ap08960695

Read-only pixel-art RPG view of real Hermes Kanban and worker activity, with a live web dashboard tab and an optional native Desktop page. The Desktop page currently supports explicit local connections only; registry and SSH remote connections fail closed until a public SDK connection-lifecycle hook is available. Standalone demo data is synthetic. Disclosure — reads local Hermes data outside its own directory (kanban.db, every profile's state.db, profile.yaml, config.yaml model/effort, logs/agent.log, bot-status.json) on each dashboard poll: every /replay or /events request (about every 10 s while the tab is open) runs the bundled Python extractor as a subprocess (argument list, no shell, 30 s timeout); a background thread samples bot-status.json every 30 s (HERMES_QUEST_SAMPLER=off disables it) and writes bot-status history, checkpoint state, a lock and a random 0600 HMAC key under <hermes_home>/hermes-quest/ (not yet plugin-data); profile names and task titles are hidden unless enabled and only shown to host-authenticated dashboard sessions; the Desktop page works only on an explicit local connection; no network calls beyond the local Hermes backend.