emits sanitized (no model names) + launch position args + polish dampen

Operator 2026-05-18 chat exposed four bugs; this commit pairs with
the prior mios-windows launch fix to close all of them.

1. EMITS: status line was still showing OLD English narrative +
   model names ("MiOS-Agent: refining via qwen2.5-coder:7b (CPU)...")
   because the GLOBAL SWEEP commit edited the on-disk pipe file
   but never re-ran mios-owui-install-pipe -- OWUI loads pipes
   from function.content in webui.db, not from disk per-request.
   Two-step fix:
     * Sanitized the emit strings further: dropped model-name
       interpolation entirely ("🎨 polish" not "🎨 polish ← X (CPU)").
       Model identity lives in valves; the status line stays
       universal (operator directive 2026-05-18: "Sanitize the
       emitters to not show models but emit something natively
       (no hard-coding)").
     * Ran /usr/libexec/mios/mios-owui-install-pipe -- DB now
       carries the new content. Verified: all 5 old English
       markers gone, all 6 new symbol-form markers present.

2. LAUNCH POSITION ARGS: agent had no way to launch+place
   precisely (operator-flagged: "MiOS-Agent(s) MUST also KNOW
   window launch params/args to be able to launch and move
   precisely!!!"). mios-windows launch now reads three env-driven
   knobs the agent can set BEFORE the call:
     MIOS_LAUNCH_POSITION   left|right|top|bottom|center|none
     MIOS_LAUNCH_SIZE       <W>x<H>   (e.g. 1280x720)
     MIOS_LAUNCH_PLACE      <X>,<Y>   (absolute top-left)
   The placement block is computed in the inline Python that
   builds the Start-Process command; PowerShell snippet substitutes
   the right $x/$y/$w/$h before MoveWindow. Default stays "center"
   for backwards compat.

3. POLISH FALSE-POSITIVE: polish KNOWN_AGENT_ERROR_RE matched a
   PowerShell-in-bash signature from an early exploratory call in
   the same turn, then rewrote the FINAL successful launch as
   "Agent attempted PowerShell in bash by mistake". The operator
   saw a misleading failure for what was actually a working launch
   (compounded by the invisible-window bug fixed in the prior
   commit). Tightened the polish prompt: KNOWN AGENT ERRORS
   rewrites only fire when the raw output does NOT also contain a
   confirmed-success signal (tool_result success:true, pid:<N>,
   presented_to_operator:true, "wrote <path>"). Polish the
   SUCCESS, not the earlier exploration error.

4. SOUL.md hard rule 3a (NEW): "Launch position + args" -- documents
   the three env knobs with examples + the verify-then-stop rule
   ("ALWAYS verify with mios-window-active --present <title> ONCE.
   If presented_to_operator: true -- STOP. Don't retry."). Quotes
   the 19-tool-call retry-after-success incident as the case study.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

Author: mios-dev

usr/libexec/mios/mios-windows

@@ -503,6 +503,62 @@ if extra_args:
     arglist = ", ".join(shlex.quote(a) for a in extra_args)
     start = (f"$p = Start-Process -FilePath {shlex.quote(target)} "
              f"-ArgumentList {arglist} -PassThru")
+# Operator directive 2026-05-18: "MiOS-Agent(s) MUST also KNOW
+# window launch params/args to be able to launch and move
+# precisely!!!". Three env-driven knobs the caller can set BEFORE
+# invoking mios-windows launch:
+#   MIOS_LAUNCH_POSITION   left|right|top|bottom|center|none
+#                          (default: center; "none" leaves WHERE the
+#                          OS placed the window)
+#   MIOS_LAUNCH_SIZE       <W>x<H>  (e.g. 1280x720; default: keep
+#                          the size Start-Process gave the window)
+#   MIOS_LAUNCH_PLACE      <X>,<Y>  (absolute top-left, takes
+#                          precedence over MIOS_LAUNCH_POSITION)
+import os
+position = os.environ.get("MIOS_LAUNCH_POSITION", "center").lower()
+size_env = os.environ.get("MIOS_LAUNCH_SIZE", "")
+place_env = os.environ.get("MIOS_LAUNCH_PLACE", "")
+# Compute the placement PowerShell snippet from those knobs.
+place_block = (
+    "$x = $r.L; $y = $r.T; $w = $r.R - $r.L; $h = $r.B - $r.T; "
+    "$s = [System.Windows.Forms.Screen]::PrimaryScreen.WorkingArea; "
+)
+# Size override (parse "WxH"); applied before position so position
+# uses the NEW geometry.
+if "x" in size_env.lower():
+    try:
+        sw, sh = size_env.lower().split("x", 1)
+        sw = int(sw.strip()); sh = int(sh.strip())
+        place_block += f"$w = {sw}; $h = {sh}; "
+    except (ValueError, TypeError):
+        pass
+# Absolute placement override.
+if "," in place_env:
+    try:
+        px, py = place_env.split(",", 1)
+        px = int(px.strip()); py = int(py.strip())
+        place_block += f"$x = {px}; $y = {py}; "
+        position = "_explicit"
+    except (ValueError, TypeError):
+        pass
+# Otherwise apply named position relative to PrimaryScreen WorkingArea.
+if position == "center":
+    place_block += (
+        "$x = $s.X + [int](($s.Width - $w) / 2); "
+        "$y = $s.Y + [int](($s.Height - $h) / 2); ")
+elif position == "left":
+    place_block += "$x = $s.X; $y = $s.Y; $w = [int]($s.Width / 2); $h = $s.Height; "
+elif position == "right":
+    place_block += ("$w = [int]($s.Width / 2); $h = $s.Height; "
+                    "$x = $s.X + [int]($s.Width / 2); $y = $s.Y; ")
+elif position == "top":
+    place_block += "$x = $s.X; $y = $s.Y; $w = $s.Width; $h = [int]($s.Height / 2); "
+elif position == "bottom":
+    place_block += ("$w = $s.Width; $h = [int]($s.Height / 2); "
+                    "$x = $s.X; $y = $s.Y + [int]($s.Height / 2); ")
+elif position in ("none", "_explicit"):
+    pass  # keep existing $x/$y (no reposition for "none";
+          # explicit values already in place for "_explicit")
 center = (
     "; for ($i = 0; $i -lt 50; $i++) { "
     "  $p = Get-Process -Id $p.Id -ErrorAction SilentlyContinue; "
@@ -519,10 +575,7 @@ center = (
     "'@ -ErrorAction SilentlyContinue; "
     "$r = New-Object MX.W32D+RECT; "
     "[MX.W32D]::GetWindowRect($p.MainWindowHandle, [ref]$r) | Out-Null; "
-    "$w = $r.R - $r.L; $h = $r.B - $r.T; "
-    "$s = [System.Windows.Forms.Screen]::PrimaryScreen.WorkingArea; "
-    "$x = $s.X + [int](($s.Width - $w) / 2); "
-    "$y = $s.Y + [int](($s.Height - $h) / 2); "
+    + place_block +
     "[MX.W32D]::MoveWindow($p.MainWindowHandle, $x, $y, $w, $h, $true) | Out-Null; "
     "[MX.W32D]::SetForegroundWindow($p.MainWindowHandle) | Out-Null "
     "}"

usr/share/mios/ai/hermes-soul.md

@@ -37,6 +37,34 @@ never from training data.
    error. Anything with `$_.` / `Get-*` / `-like` / `-match` / `@'…'@`
    MUST be `terminal: mios-windows ps "<powershell>"`.
 
+3a. **Launch position + args** — the launcher reads three env vars
+    you can set BEFORE the call to control window placement
+    precisely (operator directive 2026-05-18: "MUST also KNOW
+    window launch params/args to be able to launch and move
+    precisely"):
+
+    ```
+    MIOS_LAUNCH_POSITION=left|right|top|bottom|center|none
+    MIOS_LAUNCH_SIZE=<W>x<H>          (e.g. 1280x720)
+    MIOS_LAUNCH_PLACE=<X>,<Y>         (absolute top-left)
+    ```
+
+    Example — launch Notepad on the LEFT half of the primary screen:
+    ```
+    terminal: MIOS_LAUNCH_POSITION=left mios-find "notepad" | bash
+    ```
+
+    Pass extra positional args after the bare launcher target:
+    ```
+    terminal: mios-windows launch notepad /path/to/file.txt
+    ```
+
+    After launch, ALWAYS verify with `mios-window-active --present
+    "<title>"` ONCE. If `presented_to_operator: true` -- STOP. Don't
+    retry. Operator-flagged 2026-05-18: agent claimed Notepad
+    launched then ran 19 more tool calls re-attempting the same
+    success.
+
 3. **"Launch / open / start / run `<X>`" — Windows launch path.**
    FIRST call `everything_search(query="<X>")` (native tool, NTFS
    index, sub-100ms). It returns the actual `.url`/`.lnk`/`.exe`

usr/share/mios/owui/pipes/mios_agent_pipe.py

@@ -607,10 +607,26 @@ async def _tail_watcher(
         "\n"
         "## KNOWN AGENT ERRORS in RAW OUTPUT -- recognize + rewrite cleanly\n"
         "\n"
-        "If RAW OUTPUT contains any of these signatures, DO NOT echo the\n"
-        "raw error verbatim -- the operator already saw it once. Instead\n"
-        "emit a single line explaining what the agent did wrong + what\n"
-        "the operator should try next:\n"
+        "IMPORTANT: only apply the rewrites below when the raw output\n"
+        "does NOT also contain a confirmed-success signal -- specifically\n"
+        "a tool_result with `success: true`, a `pid: <N>` in broker\n"
+        "output, a `presented_to_operator: true` from mios-window-active,\n"
+        "or a `wrote <path>` line from a file/CDI helper. If the agent\n"
+        "errored during exploration but ultimately succeeded, polish\n"
+        "the SUCCESS not the error -- operator-flagged 2026-05-18:\n"
+        "polish rewrote a successful Notepad launch (pid 499978) into\n"
+        "'Agent attempted PowerShell in bash by mistake' because an\n"
+        "earlier exploratory bash call in the same turn errored. The\n"
+        "operator saw a misleading failure message for what was\n"
+        "actually a working launch (the broker had a separate\n"
+        "invisible-window bug fixed in mios-windows; the polish\n"
+        "false-positive compounded it).\n"
+        "\n"
+        "If RAW OUTPUT contains any of these signatures AND no\n"
+        "confirmed-success signal, DO NOT echo the raw error verbatim --\n"
+        "the operator already saw it once. Instead emit a single line\n"
+        "explaining what the agent did wrong + what the operator\n"
+        "should try next:\n"
         "\n"
         "  * `/var/lib/mios/hermes.<Word>` or `/var/lib/mios/hermes.<Prop>`\n"
         "    in any line that mentions 'not recognized' / 'cmdlet' / 'cannot\n"
@@ -747,7 +763,11 @@ async def _polish_via_cpu(
             await self._emit(emitter, "✓ clean → skip polish")
             return raw_output
 
-        await self._emit(emitter, f"🎨 polish ← {self.valves.POLISH_MODEL} (CPU)")
+        # Emit form: pure symbol, no model name. Operator directive
+        # 2026-05-18: "Sanitize the emitters to not show models but
+        # emit something natively (no hard-coding)". Model identity
+        # lives in valves; status line stays universal.
+        await self._emit(emitter, "🎨 polish")
 
         body = {
             "model": self.valves.POLISH_MODEL,
@@ -875,7 +895,8 @@ async def _refine_via_cpu(
             return user_text
 
         model = self.valves.REFINE_MODEL
-        await self._emit(emitter, f"🧠 refine ← {model} (CPU)")
+        # Sanitized emit (no model name); see polish emit comment above.
+        await self._emit(emitter, "🧠 refine")
         payload = {
             "model": model,
             "messages": [
@@ -912,7 +933,7 @@ async def _refine_via_cpu(
                 await self._emit(emitter, "⚠️ refine=∅ → original")
                 return user_text
             await self._emit(emitter,
-                f"✓ refine {len(user_text)}c → {len(refined)}c (CPU)")
+                f"✓ refine {len(user_text)}c → {len(refined)}c")
             return refined
         except asyncio.TimeoutError:
             await self._emit(emitter,
@@ -1057,8 +1078,11 @@ async def pipe(
         }
 
         if is_task_gen:
+            # Sanitized: no model name in the emit; task_kind is the
+            # OWUI-defined identifier (title_generation, etc.) and
+            # stays cross-locale.
             await self._emit(__event_emitter__,
-                f"⚙️ task-gen ({task_kind}) → CPU {self.valves.REFINE_MODEL}")
+                f"⚙️ task-gen ({task_kind})")
             async for chunk in self._raw_passthrough(body, __event_emitter__):
                 yield chunk
             return