Feat/secure room

.github/workflows/ci.yml

@@ -117,6 +117,15 @@ jobs:
           cargo build -p agent --no-default-features
           python src-term/scripts/verify-setup-exit.py
 
+      # The secure room is its own daemon (`--kind secure`): bind, accept, one client
+      # round trip and the clean exit, over the same native IPC the chat uses.
+      - name: Secure room daemon self-test
+        shell: bash
+        run: |
+          exe=./target/debug/koma
+          [ "$RUNNER_OS" = "Windows" ] && exe=./target/debug/koma.exe
+          "$exe" --daemon --kind secure --daemon-selftest
+
       - name: Native Windows SSH password helper
         if: runner.os == 'Windows'
         run: ./target/debug/koma.exe --ssh-askpass-self-test

.github/workflows/release.yml

@@ -288,7 +288,7 @@ jobs:
   publish:
     # build -> check -> publish. Source tests belong to ci.yml and ran on the
     # PR; this pipeline only checks the binaries it built (verify, and the MSI
-    # checks inside windows-package). Guest images build after this, tier by tier.
+    # checks inside windows-package).
     if: >-
       ${{ !cancelled() && startsWith(github.ref, 'refs/tags/v')
       && needs.build.result == 'success'
@@ -300,8 +300,7 @@ jobs:
       contents: write
     steps:
       - uses: actions/checkout@v4
-      # Named downloads only. A bare download also pulls the Docker build
-      # record, and that blob failed after five retries on v0.4.9.
+      # Named downloads only, so each asset is fetched by its own artifact name.
       - uses: actions/download-artifact@v4
         with:
           name: koma-linux-x64
@@ -385,76 +384,3 @@ jobs:
           mkdir published
           curl -fsSL --retry 5 --retry-delay 10 "$base/koma-linux-x64" -o published/koma-linux-x64
           (cd published && grep ' koma-linux-x64$' ../published-sums | sha256sum --check --strict -)
-
-  # Guest images (only on v*-security tags). They start after the binaries are
-  # published and run one tier at a time, so a release never has 30 builds at
-  # once. A failed tier does not stop the next; each build reports on its own.
-  safety-matrix:
-    name: plan koma-safety images
-    if: startsWith(github.ref, 'refs/tags/v') && contains(github.ref_name, '-security')
-    runs-on: ubuntu-22.04
-    outputs:
-      core: ${{ steps.plan.outputs.core }}
-      ext: ${{ steps.plan.outputs.ext }}
-      src: ${{ steps.plan.outputs.src }}
-    steps:
-      - uses: actions/checkout@v4
-      - name: One image per composition in compositions.json
-        id: plan
-        # Every composition the /security panel lists gets an image, so no row
-        # offers a pull that cannot succeed. Bare :version / :latest is minimal.
-        # core: minimal + the 8 base domains. ext: npm/cargo shards, recon-2, lab.
-        # src: from-source shards, the slowest builds.
-        run: |
-          python3 - <<'PY' >> "$GITHUB_OUTPUT"
-          import json
-          comps = json.load(open("src-security/install_recipes/buckets/compositions.json"))
-          base = {"kali": "kalilinux/kali-rolling"}
-          core_ids = {"minimal", "recon", "web", "identity", "cloud", "rev", "crypto", "pxn", "dfir"}
-          tiers = {"core": [{"composition": "minimal", "tag_suffix": "", "base_image": "python:3.11-slim-bookworm"}], "ext": [], "src": []}
-          for c in comps:
-              tier = "core" if c["id"] in core_ids else "src" if c["id"].endswith("-src") else "ext"
-              tiers[tier].append({
-                  "composition": c["id"],
-                  "tag_suffix": f"-{c['id']}",
-                  "base_image": base.get(c.get("base_hint"), "python:3.11-slim-bookworm"),
-              })
-          for name, rows in tiers.items():
-              print(f"{name}={json.dumps(rows)}")
-          PY
-
-  images-core:
-    name: images (core)
-    needs: [safety-matrix, publish]
-    if: ${{ !cancelled() && needs.safety-matrix.result == 'success' }}
-    permissions:
-      contents: read
-      packages: write
-    uses: ./.github/workflows/safety-image.yml
-    with:
-      include: ${{ needs.safety-matrix.outputs.core }}
-      max-parallel: 5
-
-  images-ext:
-    name: images (ext)
-    needs: [safety-matrix, images-core]
-    if: ${{ !cancelled() && needs.safety-matrix.result == 'success' }}
-    permissions:
-      contents: read
-      packages: write
-    uses: ./.github/workflows/safety-image.yml
-    with:
-      include: ${{ needs.safety-matrix.outputs.ext }}
-      max-parallel: 4
-
-  images-src:
-    name: images (src)
-    needs: [safety-matrix, images-ext]
-    if: ${{ !cancelled() && needs.safety-matrix.result == 'success' }}
-    permissions:
-      contents: read
-      packages: write
-    uses: ./.github/workflows/safety-image.yml
-    with:
-      include: ${{ needs.safety-matrix.outputs.src }}
-      max-parallel: 3

docs/ARCH_TUI_DAEMON.md

@@ -431,7 +431,7 @@ trait Tool: Send + Sync {
 
 Built-in tools (see `tool/mod.rs` `all_tools()` for the full list): filesystem
 (read/write/edit/delete/list), search (grep/glob), shell (bash/output/kill as
-jobs), memory, skill, history, internet/browser, git, planning + SDLC, task
+jobs), memory, skills (skill_find/load/unload/create/modify), history, internet/browser, git, planning + SDLC, task
 delegation, graph_query, cd, seqthink, and misc (pong/todo).
 
 ### Tool execution lanes

flake.nix

@@ -22,7 +22,7 @@
 
           # `koma-extension` (src-extension) is excluded from the cargo workspace but is
           # a path dependency of `agent`, so it must ship in the build sandbox. `src-misc`,
-          # `src-internet`, `src-security` and `models.json` are pulled in unconditionally
+          # `src-internet` and `models.json` are pulled in unconditionally
           # at compile time via `include_dir!`/`include_str!`, independent of any feature flag.
           # `assets/` is embedded by `include_bytes!` in launcher.rs (PNG sizes and icon.icns).
           commonFileset = lib.fileset.unions [
@@ -34,7 +34,6 @@
             ./src-extension
             ./src-misc
             ./src-internet
-            ./src-security
           ];
 
           commonSrc = lib.fileset.toSource {

news-export/f16-headbutt-maneuver.tex

@@ -0,0 +1,37 @@
+\documentclass[11pt]{article}
+\usepackage[margin=1in]{geometry}
+\usepackage[T1]{fontenc}
+\usepackage[utf8]{inputenc}
+\usepackage{hyperref}
+\usepackage{parskip}
+
+\title{F-16 Uses ``Headbutt Maneuver'' to Intercept Plane near Mar-a-Lago}
+\author{Emily Mae Czachor, Yahoo News}
+\date{Updated Monday, 26 October 2026, 10:07 PM GMT+9}
+
+\begin{document}
+\maketitle
+
+\noindent Source: \url{https://www.yahoo.com/news/us/articles/f-16-uses-headbutt-maneuver-130709283.html}
+
+\noindent Section: US. Two-minute read. Brief paraphrased from the Yahoo News article, not a reprint.
+
+\section*{What happened}
+
+On Saturday, a NORAD F-16 intercepted a civilian aircraft that had entered restricted airspace near President Trump's Mar-a-Lago resort in Palm Beach, Florida. U.S. military officials said the intercept happened at about 12:20 p.m.\ ET. Trump was in West Palm Beach that day to vote in Florida's midterm election.
+
+The jet flew close in front of the civilian plane to get the pilot's attention. NORAD calls that standard tactic a ``headbutt maneuver.'' It worked: the crews made contact, and the pilot left the restricted airspace as instructed.
+
+The plane had violated a Temporary Flight Restriction over the area. NORAD said the pilot could also be met by federal authorities on landing and face enforcement action.
+
+\section*{Why the airspace was closed}
+
+The FAA issues temporary flight restrictions for sporting events, severe weather, rallies, and other gatherings involving high-profile officials, especially the president. Pilots are expected to check Notices to Airmen (NOTAMs) for the current limits.
+
+\section*{The day's political context}
+
+Trump and First Lady Melania Trump were seen Saturday afternoon at a West Palm Beach polling station, where he cast an early ballot ahead of the following week's midterms. Asked if he voted along party lines, he said, ``Very much so.'' He then left for a campaign rally in Georgia.
+
+His midterm rallies have been triggering similar restrictions. Earlier this month, NORAD F-16s intercepted a plane over Clemson, South Carolina, during a rally for Darline Graham's Senate campaign. Days before that, the command reported a similar intercept over Cincinnati, Ohio, near another rally he attended.
+
+\end{document}