feat: add fail-closed Local Delegation to Cairn (signals-dashboard 0.3.0)

.github/plugin/marketplace.json

@@ -1282,8 +1282,8 @@
     {
       "name": "signals-dashboard",
       "source": "plugins/signals-dashboard",
-      "description": "Real-time Workshop dashboard with agent signals, honesty calibration, and cost-aware repo or connected desk launch profiles.",
-      "version": "0.2.0"
+      "description": "Real-time Workshop dashboard with agent signals, honesty calibration, cost-aware desk profiles, and fail-closed Local Delegation.",
+      "version": "0.3.0"
     },
     {
       "name": "site-studio",

docs/README.plugins.md

@@ -102,7 +102,7 @@ See [CONTRIBUTING.md](../CONTRIBUTING.md#adding-plugins) for guidelines on how t
 | [rust-mcp-development](../plugins/rust-mcp-development/README.md) | Build high-performance Model Context Protocol servers in Rust using the official rmcp SDK with async/await, procedural macros, and type-safe implementations. | 2 items | rust, mcp, model-context-protocol, server-development, sdk, tokio, async, macros, rmcp |
 | [salesforce-development](../plugins/salesforce-development/README.md) | Complete Salesforce agentic development environment covering Apex & Triggers, Flow automation, Lightning Web Components, Aura components, and Visualforce pages. | 7 items | salesforce, apex, triggers, lwc, aura, flow, visualforce, crm, salesforce-dx |
 | [security-best-practices](../plugins/security-best-practices/README.md) | Security frameworks, accessibility guidelines, performance optimization, and code quality best practices for building secure, maintainable, and high-performance applications. | 1 items | security, accessibility, performance, code-quality, owasp, a11y, optimization, best-practices |
-| [signals-dashboard](../plugins/signals-dashboard/README.md) | Real-time Workshop dashboard with agent signals, honesty calibration, and cost-aware repo or connected desk launch profiles. | 1 items | agent-signals, dashboard, multi-agent, coordination, canvas |
+| [signals-dashboard](../plugins/signals-dashboard/README.md) | Real-time Workshop dashboard with agent signals, honesty calibration, cost-aware desk profiles, and fail-closed Local Delegation. | 1 items | agent-signals, dashboard, multi-agent, coordination, canvas, local-delegation |
 | [site-studio](../plugins/site-studio/README.md) | Plan, draft, and track a personal website section by section — a shared canvas where you and your agent author content, watch progress, and review every change. | 1 items | agent-collaboration, content-authoring, personal-website, progress-tracking, section-planning, site-builder |
 | [skill-image-gen](../plugins/skill-image-gen/README.md) | Generate images using AI directly from your coding workflow. Supports OpenAI (gpt-image-2) and Google Gemini. BYO API key — the skill guides you through setup on first use. | 1 items | image-generation, openai, gemini, ai, art, sprites, textures, icons |
 | [software-engineering-team](../plugins/software-engineering-team/README.md) | 7 specialized agents covering the full software development lifecycle from UX design and architecture to security and DevOps. | 7 items | team, enterprise, security, devops, ux, architecture, product, ai-ethics |

extensions/signals-dashboard/README.md

@@ -0,0 +1,145 @@
+# 🪨 Cairn — Signals Dashboard
+
+A live GitHub Copilot CLI **canvas extension** that shows the pulse of every
+desk in your Workshop. It reads the agent signals your desks emit and renders
+them as a compact, always-current dashboard in a side panel — so you can direct
+the work instead of polling each desk by hand.
+
+It replaces the old Blazor **WorkshopRoom** dashboard (`src/WorkshopRoom/`) with
+a native canvas that runs inside GHCP, with no separate web app to launch.
+
+## What it is
+
+Each desk in the Workshop leaves signals behind — small stones on the trail —
+by writing JSON files into its `.signals/` folder. Cairn scans those folders,
+picks the most recent signal per desk, and renders:
+
+- **Score bars** for the desk's self-assessment (intent, confidence, accuracy,
+  completeness).
+- **Patterns** the desk reported: what worked ✓, what was hard △, and skill
+  gaps ✗.
+- **Escalations** — desks that raised their hand, with what they're blocked on
+  and their recommendation, pinned to the top and pulsing red.
+
+## How to open it
+
+The dashboard is registered as the **🪨 Cairn** canvas (`signals-dashboard`).
+Ask Copilot to open it and pass your workshop root as `workshopDir`:
+
+> Open the 🪨 Cairn canvas with `workshopDir` set to the folder that contains
+> my `desks/` directory.
+
+`workshopDir` must be the **absolute path to the workshop root** — the folder
+that holds `desks/` (and optionally `classroom/`). If omitted, it falls back to
+the current working directory.
+
+## Features
+
+- **Signal scanning** — walks `desks/*/.signals/` and `classroom/*/.signals/`,
+  reading the newest `*.json` per desk (mirrors `SignalReader.cs`).
+- **Score bars** — color-coded intent / confidence / accuracy / completeness,
+  scored out of 5.
+- **Escalation alerts** — escalation signals sort to the very top, render with a
+  pulsing red border, and surface the blocker + recommendation.
+- **Active desks first** — sorted escalations → recent signals → desks with no
+  signal yet, then by recency.
+- **Stash / restore** — pause a workstream by stashing its desk. Stashed desks
+  drop off the active view and auto-expire after a **48-hour TTL**; restore any
+  time before then. Stash state lives in `.desk-stash.json` at the workshop
+  root.
+- **Auto-refresh** — the panel refreshes every 5 seconds using a background
+  fetch (no full page reload), so scores and escalations stay current smoothly.
+- **Summary bar** — desk count, how many are reporting vs. awaiting, an
+  escalation badge, and average scores across the room.
+- **Cost-aware desk launch** — **open** starts a repo-profile desk that keeps the
+  verified Workshop root available while suppressing ambient plugin MCPs.
+  **connected** preserves every configured MCP for work that needs external
+  systems. Agency remains the preferred wrapper when installed.
+- **Local Delegation** — orthogonal off/on control. When available and on, the
+  frontier desk may use the installed [`local-agent-delegation`](https://github.com/jennyf19/sealed-delegation)
+  skill for bounded, independently gated read/evidence work. Fail-closed: no
+  skill or no qualified route receipt means the toggle cannot take effect, and
+  no local-savings credit is awarded.
+
+## Agent actions
+
+The canvas also exposes actions Copilot can invoke directly:
+
+- `refresh` — force a rescan and return current signal data as JSON.
+- `stash` — stash a desk by `deskName`.
+- `restore` — restore a stashed desk by `deskName`.
+- `open_desk` — open a desk with optional `profile: "repo" | "connected"` and
+  optional `localDelegation: "off" | "on"`.
+
+## Desk launch profiles
+
+`repo` is the default. At launch, Cairn asks Copilot for the enabled
+plugin-scoped MCP inventory and disables those ambient servers for the topic
+desk. User-, workspace-, organization-, and built-in resources are left alone.
+If discovery fails, Copilot plugin MCP suppression fails open; Agency repo mode
+still omits Agency's own default MCPs.
+
+When Agency is installed, Cairn keeps the existing `agency copilot` launch and
+adds Agency's `--no-default-mcps` in repo mode. Outside Agency, the same profile
+is applied directly to Copilot CLI.
+
+Both profiles pass `--add-dir <workshop-root>` so a desk can intentionally read
+another desk's journal or artifact without receiving access outside the room.
+
+Set `WORKSHOP_DESK_PROFILE=connected` to retain the historical default for the
+main **open** button. The separate **connected** button is always available when
+repo mode is the default.
+
+## Local Delegation
+
+Local Delegation is **not** a third desk profile and does not replace the frontier
+model. It is a separate permission bit:
+
+```text
+repo / connected        = which MCPs and tools the frontier desk can see
+Local Delegation off/on = whether the frontier desk may invoke a bounded local worker
+```
+
+Availability is fail-closed. Cairn enables the lane only when:
+
+1. the `local-agent-delegation` skill is installed, and
+2. a qualified route is declared via `WORKSHOP_LOCAL_DELEGATION_ROUTE_ID` or a
+   receipt at `~/.copilot/local-agent-runs/qualified-route.json`
+   (`status: "qualified"`, safe `route_id`).
+
+Operator preference is stored **user-locally** under
+`~/.copilot/workshop-local-delegation/` (keyed by the canonical workshop path),
+never in the cloned workshop — a repo cannot ship `preference: on`.
+When the preference is on but availability fails, opens still launch as frontier
+desks and surface the reason — they never silently fall back with savings credit.
+
+When effective, Cairn sets `WORKSHOP_LOCAL_DELEGATION=enabled` on the launched
+process, shows an open toast/badge (`Local Delegation effective · route …`), and
+may append one short ASCII line to `-i` (`Local Delegation env is enabled.`) when
+that combined prompt stays quote-free and under the length guard. Full policy
+still lives in the env flag plus the installed `local-agent-delegation` skill —
+never a long multi-sentence `-i` appendix (Windows Terminal reparse).
+The runtime, launcher, and gates remain owned by
+[Sealed Delegation](https://github.com/jennyf19/sealed-delegation).
+
+## Signal shape
+
+Cairn reads the agent-signals protocol used across the Workshop:
+
+```json
+{
+  "signal_type": "execution",
+  "agent_name": "desk-name",
+  "self_assessment": { "intent": 5, "confidence": 4, "accuracy": 4, "completeness": 3 },
+  "patterns": { "what_worked": "...", "what_was_hard": "...", "skill_gap": "..." },
+  "escalation": { "reason": "...", "blocked_on": "...", "recommendation": "..." }
+}
+```
+
+`escalation` is only present on `signal_type: "escalation"` signals.
+
+## Replaces the Blazor WorkshopRoom
+
+This canvas supersedes the standalone Blazor dashboard in `src/WorkshopRoom/`.
+The data is the truth and the UI is just a view — Cairn renders the same signal
+data natively inside GHCP, so there's no separate server to run.