/pods`));
+  return json(await apiFetch(`${BACKEND_URL}/api/pods`));
 }
 
 /** Display names currently connected per pod id (= LiveKit room name). */
 export async function getPresence(): Promise<Record<string, string[]>> {
-  return json(await fetch(`${BACKEND_URL}/api/presence`));
+  return json(await apiFetch(`${BACKEND_URL}/api/presence`));
 }
 
 export async function getMemoryStats(): Promise<MemoryStats> {
-  return json(await fetch(`${BACKEND_URL}/api/memory/stats`));
+  return json(await apiFetch(`${BACKEND_URL}/api/memory/stats`));
 }
 
-export async function createPod(input: PodInput): Promise<Pod> {
+export async function getPodActivity(id: string, limit = 80): Promise<PodActivityEvent[]> {
   return json(
-    await fetch(`${BACKEND_URL}/api/pods`, {
+    await apiFetch(`${BACKEND_URL}/api/pods/${encodeURIComponent(id)}/activity?limit=${limit}`),
+  );
+}
+
+export function podActivityStreamUrl(id: string): string {
+  return `${BACKEND_URL}/api/pods/${encodeURIComponent(id)}/activity/stream`;
+}
+
+/** URL of the pod's generated background-music MP3 (looped client-side). */
+export function podMusicUrl(id: string): string {
+  return `${BACKEND_URL}/api/pods/${encodeURIComponent(id)}/music`;
+}
+
+export async function getMemberWorkHistory(
+  podId: string,
+  member: string,
+): Promise<MemberWorkHistory> {
+  return json(
+    await apiFetch(
+      `${BACKEND_URL}/api/pods/${encodeURIComponent(podId)}/members/${encodeURIComponent(
+        member,
+      )}/history?hours=24&limit=80`,
+    ),
+  );
+}
+
+export async function createPod(input: PodInput, profile?: UserProfilePayload): Promise<Pod> {
+  return json(
+    await apiFetch(`${BACKEND_URL}/api/pods`, {
       method: 'POST',
-      headers: { 'content-type': 'application/json' },
-      body: JSON.stringify(input),
+      headers: JSON_HEADERS,
+      body: JSON.stringify({ ...input, profile }),
     }),
   );
 }
 
 export async function updatePod(id: string, patch: PodInput): Promise<Pod> {
   return json(
-    await fetch(`${BACKEND_URL}/api/pods/${encodeURIComponent(id)}`, {
+    await apiFetch(`${BACKEND_URL}/api/pods/${encodeURIComponent(id)}`, {
       method: 'PATCH',
-      headers: { 'content-type': 'application/json' },
+      headers: JSON_HEADERS,
       body: JSON.stringify(patch),
     }),
   );
 }
 
 export async function deletePod(id: string): Promise<void> {
-  const res = await fetch(`${BACKEND_URL}/api/pods/${encodeURIComponent(id)}`, {
+  const res = await apiFetch(`${BACKEND_URL}/api/pods/${encodeURIComponent(id)}`, {
     method: 'DELETE',
   });
   if (!res.ok) throw new Error(`delete pod failed: ${res.status}`);
 }
 
-export async function addMember(id: string, name: string): Promise<Pod> {
+export async function addMember(
+  id: string,
+  name: string,
+  profile?: UserProfilePayload,
+): Promise<Pod> {
   return json(
-    await fetch(`${BACKEND_URL}/api/pods/${encodeURIComponent(id)}/members`, {
+    await apiFetch(`${BACKEND_URL}/api/pods/${encodeURIComponent(id)}/members`, {
       method: 'POST',
-      headers: { 'content-type': 'application/json' },
-      body: JSON.stringify({ name }),
+      headers: JSON_HEADERS,
+      body: JSON.stringify({ name, profile }),
     }),
   );
 }
 
+export async function testPodVoice(id: string): Promise<void> {
+  const res = await apiFetch(`${BACKEND_URL}/api/pods/${encodeURIComponent(id)}/voice-test`, {
+    method: 'POST',
+    headers: JSON_HEADERS,
+    body: JSON.stringify({
+      message: 'PodMan voice test. Gemini TTS is playing through LiveKit.',
+    }),
+  });
+  if (!res.ok) throw new Error(`voice test failed: ${res.status}`);
+}
+
+export async function startLiveConversation(
+  podId: string,
+  input: { identity: string; displayName?: string },
+): Promise<LiveConversationSession> {
+  return json(
+    await apiFetch(`${BACKEND_URL}/api/pods/${encodeURIComponent(podId)}/live-conversation/start`, {
+      method: 'POST',
+      headers: JSON_HEADERS,
+      body: JSON.stringify(input),
+    }),
+  );
+}
+
+export async function stopLiveConversation(podId: string, sessionId: string): Promise<void> {
+  const res = await apiFetch(
+    `${BACKEND_URL}/api/pods/${encodeURIComponent(
+      podId,
+    )}/live-conversation/${encodeURIComponent(sessionId)}/stop`,
+    { method: 'POST' },
+  );
+  if (!res.ok) throw new Error(`live conversation stop failed: ${res.status}`);
+}
+
+export async function getLiveConversationHermesJob(
+  podId: string,
+  sessionId: string,
+): Promise<{ job: HermesJob | null; events: HermesJobEvent[] }> {
+  return json(
+    await apiFetch(
+      `${BACKEND_URL}/api/pods/${encodeURIComponent(
+        podId,
+      )}/live-conversation/${encodeURIComponent(sessionId)}/hermes-job`,
+    ),
+  );
+}
+
+export async function abortLiveConversationHermesJob(
+  podId: string,
+  sessionId: string,
+): Promise<{ job: HermesJob | null }> {
+  return json(
+    await apiFetch(
+      `${BACKEND_URL}/api/pods/${encodeURIComponent(
+        podId,
+      )}/live-conversation/${encodeURIComponent(sessionId)}/hermes-job/abort`,
+      { method: 'POST' },
+    ),
+  );
+}
+
 export async function removeMember(id: string, name: string): Promise<Pod> {
   return json(
-    await fetch(
+    await apiFetch(
       `${BACKEND_URL}/api/pods/${encodeURIComponent(id)}/members/${encodeURIComponent(name)}`,
       { method: 'DELETE' },
     ),

frontend/src/lib/beat.ts

@@ -75,3 +75,42 @@ export function startBeat(): BeatHandle {
     },
   };
 }
+
+/**
+ * Load an MP3 from `url` and loop it as an audio MediaStreamTrack to publish into
+ * a LiveKit room (and play on local speakers). Used for pod background music
+ * (Lyria-generated). Pure Web Audio — no asset bundling.
+ */
+export async function startMusic(url: string): Promise<BeatHandle> {
+  const ctx = new AudioContext();
+  await ctx.resume();
+  const res = await fetch(url);
+  if (!res.ok) throw new Error(`music fetch failed: ${res.status}`);
+  const buffer = await ctx.decodeAudioData(await res.arrayBuffer());
+
+  const dest = ctx.createMediaStreamDestination();
+  const master = ctx.createGain();
+  master.gain.value = 0.6;
+  master.connect(dest); // -> published track (remote listeners)
+  master.connect(ctx.destination); // -> local speakers (publisher)
+
+  const src = ctx.createBufferSource();
+  src.buffer = buffer;
+  src.loop = true;
+  src.connect(master);
+  src.start();
+
+  const track = dest.stream.getAudioTracks()[0]!;
+  return {
+    track,
+    stop: () => {
+      try {
+        src.stop();
+      } catch {
+        /* already stopped */
+      }
+      track.stop();
+      void ctx.close();
+    },
+  };
+}

frontend/src/lib/graph.ts

@@ -8,3 +8,8 @@ export async function fetchPodGraph(podId: string): Promise<PodGraph> {
   if (!res.ok) throw new Error(`graph request failed: ${res.status}`);
   return res.json() as Promise<PodGraph>;
 }
+
+/** WebSocket URL for the live event bus — used to nudge the graph to refetch. */
+export function backendEventsUrl(): string {
+  return `${BACKEND_URL.replace(/^http/, 'ws')}/api/events`;
+}

frontend/src/lib/pod.ts

@@ -11,11 +11,17 @@ export async function fetchPodToken(
   podId: string,
   identity: string,
   name: string,
+  getToken?: () => Promise<string | null>,
+  profile?: { displayName?: string; email?: string; imageUrl?: string },
 ): Promise<{ token: string; url: string }> {
+  const clerkToken = await getToken?.();
   const res = await fetch(`${BACKEND_URL}/api/token`, {
     method: 'POST',
-    headers: { 'content-type': 'application/json' },
-    body: JSON.stringify({ room: podId, identity, name }),
+    headers: {
+      'content-type': 'application/json',
+      ...(clerkToken ? { authorization: `Bearer ${clerkToken}` } : {}),
+    },
+    body: JSON.stringify({ room: podId, identity, name, profile }),
   });
   if (!res.ok) throw new Error(`token request failed: ${res.status}`);
   return res.json();
@@ -33,8 +39,14 @@ export type JoinResult = { mode: 'live'; room: Room } | { mode: 'dev'; room: nul
  * connected — screen sharing is a separate, deliberate action (see PodView) so
  * a denied/slow screen prompt never blocks or fails the join.
  */
-export async function joinPod(podId: string, identity: string, name: string): Promise<JoinResult> {
-  const { token, url } = await fetchPodToken(podId, identity, name);
+export async function joinPod(
+  podId: string,
+  identity: string,
+  name: string,
+  getToken?: () => Promise<string | null>,
+  profile?: { displayName?: string; email?: string; imageUrl?: string },
+): Promise<JoinResult> {
+  const { token, url } = await fetchPodToken(podId, identity, name, getToken, profile);
 
   if (!isLiveKitConfigured(url)) {
     console.warn('[podman] LiveKit not configured — dev mock join');

frontend/src/livekit/useBeat.ts

@@ -0,0 +1,150 @@
+import { useCallback, useEffect, useRef, useState } from 'react';
+import { RoomEvent, type Room } from 'livekit-client';
+import { DATA_TOPIC, type DataMessage } from '@podman/shared';
+import { startBeat, startMusic, type BeatHandle } from '../lib/beat.js';
+
+/** Name of the test-audio track; its presence in the room IS the shared state. */
+export const BEAT_TRACK = 'podman-beat';
+
+export interface BeatState {
+  /** Is the test audio playing anywhere in the pod? */
+  on: boolean;
+  /** Display name of the participant who started it (the owner). */
+  by: string | null;
+  /** Do I own the beat track (so I can stop it directly)? */
+  mine: boolean;
+}
+
+const OFF: BeatState = { on: false, by: null, mine: false };
+
+/**
+ * Shared, pod-wide test audio. One participant publishes the `podman-beat`
+ * track; everyone hears it and sees the same on/off state, derived directly
+ * from the track's presence (self-syncing across joins/leaves). Any participant
+ * can stop it: non-owners send BEAT_STOP and the owner unpublishes.
+ */
+export function useBeat(room: Room | null, musicUrl?: string) {
+  const [beat, setBeat] = useState<BeatState>(OFF);
+  const beatRef = useRef<BeatHandle | null>(null);
+
+  const stopLocal = useCallback(async () => {
+    const handle = beatRef.current;
+    if (!handle) return;
+    beatRef.current = null;
+    try {
+      await room?.localParticipant.unpublishTrack(handle.track);
+    } finally {
+      handle.stop();
+    }
+  }, [room]);
+
+  // Derive the shared state from the podman-beat track across all participants.
+  useEffect(() => {
+    if (!room) {
+      setBeat(OFF);
+      return;
+    }
+    const recompute = () => {
+      const lp = room.localParticipant;
+      const localPub = [...lp.trackPublications.values()].find((p) => p.trackName === BEAT_TRACK);
+      if (localPub) {
+        setBeat({ on: true, by: lp.name || lp.identity, mine: true });
+        return;
+      }
+      for (const p of room.remoteParticipants.values()) {
+        const pub = [...p.trackPublications.values()].find((tp) => tp.trackName === BEAT_TRACK);
+        if (pub) {
+          setBeat({ on: true, by: p.name || p.identity, mine: false });
+          return;
+        }
+      }
+      setBeat(OFF);
+    };
+
+    recompute();
+    const events = [
+      RoomEvent.LocalTrackPublished,
+      RoomEvent.LocalTrackUnpublished,
+      RoomEvent.TrackPublished,
+      RoomEvent.TrackUnpublished,
+      RoomEvent.TrackSubscribed,
+      RoomEvent.TrackUnsubscribed,
+      RoomEvent.ParticipantConnected,
+      RoomEvent.ParticipantDisconnected,
+    ] as const;
+    events.forEach((e) => room.on(e, recompute));
+    return () => {
+      events.forEach((e) => room.off(e, recompute));
+    };
+  }, [room]);
+
+  // The owner honors stop requests from any participant.
+  useEffect(() => {
+    if (!room) return;
+    const onData = (payload: Uint8Array, _p: unknown, _k: unknown, topic?: string) => {
+      if (topic !== DATA_TOPIC) return;
+      let msg: DataMessage;
+      try {
+        msg = JSON.parse(new TextDecoder().decode(payload)) as DataMessage;
+      } catch {
+        return;
+      }
+      if (msg.type === 'BEAT_STOP') void stopLocal();
+    };
+    room.on(RoomEvent.DataReceived, onData);
+    return () => {
+      room.off(RoomEvent.DataReceived, onData);
+    };
+  }, [room, stopLocal]);
+
+  // Tear down my own track on unmount (e.g. leaving the pod).
+  const stopLocalRef = useRef(stopLocal);
+  stopLocalRef.current = stopLocal;
+  const startingRef = useRef(false);
+  const unmountedRef = useRef(false);
+  useEffect(() => {
+    return () => {
+      unmountedRef.current = true;
+      void stopLocalRef.current();
+    };
+  }, []);
+
+  const toggleBeat = useCallback(async () => {
+    if (!room) return;
+    // `beatRef` is the synchronous source of truth for "do I own it" — `beat.mine`
+    // lags behind the LiveKit track events that recompute it, so gate on the ref.
+    if (beatRef.current) {
+      await stopLocal();
+      return;
+    }
+    if (beat.on) {
+      // Someone else owns it — can't unpublish their track, so ask them to stop.
+      await room.startAudio().catch(() => {});
+      await room.localParticipant.publishData(
+        new TextEncoder().encode(JSON.stringify({ type: 'BEAT_STOP' } satisfies DataMessage)),
+        { reliable: true, topic: DATA_TOPIC },
+      );
+      return;
+    }
+    // Start it. Guard against rapid double-clicks publishing two tracks before the
+    // LocalTrackPublished event has had a chance to update state.
+    if (startingRef.current) return;
+    startingRef.current = true;
+    try {
+      await room.startAudio().catch(() => {}); // unlock playback from this gesture
+      if (unmountedRef.current) return;
+      const handle = musicUrl ? await startMusic(musicUrl) : startBeat();
+      beatRef.current = handle;
+      await room.localParticipant.publishTrack(handle.track, { name: BEAT_TRACK });
+      if (unmountedRef.current) await stopLocal(); // left mid-publish — clean up
+    } catch (e) {
+      beatRef.current?.stop();
+      beatRef.current = null;
+      throw e;
+    } finally {
+      startingRef.current = false;
+    }
+  }, [room, beat, stopLocal, musicUrl]);
+
+  return { beat, toggleBeat };
+}

frontend/src/livekit/useInterventions.ts

@@ -4,6 +4,27 @@ import type { DataMessage, HermesMessage, Intervention, InterventionStatus } fro
 import { DATA_TOPIC } from '@podman/shared';
 import { createSyncPr, postOutcome } from '../lib/api';
 
+const browserTtsFallbackEnabled = import.meta.env.VITE_ENABLE_BROWSER_TTS_FALLBACK === 'true';
+
+/** Speak a cue in the browser only when the explicit fallback flag is enabled. */
+export function speakInBrowser(text: string): void {
+  if (!browserTtsFallbackEnabled) return;
+  if (typeof window === 'undefined' || !('speechSynthesis' in window) || !text) return;
+  const u = new SpeechSynthesisUtterance(text);
+  u.rate = 1.05;
+  window.speechSynthesis.cancel(); // drop any queued cue so the latest wins
+  window.speechSynthesis.speak(u);
+}
+
+/** Unlock speechSynthesis from a user gesture when the browser fallback is enabled. */
+export function primeSpeech(): void {
+  if (!browserTtsFallbackEnabled) return;
+  if (typeof window === 'undefined' || !('speechSynthesis' in window)) return;
+  const u = new SpeechSynthesisUtterance(' ');
+  u.volume = 0;
+  window.speechSynthesis.speak(u);
+}
+
 export function useInterventions(room: Room | null) {
   const [active, setActive] = useState<Intervention | null>(null);
   const [hermes, setHermes] = useState<HermesMessage | null>(null);
@@ -18,9 +39,17 @@ export function useInterventions(room: Room | null) {
       if (msg.type === 'COLLISION') {
         setActive(msg.intervention);
         setActionUrl(null);
+        // Clear the prior intervention's cue/message so a new card never shows a
+        // stale voice line. The fresh ones arrive right after on the same
+        // reliable channel (ordered: COLLISION -> HERMES_MESSAGE -> VOICE_CUE).
+        setVoiceCue(null);
+        setHermes(null);
       }
       if (msg.type === 'HERMES_MESSAGE') setHermes(msg.message);
-      if (msg.type === 'VOICE_CUE') setVoiceCue(msg.text);
+      if (msg.type === 'VOICE_CUE') {
+        setVoiceCue(msg.text);
+        speakInBrowser(msg.text);
+      }
     };
     room.on(RoomEvent.DataReceived, onData);
     return () => {
@@ -42,14 +71,24 @@ export function useInterventions(room: Room | null) {
         interventionId: active.id,
         collisionId: active.collisionId,
         podId: active.podId,
-        wasRealCollision: true,
+        // Placeholder only — the backend derives the authoritative value from
+        // git overlap at outcome time (the client cannot know). (RSI Step 3)
+        wasRealCollision: false,
         accepted,
         recordedAt: new Date().toISOString(),
       });
+      await room?.localParticipant.publishData(
+        new TextEncoder().encode(
+          JSON.stringify({ type: 'ACK', interventionId: active.id, status }),
+        ),
+        { reliable: true, topic: DATA_TOPIC },
+      );
       setActive(null);
+      setVoiceCue(null);
+      setHermes(null);
       return status;
     },
-    [active],
+    [active, room],
   );
 
   return { active, hermes, voiceCue, actionUrl, respond };

frontend/src/livekit/useScreenPublish.ts

@@ -1,41 +0,0 @@
-import { useCallback, useRef, useState } from 'react';
-import { Room, Track, createLocalScreenTracks, VideoPresets } from 'livekit-client';
-import { fetchToken } from '../lib/api';
-
-export function useScreenPublish() {
-  const roomRef = useRef<Room | null>(null);
-  const [connected, setConnected] = useState(false);
-  const [sharing, setSharing] = useState(false);
-
-  const join = useCallback(
-    async (pod: string, identity: string, name: string, githubLogin?: string) => {
-      const { token, url } = await fetchToken({ room: pod, identity, name, githubLogin });
-      const room = new Room({ adaptiveStream: true, dynacast: true });
-      await room.connect(url, token);
-      roomRef.current = room;
-      setConnected(true);
-      return room;
-    },
-    [],
-  );
-
-  const startSharing = useCallback(async () => {
-    const room = roomRef.current;
-    if (!room) throw new Error('join the pod first');
-    const tracks = await createLocalScreenTracks({
-      audio: true,
-      resolution: VideoPresets.h1080.resolution,
-    });
-    for (const t of tracks) {
-      await room.localParticipant.publishTrack(t.mediaStreamTrack, {
-        source:
-          t.kind === Track.Kind.Audio ? Track.Source.ScreenShareAudio : Track.Source.ScreenShare,
-      });
-    }
-    await room.localParticipant.setMicrophoneEnabled(true);
-    await room.localParticipant.setCameraEnabled(true);
-    setSharing(true);
-  }, []);
-
-  return { join, startSharing, connected, sharing, room: roomRef };
-}

frontend/src/main.tsx

@@ -1,13 +1,53 @@
 import { StrictMode } from 'react';
 import { createRoot } from 'react-dom/client';
+import { BrowserRouter, Routes, Route } from 'react-router-dom';
+import { ClerkProvider } from '@clerk/react';
+import { shadcn } from '@clerk/ui/themes';
 import App from './App.js';
+import { Landing } from './Landing.js';
 import './index.css';
+import '@clerk/ui/themes/shadcn.css';
 import { TooltipProvider } from '@/components/ui/tooltip';
 
+const clerkPublishableKey = import.meta.env.VITE_CLERK_PUBLISHABLE_KEY;
+const hasClerk = typeof clerkPublishableKey === 'string' && clerkPublishableKey.startsWith('pk_');
+
+function AppRoute() {
+  if (!hasClerk) {
+    // Secrets not provisioned yet — show a graceful placeholder instead of crashing.
+    return (
+      <div className="flex min-h-screen flex-col items-center justify-center gap-3 bg-[#0b0f17] px-6 text-center text-white/80">
+        <img src="/podman-logo.svg" alt="PodMan" className="h-10 w-10" />
+        <h1 className="text-xl font-semibold text-white">PodMan is deploying</h1>
+        <p className="max-w-sm text-sm text-white/50">
+          The live app is being provisioned. Check back shortly.
+        </p>
+        <a href="/" className="mt-2 text-sm text-cyan-300 hover:underline">
+          ← Back to home
+        </a>
+      </div>
+    );
+  }
+  return (
+    <ClerkProvider
+      publishableKey={clerkPublishableKey}
+      appearance={{ theme: shadcn }}
+      afterSignOutUrl="/"
+    >
+      <TooltipProvider>
+        <App />
+      </TooltipProvider>
+    </ClerkProvider>
+  );
+}
+
 createRoot(document.getElementById('root')!).render(
   <StrictMode>
-    <TooltipProvider>
-      <App />
-    </TooltipProvider>
+    <BrowserRouter>
+      <Routes>
+        <Route path="/" element={<Landing />} />
+        <Route path="/app/*" element={<AppRoute />} />
+      </Routes>
+    </BrowserRouter>
   </StrictMode>,
 );

frontend/vite.config.ts

@@ -1,18 +1,14 @@
 import { defineConfig } from 'vite';
 import react from '@vitejs/plugin-react';
 import tailwindcss from '@tailwindcss/vite';
-import { VitePWA } from 'vite-plugin-pwa';
 import { fileURLToPath, URL } from 'node:url';
 
 export default defineConfig({
-  plugins: [
-    react(),
-    tailwindcss(),
-    // Self-destroying during active development: unregisters any previously
-    // installed service worker and clears its caches so deploys are always
-    // fresh (no stale UI). Re-enable a precaching PWA before the demo.
-    VitePWA({ selfDestroying: true }),
-  ],
+  // No service worker in production. We deploy continuously during the event and
+  // any SW (even vite-plugin-pwa's self-destroying one) forces open tabs to
+  // reload, which breaks the live demo. Existing SWs are torn down by the
+  // cleanup snippet in index.html. Re-add a precaching PWA only post-event.
+  plugins: [react(), tailwindcss()],
   server: {
     port: 5173,
   },

infra/.do/app.yaml

@@ -48,7 +48,9 @@ services:
       - { key: LIVEKIT_API_SECRET, scope: RUN_TIME, type: SECRET }
       - { key: GEMINI_API_KEY, scope: RUN_TIME, type: SECRET }
       - { key: GEMINI_VISION_MODEL, scope: RUN_TIME, value: gemini-2.0-flash }
-      - { key: GEMINI_LIVE_MODEL, scope: RUN_TIME, value: gemini-live-2.5-flash }
+      - { key: GEMINI_LIVE_MODEL, scope: RUN_TIME, value: gemini-3.1-flash-tts-preview }
+      - { key: GEMINI_TTS_VOICE, scope: RUN_TIME, value: Charon }
+      - { key: GEMINI_EMBEDDING_MODEL, scope: RUN_TIME, value: gemini-embedding-001 }
       - { key: GITHUB_TOKEN, scope: RUN_TIME, type: SECRET }
       - { key: GITHUB_REPO, scope: RUN_TIME, value: karti-ai/podman }
       - { key: MONGODB_URI, scope: RUN_TIME, type: SECRET }
@@ -73,7 +75,9 @@ workers:
       - { key: LIVEKIT_API_SECRET, scope: RUN_TIME, type: SECRET }
       - { key: GEMINI_API_KEY, scope: RUN_TIME, type: SECRET }
       - { key: GEMINI_VISION_MODEL, scope: RUN_TIME, value: gemini-2.0-flash }
-      - { key: GEMINI_LIVE_MODEL, scope: RUN_TIME, value: gemini-live-2.5-flash }
+      - { key: GEMINI_LIVE_MODEL, scope: RUN_TIME, value: gemini-3.1-flash-tts-preview }
+      - { key: GEMINI_TTS_VOICE, scope: RUN_TIME, value: Charon }
+      - { key: GEMINI_EMBEDDING_MODEL, scope: RUN_TIME, value: gemini-embedding-001 }
       - { key: GITHUB_TOKEN, scope: RUN_TIME, type: SECRET }
       - { key: GITHUB_REPO, scope: RUN_TIME, value: karti-ai/podman }
       - { key: MONGODB_URI, scope: RUN_TIME, type: SECRET }

infra/Caddyfile

@@ -22,3 +22,23 @@ lk.165-22-129-249.sslip.io {
 		}
 	}
 }
+
+gemini.165-22-129-249.sslip.io {
+	reverse_proxy 127.0.0.1:3000
+}
+
+podman.live, www.podman.live {
+	route {
+		handle /api/* {
+			reverse_proxy 127.0.0.1:8787
+		}
+
+		handle /health {
+			reverse_proxy 127.0.0.1:8787
+		}
+
+		root * /var/www/podman
+		try_files {path} /index.html
+		file_server
+	}
+}

infra/README.md

@@ -24,6 +24,16 @@ docker run --env-file backend/.env -e PODMAN_PROCESS=server -p 8787:8787 podman-
 docker run --env-file backend/.env -e PODMAN_PROCESS=agent podman-backend
 ```
 
+The automated check uses Docker by default, matching `pnpm build:container`:
+
+```bash
+pnpm build:container
+pnpm verify:containers
+```
+
+Set `VERIFY_CONTAINER_RUNTIME=podman` to run the same verifier against a Podman
+image store.
+
 ## Local production services
 
 On the demo droplet, serve the API and worker with systemd instead of tmux:

infra/app.yaml

@@ -49,6 +49,7 @@ services:
       - { key: GEMINI_API_KEY, scope: RUN_TIME, type: SECRET }
       - { key: GEMINI_VISION_MODEL, scope: RUN_TIME, value: gemini-2.0-flash }
       - { key: GEMINI_LIVE_MODEL, scope: RUN_TIME, value: gemini-3.1-flash-tts-preview }
+      - { key: GEMINI_TTS_VOICE, scope: RUN_TIME, value: Charon }
       - { key: GEMINI_EMBEDDING_MODEL, scope: RUN_TIME, value: gemini-embedding-001 }
       - { key: GITHUB_TOKEN, scope: RUN_TIME, type: SECRET }
       - { key: GITHUB_REPO, scope: RUN_TIME, value: karti-ai/podman }
@@ -75,6 +76,7 @@ workers:
       - { key: GEMINI_API_KEY, scope: RUN_TIME, type: SECRET }
       - { key: GEMINI_VISION_MODEL, scope: RUN_TIME, value: gemini-2.0-flash }
       - { key: GEMINI_LIVE_MODEL, scope: RUN_TIME, value: gemini-3.1-flash-tts-preview }
+      - { key: GEMINI_TTS_VOICE, scope: RUN_TIME, value: Charon }
       - { key: GEMINI_EMBEDDING_MODEL, scope: RUN_TIME, value: gemini-embedding-001 }
       - { key: GITHUB_TOKEN, scope: RUN_TIME, type: SECRET }
       - { key: GITHUB_REPO, scope: RUN_TIME, value: karti-ai/podman }

infra/systemd/podman-gemini-starter-agent.service

@@ -0,0 +1,17 @@
+[Unit]
+Description=PodMan LiveKit Gemini starter agent
+After=network-online.target
+Wants=network-online.target
+
+[Service]
+Type=simple
+WorkingDirectory=/root/podman/examples/livekit-gemini-hacker-starter/agent
+Environment=PATH=/root/.local/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
+ExecStart=/root/.local/bin/uv run agent.py dev
+Restart=always
+RestartSec=3
+KillSignal=SIGTERM
+TimeoutStopSec=20
+
+[Install]
+WantedBy=multi-user.target

infra/systemd/podman-gemini-starter-frontend.service

@@ -0,0 +1,18 @@
+[Unit]
+Description=PodMan LiveKit Gemini starter frontend
+After=network-online.target
+Wants=network-online.target
+
+[Service]
+Type=simple
+WorkingDirectory=/root/podman/examples/livekit-gemini-hacker-starter/frontend
+Environment=NODE_ENV=production
+Environment=NEXT_TELEMETRY_DISABLED=1
+ExecStart=/usr/bin/pnpm start --hostname 127.0.0.1 --port 3000
+Restart=always
+RestartSec=3
+KillSignal=SIGTERM
+TimeoutStopSec=20
+
+[Install]
+WantedBy=multi-user.target

infra/systemd/podman-live-conversation-agent.service

@@ -0,0 +1,20 @@
+[Unit]
+Description=PodMan private LiveKit/Gemini live conversation agent
+After=network-online.target podman-platform-api.service
+Wants=network-online.target
+
+[Service]
+Type=simple
+WorkingDirectory=/root/podman/agents/podman-live-conversation
+Environment=PATH=/root/.local/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
+EnvironmentFile=/root/podman/backend/.env
+ExecStart=/root/.local/bin/uv run agent.py dev
+Restart=always
+RestartSec=3
+MemoryHigh=1024M
+MemoryMax=1536M
+KillSignal=SIGTERM
+TimeoutStopSec=20
+
+[Install]
+WantedBy=multi-user.target

infra/systemd/podman-platform-agent.service

@@ -12,6 +12,9 @@ EnvironmentFile=/root/podman/backend/.env
 ExecStart=/usr/bin/node dist/agent.js
 Restart=always
 RestartSec=3
+MemoryHigh=1536M
+MemoryMax=2G
+OOMPolicy=stop
 KillSignal=SIGTERM
 TimeoutStopSec=20
 

package.json

@@ -22,14 +22,18 @@
     "deploy:static:local": "node scripts/deploy-static-local.mjs",
     "hermes:watchdog": "node scripts/hermes-watchdog.mjs",
     "hermes:watchdog:strict": "node scripts/hermes-watchdog.mjs --strict",
+    "hermes:notify": "node scripts/hermes-notify.mjs",
     "hermes:sync-deploy": "node scripts/hermes-sync-deploy.mjs",
     "hermes:install": "node scripts/install-hermes-ops.mjs",
     "healthcheck:public": "node scripts/healthcheck-public.mjs",
+    "livekit:conversation:agent": "cd agents/podman-live-conversation && uv run agent.py dev",
+    "livekit:conversation:test": "cd agents/podman-live-conversation && uv run pytest",
     "verify": "pnpm lint && pnpm typecheck && pnpm build && pnpm verify:backend && pnpm verify:frontend",
-    "verify:full": "pnpm verify && pnpm build:container && pnpm verify:containers",
+    "verify:full": "pnpm verify && pnpm verify:infra && pnpm build:container && pnpm verify:containers",
     "verify:backend": "node scripts/verify-backend.mjs",
     "verify:containers": "node scripts/verify-containers.mjs",
     "verify:frontend": "node scripts/verify-frontend.mjs",
+    "verify:infra": "node scripts/verify-infra.mjs",
     "lint": "eslint .",
     "format": "prettier --write .",
     "format:check": "prettier --check ."

scripts/auto-pull.sh

@@ -0,0 +1,17 @@
+#!/bin/bash
+REPO="/home/ramis/Programming/podman"
+LOG="/home/ramis/Programming/podman/scripts/auto-pull.log"
+
+cd "$REPO" || exit 1
+
+# Stash any local changes, pull, pop
+git fetch origin main 2>>"$LOG"
+LOCAL=$(git rev-parse HEAD)
+REMOTE=$(git rev-parse origin/main)
+
+if [ "$LOCAL" != "$REMOTE" ]; then
+    echo "[$(date)] Pulling: $LOCAL -> $REMOTE" >> "$LOG"
+    git pull --ff-only origin main >> "$LOG" 2>&1
+else
+    echo "[$(date)] Up to date" >> "$LOG"
+fi

scripts/deploy-doctor.mjs

@@ -240,6 +240,7 @@ async function checkGeminiVision() {
 async function checkGeminiVoiceModel() {
   const key = configuredGeminiKey();
   const model = process.env.GEMINI_LIVE_MODEL ?? 'gemini-3.1-flash-tts-preview';
+  const voice = process.env.GEMINI_TTS_VOICE ?? 'Charon';
   const res = await doFetch(
     `https://generativelanguage.googleapis.com/v1beta/models?key=${encodeURIComponent(key.value)}`,
   );
@@ -257,10 +258,18 @@ async function checkGeminiVoiceModel() {
       method: 'POST',
       headers: { 'content-type': 'application/json' },
       body: JSON.stringify({
-        contents: [{ parts: [{ text: 'Say clearly: PodMan voice check.' }] }],
+        contents: [
+          {
+            parts: [
+              {
+                text: 'Speak this as a calm engineering teammate. Say only: PodMan voice check.',
+              },
+            ],
+          },
+        ],
         generationConfig: {
           responseModalities: ['AUDIO'],
-          speechConfig: { voiceConfig: { prebuiltVoiceConfig: { voiceName: 'Kore' } } },
+          speechConfig: { voiceConfig: { prebuiltVoiceConfig: { voiceName: voice } } },
         },
       }),
     },
@@ -269,7 +278,7 @@ async function checkGeminiVoiceModel() {
   const ttsBody = await tts.json();
   const audio = ttsBody.candidates?.[0]?.content?.parts?.[0]?.inlineData?.data;
   if (!audio) throw new Error('Gemini voice response had no audio');
-  return `${model}, generated ${Buffer.from(audio, 'base64').byteLength} audio bytes`;
+  return `${model}/${voice}, generated ${Buffer.from(audio, 'base64').byteLength} audio bytes`;
 }
 
 async function checkGeminiEmbeddings() {
@@ -353,11 +362,10 @@ await check('gemini embeddings', checkGeminiEmbeddings);
 
 if (isSet('VOYAGE_API_KEY')) {
   await check('voyage embeddings', checkVoyage);
-  await check('atlas vector index', checkVectorIndex);
 } else {
-  add('voyage embeddings', 'warn', 'VOYAGE_API_KEY is optional; exact Mongo recall remains active');
-  add('atlas vector index', 'warn', 'requires VOYAGE_API_KEY and Atlas Search index');
+  add('voyage embeddings', 'warn', 'VOYAGE_API_KEY is optional; Gemini embeddings are active');
 }
+await check('atlas vector index', checkVectorIndex);
 
 const failed = results.filter((r) => r.status === 'fail');
 const warnings = results.filter((r) => r.status === 'warn');

scripts/hermes-notify.mjs

@@ -0,0 +1,54 @@
+#!/usr/bin/env node
+import { existsSync } from 'node:fs';
+import { config as loadEnv } from 'dotenv';
+
+const envPath = process.env.DOTENV_CONFIG_PATH ?? (existsSync('.env') ? '.env' : 'backend/.env');
+loadEnv({ path: envPath, quiet: true });
+
+function usage() {
+  console.error(
+    'Usage: node scripts/hermes-notify.mjs --pod <podId> --message <text> [--engineers alice,bob] [--file path] [--urgent]',
+  );
+  process.exit(1);
+}
+
+function arg(name) {
+  const index = process.argv.indexOf(name);
+  return index === -1 ? '' : (process.argv[index + 1] ?? '');
+}
+
+const podId = arg('--pod');
+const message = arg('--message');
+if (!podId || !message) usage();
+
+const apiBase = (
+  process.env.PODMAN_API_URL ??
+  process.env.BACKEND_URL ??
+  `http://127.0.0.1:${process.env.PORT ?? '8787'}`
+).replace(/\/$/, '');
+
+const engineers = arg('--engineers')
+  .split(',')
+  .map((name) => name.trim())
+  .filter(Boolean);
+const file = arg('--file');
+const urgent = process.argv.includes('--urgent');
+
+const res = await globalThis.fetch(`${apiBase}/api/pods/${encodeURIComponent(podId)}/hermes/notify`, {
+  method: 'POST',
+  headers: { 'content-type': 'application/json' },
+  body: JSON.stringify({
+    message,
+    ...(engineers.length ? { engineers } : {}),
+    ...(file ? { file } : {}),
+    ...(urgent ? { urgency: 'urgent' } : {}),
+  }),
+});
+
+const text = await res.text();
+if (!res.ok) {
+  console.error(text);
+  process.exit(1);
+}
+
+console.log(text);

scripts/verify-backend.mjs

@@ -22,6 +22,7 @@ const env = {
   GITHUB_TOKEN: process.env.GITHUB_TOKEN ?? 'verify-github',
   GITHUB_REPO: process.env.GITHUB_REPO ?? 'karti-ai/podman',
   MONGODB_URI: mongoUri,
+  INTERNAL_AGENT_TOKEN: process.env.INTERNAL_AGENT_TOKEN ?? 'verify-internal-agent-token',
 };
 
 function fail(message) {
@@ -95,6 +96,105 @@ async function verifyApi() {
   );
   if (!withMember.members.includes('Hermes')) fail('member add did not persist');
 
+  const hermesNotify = await json(
+    await doFetch(`${baseUrl}/api/pods/${encodeURIComponent(created.id)}/hermes/notify`, {
+      method: 'POST',
+      headers: { 'content-type': 'application/json' },
+      body: JSON.stringify({
+        message: 'Hermes verification notification.',
+        engineers: ['Alice', 'Bob'],
+        file: 'src/verify-hermes.ts',
+        dryRun: true,
+      }),
+    }),
+  );
+  if (
+    hermesNotify.livekit !== 'dry-run' ||
+    hermesNotify.intervention?.message !== 'Hermes verification notification.'
+  ) {
+    fail('Hermes notify endpoint returned unexpected payload');
+  }
+
+  const liveConversation = await json(
+    await doFetch(`${baseUrl}/api/pods/${encodeURIComponent(created.id)}/live-conversation/start`, {
+      method: 'POST',
+      headers: { 'content-type': 'application/json' },
+      body: JSON.stringify({ identity: 'Alice', displayName: 'Alice' }),
+    }),
+  );
+  if (
+    typeof liveConversation.token !== 'string' ||
+    liveConversation.token.split('.').length !== 3 ||
+    typeof liveConversation.room !== 'string' ||
+    !liveConversation.room.includes('podman-live:')
+  ) {
+    fail('live conversation start did not return a private room JWT');
+  }
+  const liveStatus = await json(
+    await doFetch(
+      `${baseUrl}/api/pods/${encodeURIComponent(
+        created.id,
+      )}/live-conversation/status?identity=Alice`,
+    ),
+  );
+  if (liveStatus.active?.sessionId !== liveConversation.sessionId) {
+    fail('live conversation status did not return the active session');
+  }
+  await json(
+    await doFetch(
+      `${baseUrl}/api/pods/${encodeURIComponent(
+        created.id,
+      )}/live-conversation/${encodeURIComponent(liveConversation.sessionId)}/stop`,
+      { method: 'POST' },
+    ),
+  );
+
+  const hermesJob = await json(
+    await doFetch(`${baseUrl}/api/internal/hermes/jobs`, {
+      method: 'POST',
+      headers: {
+        'content-type': 'application/json',
+        authorization: `Bearer ${env.INTERNAL_AGENT_TOKEN}`,
+      },
+      body: JSON.stringify({
+        prompt: 'Check repository state for backend verification.',
+        contextScope: 'current_repo',
+        riskLevel: 'read_only',
+        successCriteria: ['Git status is inspected.'],
+        podId: created.id,
+        identity: 'Alice',
+        sessionId: liveConversation.sessionId,
+      }),
+    }),
+  );
+  if (!hermesJob.id || hermesJob.status !== 'queued') {
+    fail('Hermes job create returned unexpected payload');
+  }
+  let finalJob = hermesJob;
+  for (let i = 0; i < 30; i++) {
+    finalJob = await json(
+      await doFetch(`${baseUrl}/api/internal/hermes/jobs/${encodeURIComponent(hermesJob.id)}`, {
+        headers: { authorization: `Bearer ${env.INTERNAL_AGENT_TOKEN}` },
+      }),
+    );
+    if (['completed', 'failed', 'aborted'].includes(finalJob.status)) break;
+    await delay(500);
+  }
+  if (finalJob.status !== 'completed') {
+    fail(`Hermes job did not complete: ${JSON.stringify(finalJob)}`);
+  }
+  const hermesEvents = await json(
+    await doFetch(
+      `${baseUrl}/api/internal/hermes/jobs/${encodeURIComponent(hermesJob.id)}/events`,
+      {
+        headers: { authorization: `Bearer ${env.INTERNAL_AGENT_TOKEN}` },
+      },
+    ),
+  );
+  if (!Array.isArray(hermesEvents) || hermesEvents.length < 1) {
+    fail('Hermes job events were not persisted');
+  }
+
   await json(
     await doFetch(`${baseUrl}/api/pods/${encodeURIComponent(created.id)}`, { method: 'DELETE' }),
   );
@@ -262,6 +362,9 @@ try {
           'health',
           'token',
           'pod-crud',
+          'hermes-notify',
+          'live-conversation-session',
+          'hermes-job-lifecycle',
           'collision',
           'memory-recall',
           'graph',

scripts/verify-containers.mjs

@@ -5,6 +5,7 @@ import { setTimeout as delay } from 'node:timers/promises';
 import { config as loadEnv } from 'dotenv';
 
 const image = process.env.VERIFY_CONTAINER_IMAGE ?? 'podman-backend';
+const runtime = process.env.VERIFY_CONTAINER_RUNTIME ?? 'docker';
 const port = Number(process.env.VERIFY_CONTAINER_PORT ?? 8799);
 const baseUrl = `http://127.0.0.1:${port}`;
 const runId = `${process.pid}-${Date.now()}`;
@@ -21,14 +22,20 @@ const containerEnv = {
   LIVEKIT_API_KEY: process.env.LIVEKIT_API_KEY ?? 'verify-key',
   LIVEKIT_API_SECRET: process.env.LIVEKIT_API_SECRET ?? 'verify-secret',
   GEMINI_API_KEY: process.env.GEMINI_API_KEY ?? 'verify-gemini',
+  GEMINI_VISION_MODEL: process.env.GEMINI_VISION_MODEL ?? 'gemini-2.0-flash',
+  GEMINI_LIVE_MODEL: process.env.GEMINI_LIVE_MODEL ?? 'gemini-3.1-flash-tts-preview',
+  GEMINI_TTS_VOICE: process.env.GEMINI_TTS_VOICE ?? 'Charon',
+  GEMINI_EMBEDDING_MODEL: process.env.GEMINI_EMBEDDING_MODEL ?? 'gemini-embedding-001',
   GITHUB_TOKEN: process.env.GITHUB_TOKEN ?? 'verify-github',
   GITHUB_REPO: process.env.GITHUB_REPO ?? 'karti-ai/podman',
   MONGODB_URI: process.env.MONGODB_URI ?? 'mongodb://127.0.0.1:27017/podman',
+  VOYAGE_API_KEY: process.env.VOYAGE_API_KEY ?? '',
+  VOYAGE_EMBEDDING_MODEL: process.env.VOYAGE_EMBEDDING_MODEL ?? 'voyage-4-lite',
 };
 
-function runPodman(args, options = {}) {
+function runContainer(args, options = {}) {
   return new Promise((resolve) => {
-    const child = spawn('podman', args, {
+    const child = spawn(runtime, args, {
       stdio: ['ignore', 'pipe', 'pipe'],
       ...options,
     });
@@ -61,12 +68,15 @@ function fail(message) {
 }
 
 async function assertPodmanAvailable() {
-  const result = await runPodman(['--version']);
-  if (result.code !== 0) fail(`podman is not available: ${result.stderr.trim()}`);
+  const result = await runContainer(['--version']);
+  if (result.code !== 0) fail(`${runtime} is not available: ${result.stderr.trim()}`);
 }
 
 async function assertImageExists() {
-  const result = await runPodman(['image', 'exists', image]);
+  const result =
+    runtime === 'podman'
+      ? await runContainer(['image', 'exists', image])
+      : await runContainer(['image', 'inspect', image]);
   if (result.code !== 0) {
     fail(
       `container image "${image}" does not exist locally; build it before running this verifier`,
@@ -75,18 +85,23 @@ async function assertImageExists() {
 }
 
 async function removeContainer(name) {
-  await runPodman(['rm', '-f', name]);
+  await runContainer(['rm', '-f', name]);
 }
 
 async function startContainer(name, extraEnv) {
   await removeContainer(name);
-  const result = await runPodman([
+  const networkArgs =
+    runtime === 'podman'
+      ? ['--network', 'host']
+      : extraEnv.PODMAN_PROCESS === 'server'
+        ? ['--publish', `127.0.0.1:${port}:${port}`]
+        : [];
+  const result = await runContainer([
     'run',
     '--detach',
     '--name',
     name,
-    '--network',
-    'host',
+    ...networkArgs,
     ...envArgs(extraEnv),
     image,
   ]);
@@ -96,7 +111,7 @@ async function startContainer(name, extraEnv) {
 }
 
 async function stopContainer(name) {
-  await runPodman(['stop', '--time', '3', name]);
+  await runContainer(['stop', '--time', '3', name]);
   await removeContainer(name);
 }
 
@@ -125,7 +140,7 @@ async function waitForApi() {
     }
     await delay(500);
   }
-  const logs = await runPodman(['logs', apiContainer]);
+  const logs = await runContainer(['logs', apiContainer]);
   fail(
     `API container did not become healthy at ${baseUrl}: ${lastError}\n${logs.stdout}${logs.stderr}`,
   );
@@ -154,11 +169,11 @@ async function verifyAgentContainer() {
 
   let output = '';
   for (let i = 0; i < 60; i++) {
-    const logs = await runPodman(['logs', agentContainer]);
+    const logs = await runContainer(['logs', agentContainer]);
     output = `${logs.stdout}${logs.stderr}`;
     if (output.includes('podman-hermes joined room')) return;
 
-    const inspect = await runPodman([
+    const inspect = await runContainer([
       'inspect',
       '--format',
       '{{.State.Running}} {{.State.ExitCode}}',
@@ -182,10 +197,17 @@ try {
     JSON.stringify(
       {
         ok: true,
+        runtime,
         image,
         baseUrl,
         containers: [apiContainer, agentContainer],
-        checks: ['image-exists', 'api-health', 'api-pods', 'agent-joined-room'],
+        checks: [
+          'image-exists',
+          'api-health',
+          'api-pods',
+          'agent-joined-room',
+          'gemini-model-envs',
+        ],
       },
       null,
       2,

scripts/verify-frontend.mjs

@@ -4,7 +4,10 @@ import { createRequire } from 'node:module';
 import { TextEncoder } from 'node:util';
 import { chromium } from 'playwright';
 import { setTimeout as delay } from 'node:timers/promises';
+import { config as loadEnv } from 'dotenv';
+import { RoomServiceClient } from 'livekit-server-sdk';
 
+loadEnv({ path: 'backend/.env', quiet: true });
 const frontendUrl = process.env.FRONTEND_URL ?? 'http://127.0.0.1:4173/';
 const shouldStartPreview = !process.env.FRONTEND_URL;
 const doFetch = globalThis.fetch;
@@ -18,7 +21,17 @@ const { DATA_TOPIC } = await import('../shared/dist/messages.js').catch(() => ({
   DATA_TOPIC: 'podman.intervention',
 }));
 const backendRequire = createRequire(new URL('../backend/package.json', import.meta.url));
-const { Room } = backendRequire('@livekit/rtc-node');
+const {
+  AudioFrame,
+  AudioSource,
+  LocalAudioTrack,
+  Room,
+  TrackPublishOptions,
+  TrackSource,
+} = backendRequire('@livekit/rtc-node');
+const pods = await fetchJson('/api/pods');
+const verifyPod = pods.find((pod) => pod.id === 'frontend-pod') ?? pods[0];
+if (!verifyPod) throw new Error('no pods available for frontend verification');
 
 async function stopChild(child) {
   if (!child || child.exitCode !== null || child.signalCode !== null) return;
@@ -73,7 +86,7 @@ async function connectPublisher(roomName) {
     }),
   });
   const room = new Room();
-  await room.connect(url, token);
+  await room.connect(url, token, { autoSubscribe: true });
   return room;
 }
 
@@ -86,7 +99,7 @@ async function publishIntervention(room, podId) {
     podId,
     kind: 'card',
     message: 'Verification collision: two engineers are editing frontend/src/App.tsx.',
-    suggestedAction: { kind: 'sync_before_push' },
+    suggestedAction: { kind: 'open_sync_pr' },
     status: 'pending',
     createdAt: now,
   };
@@ -107,15 +120,44 @@ async function publishIntervention(room, podId) {
     reliable: true,
     topic: DATA_TOPIC,
   });
+  return intervention;
+}
+
+async function publishDataMessage(room, message) {
+  await room.localParticipant.publishData(new TextEncoder().encode(JSON.stringify(message)), {
+    reliable: true,
+    topic: DATA_TOPIC,
+  });
+}
+
+async function publishAudioProbe(room) {
+  const source = new AudioSource(24_000, 1, 5_000);
+  const track = LocalAudioTrack.createAudioTrack(`verify-audio-${process.pid}`, source);
+  const options = new TrackPublishOptions();
+  options.source = TrackSource.SOURCE_MICROPHONE;
+  const publication = await room.localParticipant.publishTrack(track, options);
+  await source.captureFrame(new AudioFrame(new Int16Array(24_000), 24_000, 1, 24_000));
+  return { source, publication };
+}
+
+async function waitForAttachedAudio(page) {
+  const audioSink = page.getByTestId('livekit-audio-sink');
+  await audioSink.waitFor({ timeout: 15_000 });
+  for (let i = 0; i < 30; i++) {
+    const count = await audioSink.locator('audio').count();
+    if (count > 0) return;
+    await delay(250);
+  }
+  throw new Error('LiveKit audio track was not attached to the hidden audio sink');
 }
 
 async function waitForInterventionCard(page, room, podId) {
   const cardText = 'Verification collision: two engineers are editing frontend/src/App.tsx.';
   for (let attempt = 1; attempt <= 3; attempt++) {
-    await publishIntervention(room, podId);
+    const intervention = await publishIntervention(room, podId);
     try {
       await page.getByText(cardText).waitFor({ timeout: 5_000 });
-      return;
+      return intervention;
     } catch (error) {
       if (attempt === 3) throw error;
       await delay(500);
@@ -123,6 +165,61 @@ async function waitForInterventionCard(page, room, podId) {
   }
 }
 
+function liveKitService() {
+  if (!process.env.LIVEKIT_URL || !process.env.LIVEKIT_API_KEY || !process.env.LIVEKIT_API_SECRET) {
+    throw new Error('screen publication verification requires LIVEKIT_* env vars');
+  }
+  const httpUrl = process.env.LIVEKIT_URL.replace(/^wss:/, 'https:').replace(/^ws:/, 'http:');
+  return new RoomServiceClient(
+    httpUrl,
+    process.env.LIVEKIT_API_KEY,
+    process.env.LIVEKIT_API_SECRET,
+  );
+}
+
+function hasScreenShareTrack(participant) {
+  return (participant.tracks ?? []).some((track) => {
+    const source = JSON.stringify(track).toLowerCase();
+    return source.includes('screen') || source.includes('share');
+  });
+}
+
+async function waitForPublishedScreenShare(roomName) {
+  const service = liveKitService();
+  let lastParticipants = [];
+  for (let i = 0; i < 30; i++) {
+    lastParticipants = await service.listParticipants(roomName);
+    if (lastParticipants.some(hasScreenShareTrack)) return;
+    await delay(500);
+  }
+  throw new Error(
+    `LiveKit room service did not list a screen-share publication in ${roomName}: ${JSON.stringify(
+      lastParticipants,
+    ).slice(0, 1000)}`,
+  );
+}
+
+async function boxOf(locator, name) {
+  const box = await locator.boundingBox();
+  if (!box) throw new Error(`${name} did not have a visible bounding box`);
+  return box;
+}
+
+function assertNoOverlap(left, main, right, label) {
+  if (left.x + left.width > main.x + 2) {
+    throw new Error(`${label}: left sidebar overlaps main workspace`);
+  }
+  if (main.x + main.width > right.x + 2) {
+    throw new Error(`${label}: right sidebar overlaps main workspace`);
+  }
+}
+
+function assertContained(container, child, label) {
+  if (child.x < container.x - 2 || child.x + child.width > container.x + container.width + 2) {
+    throw new Error(`${label}: body summary is not contained inside the main workspace`);
+  }
+}
+
 let preview = null;
 if (shouldStartPreview) {
   preview = spawn(
@@ -139,6 +236,7 @@ if (shouldStartPreview) {
 const browser = await chromium.launch({ headless: true });
 const page = await browser.newPage({ viewport: { width: 1440, height: 1000 } });
 await page.addInitScript(() => {
+  globalThis.__podmanVerifyScreens = [];
   Object.defineProperty(globalThis.navigator, 'mediaDevices', {
     configurable: true,
     value: {
@@ -149,12 +247,21 @@ await page.addInitScript(() => {
         canvas.height = 360;
         const ctx = canvas.getContext('2d');
         if (!ctx) throw new Error('canvas context unavailable');
-        ctx.fillStyle = '#fff';
-        ctx.fillRect(0, 0, canvas.width, canvas.height);
-        ctx.fillStyle = '#111';
-        ctx.font = '28px sans-serif';
-        ctx.fillText('PodMan verification screen', 32, 72);
-        return canvas.captureStream(5);
+        let frame = 0;
+        const draw = () => {
+          frame += 1;
+          ctx.fillStyle = '#fff';
+          ctx.fillRect(0, 0, canvas.width, canvas.height);
+          ctx.fillStyle = '#111';
+          ctx.font = '28px sans-serif';
+          ctx.fillText('PodMan verification screen', 32, 72);
+          ctx.fillText(`frame ${frame}`, 32, 120);
+        };
+        draw();
+        const interval = globalThis.setInterval(draw, 200);
+        const stream = canvas.captureStream(5);
+        globalThis.__podmanVerifyScreens.push({ canvas, stream, interval });
+        return stream;
       },
     },
   });
@@ -172,7 +279,9 @@ page.on('console', (msg) => {
 });
 page.on('pageerror', (err) => pageErrors.push(err.message));
 page.on('requestfailed', (req) => {
-  failedRequests.push(`${req.url()} ${req.failure()?.errorText ?? ''}`.trim());
+  const failure = req.failure()?.errorText ?? '';
+  if (req.url().includes('/activity/stream') && failure.includes('ERR_ABORTED')) return;
+  failedRequests.push(`${req.url()} ${failure}`.trim());
 });
 
 try {
@@ -180,29 +289,113 @@ try {
   await page.waitForTimeout(500);
 
   const bodyText = await page.locator('body').innerText();
-  const hasPodCards =
-    (await page.locator('text=/Frontend Pod|Backend Pod|graph pod/i').count()) > 0;
+  const hasPodCards = (await page.getByText(verifyPod.name, { exact: true }).count()) > 0;
   const hasOverlay = (await page.locator('vite-error-overlay, .vite-error-overlay').count()) > 0;
 
   if (bodyText.length < 100) throw new Error('frontend rendered too little text');
   if (!hasPodCards) throw new Error('pod cards did not render');
   if (hasOverlay) throw new Error('Vite error overlay is visible');
 
-  await page.getByRole('button', { name: 'Team memory' }).click();
+  await page.getByRole('button', { name: 'Pod actions' }).first().click();
+  await page.getByRole('menuitem', { name: 'Team memory' }).click();
   await page.getByText('Workflow metrics').waitFor({ timeout: 15_000 });
   await page.getByText('Learning edges').waitFor({ timeout: 15_000 });
   await page.getByRole('img', { name: 'PodMan team-memory graph' }).waitFor({ timeout: 15_000 });
-  await page.getByRole('button', { name: 'engineer: Karti' }).click();
-  await page.getByText('Learned owner of auth; backend + DB wiring.').waitFor({ timeout: 15_000 });
+  await page
+    .getByRole('button', { name: /engineer:/ })
+    .first()
+    .click();
+  await page.getByText('Relationships').waitFor({ timeout: 15_000 });
   await page.getByRole('button', { name: 'Whole graph' }).click();
   await page.getByRole('button', { name: /Pods/i }).click();
 
-  const frontendPodCard = page
-    .getByText('Frontend Pod', { exact: true })
+  const podCard = page
+    .getByText(verifyPod.name, { exact: true })
     .locator('xpath=ancestor::*[.//input[@placeholder="Your name"]][1]');
-  await frontendPodCard.getByPlaceholder('Your name').fill(verifyMember);
-  await frontendPodCard.getByRole('button', { name: 'Add and join' }).click();
+  await podCard.getByPlaceholder('Your name').first().fill(verifyMember);
+  await podCard.getByRole('button', { name: 'Join' }).first().click();
   await page.getByRole('button', { name: 'Share screen' }).waitFor({ timeout: 15_000 });
+  await page.getByTestId('live-conversation-toggle').waitFor({ timeout: 15_000 });
+  await page.getByRole('button', { name: 'Start Live Conversation' }).waitFor({
+    timeout: 15_000,
+  });
+  if (new URL(page.url()).pathname !== `/${verifyPod.id}`) {
+    throw new Error(`join did not update URL to /${verifyPod.id}: ${page.url()}`);
+  }
+  await page.getByRole('heading', { name: 'My stream' }).waitFor({ timeout: 15_000 });
+  await page.getByRole('heading', { name: 'Team stream' }).waitFor({ timeout: 15_000 });
+  const bodySummary = page.getByTestId('pod-body-summary');
+  const mainWorkspace = page.getByTestId('pod-main-workspace');
+  const mySidebar = page.getByTestId('my-stream-sidebar');
+  const teamSidebar = page.getByTestId('team-stream-sidebar');
+  await bodySummary.waitFor({ timeout: 15_000 });
+  await mainWorkspace.waitFor({ timeout: 15_000 });
+  await mySidebar.waitFor({ timeout: 15_000 });
+  await teamSidebar.waitFor({ timeout: 15_000 });
+  if ((await page.getByTestId('pod-topbar').count()) > 0) {
+    throw new Error('pod detail view still renders a topbar test id');
+  }
+  if ((await bodySummary.getByRole('button', { name: /stream|team/i }).count()) > 0) {
+    throw new Error('pod body summary contains sidebar stream/team controls');
+  }
+  const expandedLayout = {
+    summary: await boxOf(bodySummary, 'body summary expanded'),
+    main: await boxOf(mainWorkspace, 'main workspace expanded'),
+    left: await boxOf(mySidebar, 'my stream sidebar expanded'),
+    right: await boxOf(teamSidebar, 'team stream sidebar expanded'),
+  };
+  assertNoOverlap(
+    expandedLayout.left,
+    expandedLayout.main,
+    expandedLayout.right,
+    'expanded layout',
+  );
+  assertContained(expandedLayout.main, expandedLayout.summary, 'expanded layout');
+  await page.locator('[data-testid="my-stream-toggle"]:visible').click();
+  await page.waitForTimeout(300);
+  const leftCollapsedLayout = {
+    main: await boxOf(mainWorkspace, 'main workspace after left collapse'),
+    left: await boxOf(mySidebar, 'my stream sidebar collapsed'),
+    right: await boxOf(teamSidebar, 'team stream sidebar with left collapsed'),
+    summary: await boxOf(bodySummary, 'body summary after left collapse'),
+  };
+  if (leftCollapsedLayout.left.width >= expandedLayout.left.width - 24) {
+    throw new Error('my stream sidebar did not collapse into a compact rail');
+  }
+  if (leftCollapsedLayout.main.width <= expandedLayout.main.width) {
+    throw new Error('main workspace did not expand after my stream collapsed');
+  }
+  assertNoOverlap(
+    leftCollapsedLayout.left,
+    leftCollapsedLayout.main,
+    leftCollapsedLayout.right,
+    'left collapsed layout',
+  );
+  assertContained(leftCollapsedLayout.main, leftCollapsedLayout.summary, 'left collapsed layout');
+  await page.locator('[data-testid="team-stream-toggle"]:visible').click();
+  await page.waitForTimeout(300);
+  const bothCollapsedLayout = {
+    main: await boxOf(mainWorkspace, 'main workspace after both collapse'),
+    left: await boxOf(mySidebar, 'my stream sidebar with both collapsed'),
+    right: await boxOf(teamSidebar, 'team stream sidebar collapsed'),
+    summary: await boxOf(bodySummary, 'body summary after both collapse'),
+  };
+  if (bothCollapsedLayout.right.width >= expandedLayout.right.width - 24) {
+    throw new Error('team stream sidebar did not collapse into a compact rail');
+  }
+  if (bothCollapsedLayout.main.width <= leftCollapsedLayout.main.width) {
+    throw new Error('main workspace did not expand after team stream collapsed');
+  }
+  assertNoOverlap(
+    bothCollapsedLayout.left,
+    bothCollapsedLayout.main,
+    bothCollapsedLayout.right,
+    'both collapsed layout',
+  );
+  assertContained(bothCollapsedLayout.main, bothCollapsedLayout.summary, 'both collapsed layout');
+  await page.locator('[data-testid="my-stream-toggle"]:visible').click();
+  await page.locator('[data-testid="team-stream-toggle"]:visible').click();
+  await page.waitForTimeout(300);
 
   const joinedText = await page.locator('body').innerText();
   const hasPodView =
@@ -217,12 +410,49 @@ try {
   await page.getByRole('button', { name: 'Share screen' }).click();
   await page.getByRole('button', { name: 'Stop sharing' }).waitFor({ timeout: 15_000 });
   await page.getByText(/Screen\s*published/i).waitFor({ timeout: 15_000 });
+  await waitForPublishedScreenShare(verifyPod.id);
   await page.getByRole('button', { name: 'Stop sharing' }).click();
   await page.getByRole('button', { name: 'Share screen' }).waitFor({ timeout: 15_000 });
 
-  const publisher = await connectPublisher('frontend-pod');
+  const publisher = await connectPublisher(verifyPod.id);
   try {
-    await waitForInterventionCard(page, publisher, 'frontend-pod');
+    const audioProbe = await publishAudioProbe(publisher);
+    try {
+      await waitForAttachedAudio(page);
+    } finally {
+      if (audioProbe.publication.sid) {
+        await publisher.localParticipant
+          .unpublishTrack(audioProbe.publication.sid, true)
+          .catch(() => {});
+      }
+      await audioProbe.source.close().catch(() => {});
+    }
+
+    const intervention = await waitForInterventionCard(page, publisher, verifyPod.id);
+    await publishDataMessage(publisher, {
+      type: 'HERMES_MESSAGE',
+      message: {
+        id: `hermes-${process.pid}`,
+        podId: verifyPod.id,
+        interventionId: intervention.id,
+        recipients: ['Verify'],
+        text: 'Hermes verification message routed to the team.',
+        urgency: 'normal',
+        createdAt: new Date().toISOString(),
+      },
+    });
+    await publishDataMessage(publisher, {
+      type: 'VOICE_CUE',
+      text: 'Voice cue verification for urgent escalation.',
+    });
+    await page.getByText('Hermes message').waitFor({ timeout: 15_000 });
+    await page.getByText('Hermes verification message routed to the team.').waitFor({
+      timeout: 15_000,
+    });
+    await page.getByText('Voice cue', { exact: true }).waitFor({ timeout: 15_000 });
+    await page.getByText('Voice cue verification for urgent escalation.').waitFor({
+      timeout: 15_000,
+    });
     await page.getByRole('button', { name: 'Dismiss' }).click();
     await page.getByText('No collision detected').waitFor({ timeout: 15_000 });
   } finally {
@@ -230,6 +460,7 @@ try {
   }
 
   await page.getByRole('button', { name: 'Leave pod' }).click();
+  await page.waitForURL((url) => url.pathname === '/', { timeout: 15_000 });
 
   if (consoleErrors.length) throw new Error(`console errors: ${consoleErrors.join(' | ')}`);
   if (pageErrors.length) throw new Error(`page errors: ${pageErrors.join(' | ')}`);
@@ -240,11 +471,14 @@ try {
       {
         ok: true,
         frontendUrl,
+        apiBase,
         bodyLength: bodyText.length,
         graph: true,
         joined: true,
-        screenShare: true,
-        intervention: true,
+        screenShare: 'livekit-published',
+        audioSink: 'livekit-attached',
+        intervention: 'collision-hermes-voice',
+        podId: verifyPod.id,
         member: verifyMember,
       },
       null,
@@ -252,7 +486,7 @@ try {
     ),
   );
 } finally {
-  await doFetch(`${apiBase}/api/pods/frontend-pod/members/${encodeURIComponent(verifyMember)}`, {
+  await doFetch(`${apiBase}/api/pods/${verifyPod.id}/members/${encodeURIComponent(verifyMember)}`, {
     method: 'DELETE',
   }).catch(() => {});
   await browser.close();

scripts/verify-infra.mjs

@@ -0,0 +1,104 @@
+#!/usr/bin/env node
+import { readFile } from 'node:fs/promises';
+
+function fail(message) {
+  throw new Error(message);
+}
+
+function requireText(haystack, needle, label) {
+  if (!haystack.includes(needle)) fail(`${label} missing: ${needle}`);
+}
+
+function sectionBetween(text, start, end) {
+  const startAt = text.indexOf(start);
+  if (startAt === -1) fail(`section not found: ${start}`);
+  const endAt = end ? text.indexOf(end, startAt + start.length) : -1;
+  return text.slice(startAt, endAt === -1 ? undefined : endAt);
+}
+
+function requireEnvKeys(section, keys, label) {
+  for (const key of keys) {
+    requireText(section, `key: ${key}`, label);
+  }
+}
+
+const [appSpec, doSpec, dockerfile, digitalOceanDocs] = await Promise.all([
+  readFile('infra/app.yaml', 'utf8'),
+  readFile('infra/.do/app.yaml', 'utf8'),
+  readFile('infra/Dockerfile', 'utf8'),
+  readFile('docs/digitalocean.md', 'utf8'),
+]);
+
+if (appSpec !== doSpec) {
+  fail('infra/.do/app.yaml must stay identical to infra/app.yaml');
+}
+
+const web = sectionBetween(appSpec, 'static_sites:', 'services:');
+const api = sectionBetween(appSpec, '  - name: api', 'workers:');
+const worker = sectionBetween(appSpec, '  - name: podman-agent');
+
+requireText(web, 'output_dir: frontend/dist', 'web static site');
+requireText(web, 'value: ${APP_URL}', 'web static site VITE_BACKEND_URL');
+requireEnvKeys(web, ['VITE_BACKEND_URL', 'VITE_LIVEKIT_URL'], 'web static site envs');
+
+requireText(api, 'dockerfile_path: infra/Dockerfile', 'api service');
+requireText(api, 'http_port: 8787', 'api service');
+requireText(api, 'http_path: /health', 'api service health check');
+requireText(api, 'path: /api', 'api service route');
+requireText(api, 'preserve_path_prefix: true', 'api service route');
+requireText(api, 'value: server', 'api service PODMAN_PROCESS');
+
+requireText(worker, 'dockerfile_path: infra/Dockerfile', 'worker');
+requireText(worker, 'value: agent', 'worker PODMAN_PROCESS');
+requireText(worker, 'value: demo-pod', 'worker POD_ROOM');
+if (worker.includes('health_check:') || worker.includes('http_port:')) {
+  fail('podman-agent must remain a worker, not a health-checked HTTP service');
+}
+
+const runtimeKeys = [
+  'LIVEKIT_URL',
+  'LIVEKIT_API_KEY',
+  'LIVEKIT_API_SECRET',
+  'GEMINI_API_KEY',
+  'GEMINI_VISION_MODEL',
+  'GEMINI_LIVE_MODEL',
+  'GEMINI_TTS_VOICE',
+  'GEMINI_EMBEDDING_MODEL',
+  'GITHUB_TOKEN',
+  'GITHUB_REPO',
+  'MONGODB_URI',
+];
+requireEnvKeys(api, ['PODMAN_PROCESS', 'PORT', ...runtimeKeys], 'api service envs');
+requireEnvKeys(worker, ['PODMAN_PROCESS', 'POD_ROOM', ...runtimeKeys], 'worker envs');
+
+requireText(dockerfile, 'ENV PODMAN_PROCESS=server', 'Dockerfile');
+requireText(dockerfile, 'node backend/dist/agent.js', 'Dockerfile');
+requireText(dockerfile, 'node backend/dist/server.js', 'Dockerfile');
+requireText(dockerfile, 'EXPOSE 8787', 'Dockerfile');
+
+requireText(digitalOceanDocs, 'docker run --env-file backend/.env', 'DigitalOcean docs');
+requireText(digitalOceanDocs, '`/api` with `preserve_path_prefix: true`', 'DigitalOcean docs');
+requireText(
+  digitalOceanDocs,
+  '`podman-agent`: background LiveKit/Gemini worker',
+  'DigitalOcean docs',
+);
+
+console.log(
+  JSON.stringify(
+    {
+      ok: true,
+      checks: [
+        'app-spec-mirror',
+        'static-site-envs',
+        'api-route-preserves-prefix',
+        'worker-split',
+        'runtime-env-keys',
+        'docker-entrypoint',
+        'digitalocean-docs',
+      ],
+    },
+    null,
+    2,
+  ),
+);

shared/src/activity.ts

@@ -0,0 +1,20 @@
+export type PodActivityKind = 'observation' | 'git' | 'collision' | 'intervention' | 'outcome';
+
+export type PodActivitySource = 'vision' | 'git' | 'memory' | 'hermes' | 'policy';
+
+export type PodActivitySeverity = 'info' | 'warn' | 'critical' | 'success';
+
+export interface PodActivityEvent {
+  id: string;
+  podId: string;
+  kind: PodActivityKind;
+  source: PodActivitySource;
+  title: string;
+  detail?: string;
+  actor?: string;
+  actors?: string[];
+  file?: string;
+  imageUrl?: string;
+  severity: PodActivitySeverity;
+  at: string;
+}