chore: promote dev to master (update fix + multi-window + coverage + cleanups)

.gitignore

@@ -93,6 +93,22 @@ data/browser_cookie_key.hex
 # (a tracked copy dirties the tree and blocks the in-app git-pull update).
 desktop/tsconfig.tsbuildinfo
 
+# never track installed deps (root-level node_modules can appear when a tool is
+# run from the repo root; ignore it everywhere so it is never swept into a commit)
+node_modules/
+desktop/node_modules
+
+# There is no root node project: the SPA lives in desktop/. A stray root
+# package.json invites `npm install` at the repo root, which creates the
+# root node_modules that lane worktrees then sweep into commits (see #1134).
+# Lanes sometimes add these as a workaround for running vitest from root; the
+# gate runs vitest from desktop/, so they are pure cruft. Ignore them, anchored
+# to the repo root so desktop/package.json and desktop/vitest.config are kept.
+/package.json
+/package-lock.json
+/vitest.config.ts
+/vitest.config.js
+
 # Local-only operational playbook (contains LAN IP + ops detail; agents read it from the working tree)
 docs/AGENT_HANDOFF.md
 docs/audit/

CLA.md

@@ -2,17 +2,17 @@
 
 > Interim version, to be ratified by an IP lawyer. By contributing to taOS you agree to the terms below so the project can stay sustainable: source-available for everyone, with a separate commercial license for commercial use.
 
-Thank you for contributing to **taOS** (the "Project"), maintained by **JAN LABS LTD** (the "Company").
+Thank you for contributing to **taOS** (the "Project"), maintained by **jaylfc** (the "Maintainer").
 
 By submitting any contribution (code, documentation, configuration, or other material) to the Project, you agree to the following:
 
-1. **Grant of rights.** You grant the Company a perpetual, worldwide, non-exclusive, royalty-free, irrevocable license to use, reproduce, modify, prepare derivative works of, publicly display, sublicense, and distribute your contribution and such derivative works, **and to relicense your contribution under any license terms the Company chooses** — including source-available and commercial licenses.
+1. **Grant of rights.** You grant the Maintainer a perpetual, worldwide, non-exclusive, royalty-free, irrevocable license to use, reproduce, modify, prepare derivative works of, publicly display, sublicense, and distribute your contribution and such derivative works, **and to relicense your contribution under any license terms the Maintainer chooses** — including source-available and commercial licenses.
 
 2. **Original work / right to submit.** Each contribution is your own original creation, or you otherwise have the right to submit it, and submitting it does not violate any third party's rights or any agreement you are bound by.
 
-3. **Retained ownership.** You retain all right, title, and interest in your contributions. This is a license to the Company, **not** an assignment of copyright.
+3. **Retained ownership.** You retain all right, title, and interest in your contributions. This is a license to the Maintainer, **not** an assignment of copyright.
 
-4. **No obligation.** The Company is under no obligation to use or include your contribution.
+4. **No obligation.** The Maintainer is under no obligation to use or include your contribution.
 
 5. **No warranty.** Your contribution is provided "as is", without warranties of any kind.
 

CONTRIBUTING.md

@@ -10,7 +10,7 @@ Welcome — and thanks for your interest in contributing. taOS is a self-hosted
 
 taOS is licensed under the **taOS Sustainable Use License** (source-available, not open source; see [`LICENSE`](LICENSE)) — free to use, modify, and self-host for personal use and for your own organisation's internal business purposes, with a separate commercial license required to sell it, host it as a paid service, or build it into a product you monetise.
 
-To keep this sustainable, **all contributors must agree to the Contributor License Agreement ([`CLA.md`](CLA.md))** before their contributions are merged. The CLA grants JAN LABS LTD the right to include and **relicense** your contributions under the project's licenses; **you keep ownership of your work**. You sign once — on your first pull request, comment **"I have read the CLA Document and I hereby sign the CLA"** and the CLA check turns green; it then covers all your future contributions.
+To keep this sustainable, **all contributors must agree to the Contributor License Agreement ([`CLA.md`](CLA.md))** before their contributions are merged. The CLA grants jaylfc the right to include and **relicense** your contributions under the project's licenses; **you keep ownership of your work**. You sign once — on your first pull request, comment **"I have read the CLA Document and I hereby sign the CLA"** and the CLA check turns green; it then covers all your future contributions.
 
 ---
 

LICENSE

@@ -1,14 +1,14 @@
 taOS Sustainable Use License, Version 0.1
 
-Copyright (c) 2026 JAN LABS LTD. All rights reserved.
+Copyright (c) 2026 jaylfc. All rights reserved.
 
 This license governs use of the accompanying software, "taOS" (the "Software").
 By using the Software you agree to these terms. The Software is source-available,
 not open source.
 
 1. Grant
 
-Subject to the conditions below, JAN LABS LTD grants you a non-exclusive,
+Subject to the conditions below, jaylfc grants you a non-exclusive,
 worldwide, royalty-free license to use, copy, and modify the Software, and to
 distribute your copies and modifications, free of charge.
 
@@ -27,7 +27,7 @@ this license with every copy you distribute.
 3. Commercial use requires a separate license
 
 You may not, without a separate commercial license granted in writing by
-JAN LABS LTD, use the Software (in whole or in part, modified or not) for a
+jaylfc, use the Software (in whole or in part, modified or not) for a
 Commercial Purpose.
 
 A "Commercial Purpose" means using the Software in, or to provide, any product or
@@ -49,17 +49,16 @@ free of charge and is not a Commercial Purpose, provided the Software (and
 anything built on it) is not offered, sold, hosted, or otherwise made available
 to any third party.
 
-To obtain a commercial license, contact JAN LABS LTD at info@taos.my.
+To obtain a commercial license, contact jaylfc at info@taos.my.
 
 4. Trademarks
 
-This license grants no rights to the "taOS" or "JAN LABS" names, logos, or
-trademarks.
+This license grants no rights to the "taOS" name, logo, or trademarks.
 
 5. Contributions
 
 Unless agreed otherwise in writing, any contribution you submit for inclusion in
-the Software is provided under this license, and you grant JAN LABS LTD a
+the Software is provided under this license, and you grant jaylfc a
 perpetual, irrevocable, worldwide right to use, modify, sublicense, and relicense
 that contribution on any terms.
 
@@ -71,7 +70,7 @@ FOR A PARTICULAR PURPOSE, AND NONINFRINGEMENT.
 
 7. Limitation of liability
 
-TO THE MAXIMUM EXTENT PERMITTED BY LAW, IN NO EVENT SHALL JAN LABS LTD BE LIABLE
+TO THE MAXIMUM EXTENT PERMITTED BY LAW, IN NO EVENT SHALL jaylfc BE LIABLE
 FOR ANY CLAIM, DAMAGES, OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT,
 TORT, OR OTHERWISE, ARISING FROM, OUT OF, OR IN CONNECTION WITH THE SOFTWARE OR
 THE USE OR OTHER DEALINGS IN THE SOFTWARE.

README.md

@@ -4,6 +4,8 @@
 
 # taOS
 
+**Your AI, your hardware, your data.** Self-hosted AI where your agents' memory, conversations, and files live on machines you own, fully offline when you want, cloud only when you choose.
+
 > **Beta (2026-06-02).** This is beta software meant for testers running it on their own hardware, so expect rough edges. The install script, backend, API, memory system (taOSmd), and multi-framework group chat all work; the desktop GUI is wired up for everyday use but a few flows (some agent management, worker connections, model routing) are still being smoothed out. Star or watch the repo to follow progress and catch the next release.
 >
 > **A heads-up on the catalogs:** with 100+ apps, 16 frameworks, and a large model catalog, plenty of install manifests have not been exercised on real hardware yet, so some apps, frameworks, and models will fail to install. If one does, [open an issue](https://github.com/jaylfc/tinyagentos/issues) with the name and the error you saw and I will fix the manifest as soon as I can. These reports are genuinely useful, most manifest fixes ship same-day.
@@ -30,6 +32,17 @@ A full web desktop environment with 36 bundled apps, 108 catalog apps, 47 MCP pl
 
 **[taOSmd](https://github.com/jaylfc/taosmd) -- Framework-agnostic AI memory system.** 97.0% **end-to-end Judge accuracy** on [LongMemEval-S](https://github.com/xiaowu0162/LongMemEval) -- retrieve → generate → judge-with-LLM-grader, 500 questions across 50+ sessions each. For context, the most-cited open comparators -- MemPalace (96.6%) and agentmemory (95.2%) -- publish **Recall@5** retrieval scores on the same dataset, which measures only whether the correct session lands in the top-5 (no generation, no judge). The metrics aren't apples-to-apples until one of us re-runs end-to-end; ours is the stricter measurement. Per-category on our hybrid-plus-query-expansion config: knowledge-update 100%, multi-session 98.5%, single-session-user 97.1%, single-session-assistant 96.4%, temporal-reasoning 94.0%, single-session-preference 90.0%. Everything runs on a £170 Orange Pi 5 Plus with no cloud dependencies. The stack: temporal knowledge graph with validity windows + contradiction detection, hybrid semantic+keyword vector search with cross-encoder rerank and LLM-assisted query expansion (the "Librarian" layer), zero-loss append-only archive, automatic fact extraction, intent-aware retrieval routing, multi-layer context assembly. Any agent framework can read/write through the HTTP API.
 
+### Your data stays yours
+
+Most AI assistants keep your memory, conversations, and files on their servers. taOS keeps them on yours.
+
+- **Offline memory.** Your AI's long-term memory is a self-hosted knowledge graph on your own box (a £170 Orange Pi is enough), not a row in someone else's cloud database.
+- **Self-hosted agents and chat.** Your agents, their conversations, and your channels run on hardware you control.
+- **Your compute, your models.** A local model catalog and cluster inference on your own devices; cloud models are opt-in, never required.
+- **Auditable and exit-able.** Source-available, with a self-hostable binary mirror and an air-gapped install path. Nothing locks you in.
+
+Sovereignty by default, cloud by choice. Run taOS fully offline, or connect a cloud model or paid remote access (taOSgo) when you decide it is worth it. The default is that your data never leaves your hardware.
+
 ---
 
 <p align="center">
@@ -744,4 +757,4 @@ taOS is better for the people testing it, filing issues, and sending fixes:
 
 taOS Sustainable Use License v0.1 -- source-available, not open source. See [LICENSE](LICENSE).
 
-Free to use, modify, and self-host for personal use and for your own organisation's internal business purposes -- forever. A separate commercial license from JAN LABS LTD is required to sell taOS, host it as a paid service, or build it into a product or service you monetise (contact info@taos.my). Prior releases tagged under AGPL-3.0 remain available under AGPL-3.0.
+Free to use, modify, and self-host for personal use and for your own organisation's internal business purposes -- forever. A separate commercial license from jaylfc is required to sell taOS, host it as a paid service, or build it into a product or service you monetise (contact info@taos.my). Prior releases tagged under AGPL-3.0 remain available under AGPL-3.0.

desktop/app.html

@@ -0,0 +1,52 @@
+<!DOCTYPE html>
+<html lang="en">
+  <head>
+    <meta charset="UTF-8" />
+    <meta name="viewport" content="width=device-width, initial-scale=1.0, viewport-fit=cover, user-scalable=no" />
+    <title>taOS</title>
+
+    <!-- Favicon -->
+    <link rel="icon" type="image/x-icon" href="/static/favicon.ico" />
+    <link rel="icon" type="image/png" sizes="32x32" href="/static/icon-32.png" />
+    <link rel="icon" type="image/png" sizes="16x16" href="/static/icon-16.png" />
+
+    <!-- PWA manifest is injected at runtime by app-standalone-main.tsx -->
+    <meta name="theme-color" content="#141415" />
+
+    <!-- iOS PWA -->
+    <meta name="apple-mobile-web-app-capable" content="yes" />
+    <meta name="apple-mobile-web-app-status-bar-style" content="black-translucent" />
+    <meta name="apple-mobile-web-app-title" content="taOS" />
+    <link rel="apple-touch-icon" href="/static/icon-180.png" />
+
+    <!-- iOS splash screens (reuse 512 icon on #141415 background; iOS scales it) -->
+    <link rel="apple-touch-startup-image" href="/static/icon-512.png" />
+
+    <meta name="mobile-web-app-capable" content="yes" />
+
+    <style>
+      html, body {
+        margin: 0;
+        padding: 0;
+        overflow: hidden;
+        height: 100%;
+        width: 100%;
+        /* Theme-aware dark canvas so Safari tints its chrome + safe areas dark. */
+        background: var(--color-shell-bg, #141415);
+        color-scheme: dark;
+        -webkit-user-select: none;
+        user-select: none;
+        -webkit-tap-highlight-color: transparent;
+      }
+      input, textarea, [contenteditable="true"] {
+        -webkit-user-select: text;
+        user-select: text;
+      }
+      #root { height: 100%; width: 100%; }
+    </style>
+  </head>
+  <body>
+    <div id="root"></div>
+    <script type="module" src="/src/app-standalone-main.tsx"></script>
+  </body>
+</html>

desktop/src/AppStandalone.test.tsx

@@ -0,0 +1,56 @@
+import { render, screen, act } from "@testing-library/react";
+import { describe, it, expect, vi, beforeEach } from "vitest";
+import type { ComponentType } from "react";
+
+// The registry mock is defined per-test via vi.mock hoisting; we override
+// getApp inside each test group instead.
+
+const FakeApp = ({ windowId }: { windowId: string }) => (
+  <div data-testid="fake-app" data-window={windowId}>
+    app content
+  </div>
+);
+
+// Default registry mock: messages is pwa-enabled, unknown is not present.
+vi.mock("./registry/app-registry", () => ({
+  getApp: vi.fn((id: string) => {
+    if (id === "messages") {
+      return {
+        id: "messages",
+        name: "Messages",
+        pwa: true,
+        component: () => Promise.resolve({ default: FakeApp as ComponentType<{ windowId: string }> }),
+      };
+    }
+    return undefined;
+  }),
+}));
+
+// InstallPromptBanner has side-effects (window.matchMedia, beforeinstallprompt)
+// that are not relevant to these tests; stub it out.
+vi.mock("./shell/InstallPromptBanner", () => ({
+  InstallPromptBanner: () => null,
+}));
+
+import { AppStandalone } from "./AppStandalone";
+
+async function flush() {
+  await act(async () => {
+    await Promise.resolve();
+    await Promise.resolve();
+  });
+}
+
+describe("AppStandalone", () => {
+  it("renders the app component for a known pwa-enabled app", async () => {
+    render(<AppStandalone appId="messages" />);
+    await flush();
+    expect(screen.getByTestId("fake-app")).toBeTruthy();
+    expect(screen.getByTestId("fake-app").getAttribute("data-window")).toBe("standalone-messages");
+  });
+
+  it("renders nothing when the app id is not in the registry", () => {
+    render(<AppStandalone appId="does-not-exist" />);
+    expect(screen.queryByTestId("fake-app")).toBeNull();
+  });
+});

desktop/src/AppStandalone.tsx

@@ -0,0 +1,49 @@
+import { Suspense, lazy, useMemo } from "react";
+import { getApp } from "./registry/app-registry";
+import { InstallPromptBanner } from "./shell/InstallPromptBanner";
+import type { ComponentType } from "react";
+
+interface Props {
+  appId: string;
+}
+
+export function AppStandalone({ appId }: Props) {
+  const manifest = getApp(appId);
+
+  // Create the lazy component ONCE per appId. Calling lazy() in the render body
+  // makes a new component type every render, which unmounts and remounts the
+  // app (losing its state) on any re-render.
+  const AppComponent = useMemo(
+    () =>
+      manifest
+        ? lazy(() => manifest.component() as Promise<{ default: ComponentType<{ windowId: string }> }>)
+        : null,
+    [appId],
+  );
+
+  // Guard: caller should verify pwa:true before mounting this component.
+  if (!manifest || !AppComponent) return null;
+
+  return (
+    <div
+      className="w-screen flex flex-col overflow-hidden"
+      style={{
+        // 100dvh exactly fills the visible standalone area; 100vh (h-screen)
+        // resolves to the larger viewport in an installed iOS PWA and leaves
+        // dead space at the bottom.
+        height: "100dvh",
+        backgroundColor: "var(--color-shell-bg)",
+        paddingTop: "env(safe-area-inset-top, 0px)",
+      }}
+    >
+      <InstallPromptBanner />
+      <Suspense fallback={
+        <div className="flex items-center justify-center h-full" style={{ color: "rgba(255,255,255,0.4)" }}>
+          Loading...
+        </div>
+      }>
+        <AppComponent windowId={`standalone-${appId}`} />
+      </Suspense>
+    </div>
+  );
+}

desktop/src/ChatStandalone.tsx

@@ -6,8 +6,15 @@ const MessagesApp = lazy(() => import("./apps/MessagesApp").then((m) => ({ defau
 export function ChatStandalone() {
   return (
     <div
-      className="h-screen w-screen flex flex-col overflow-hidden"
-      style={{ backgroundColor: "var(--color-shell-bg)", paddingTop: "env(safe-area-inset-top, 0px)" }}
+      className="w-screen flex flex-col overflow-hidden"
+      style={{
+        // 100dvh exactly fills the visible standalone area; 100vh (h-screen)
+        // resolves to the larger viewport in an installed iOS PWA and leaves
+        // dead space at the bottom.
+        height: "100dvh",
+        backgroundColor: "var(--color-shell-bg)",
+        paddingTop: "env(safe-area-inset-top, 0px)",
+      }}
     >
       <InstallPromptBanner />
       <Suspense fallback={

desktop/src/app-standalone-main.tsx

@@ -0,0 +1,58 @@
+import { StrictMode } from "react";
+import { createRoot } from "react-dom/client";
+import { AppStandalone } from "./AppStandalone";
+import { AppShell } from "./components/AppShell";
+import { restoreActiveTheme, installWebkitRepaintGuards } from "./stores/theme-store";
+import { getApp } from "./registry/app-registry";
+import "./theme/tokens.css";
+
+// Apply the user's persisted theme on boot, same as chat-main.tsx.
+void restoreActiveTheme();
+// WebKit blanks backdrop-filter surfaces when the tab is backgrounded then
+// shown again; re-composite on return (same fix the desktop shell installs).
+installWebkitRepaintGuards();
+
+const params = new URLSearchParams(location.search);
+const appId = params.get("app") ?? "";
+const manifest = appId ? getApp(appId) : undefined;
+
+if (!manifest?.pwa) {
+  // Unknown or non-PWA app: show a minimal not-installable message.
+  document.title = "Not installable";
+  createRoot(document.getElementById("root")!).render(
+    <StrictMode>
+      <div
+        style={{
+          height: "100%",
+          width: "100%",
+          display: "flex",
+          alignItems: "center",
+          justifyContent: "center",
+          color: "rgba(255,255,255,0.5)",
+          fontSize: "0.9rem",
+          fontFamily: "system-ui, sans-serif",
+          background: "#141415",
+        }}
+      >
+        This app is not available as a standalone PWA.
+      </div>
+    </StrictMode>,
+  );
+} else {
+  // Inject the dynamic manifest link so the browser picks up the correct
+  // name, icons, and start_url for this specific app.
+  const link = document.createElement("link");
+  link.rel = "manifest";
+  link.href = `/manifest?app=${encodeURIComponent(appId)}`;
+  document.head.appendChild(link);
+
+  document.title = manifest.name;
+
+  createRoot(document.getElementById("root")!).render(
+    <StrictMode>
+      <AppShell>
+        <AppStandalone appId={appId} />
+      </AppShell>
+    </StrictMode>,
+  );
+}