feat!: rename Hawk to Rho; add Tau-style TUI and feature parity (#306)

* refactor!: rename Hawk to Rho

Rename the product, module, binary, config surface, and docs from Hawk to
Rho. The module path is now github.com/GrayCodeAI/rho, the binary and
command directory are rho, and the environment prefix is RHO_.

Compatibility shims keep existing installs working:
- internal/env.GetenvRho reads RHO_<suffix> then falls back to HAWK_<suffix>
- storage.ConfigDir/StateDir/CacheDir honor HAWK_*_DIR overrides and reuse
  an existing ~/.hawk directory when ~/.rho does not exist

BREAKING CHANGE: module path, binary name, and default config directory
changed from hawk to rho.

* feat(tui): add Tau-style theme and frontend contract

- Add a 'tau' theme palette (near-black surface, single muted blue accent,
  hairline separators) to the theme registry and picker.
- Minimal chrome: the tau theme renders the input with a single bottom
  hairline instead of the default top+bottom box rules.
- Document the StreamEvent frontend contract and add a testaudit guard that
  frontends (cmd/) never import engine internals (agent/code/prompt/async/
  trajectory).
- Add a plan doc at docs/plans/rho-tau-alignment.md.

* feat(cli): add --cwd flag and transcript output format

- --cwd <dir>: run against another project directory (interactive, -p, exec)
- --output-format transcript: plain timestamped transcript, no ANSI
- Add docs/plans/tau-feature-parity.md tracking Tau feature parity

* feat(cli): add /login and .agents instruction resources

- /login [provider] routes to the config panel (Tau's auth entry point),
  preselecting a provider when given.
- LoadAgentsMDFrom now also reads .agents/AGENTS.md, matching Tau's shared
  resource layout alongside the root-level AGENTS.md.

* fix(cli): apply --cwd for subcommands and document transcript

--cwd only ran in the root RunE, so 'rho --cwd X <subcommand>' silently
ignored it (and an invalid path did not error). Move it to
PersistentPreRunE so every subcommand honors it and the path is validated
once. Also list 'transcript' in the --output-format help.

* test: regenerate golden help for --cwd and transcript

* fix(ci): generate workspace from checkout dir and de-hardcode fingerprint name

The product repo is still checked out as 'hawk' in CI while ecosystem.yaml
lists 'rho', so generate-workspace.sh failed with 'directory rho does not
exist'. Derive the self directory from the checkout and compare
case-insensitively so the workspace generates before and after the rename.

fingerprint_test asserted Name=='rho' but Generate derives the name from the
checkout directory, so it failed under the 'hawk' checkout. Compare against
the actual root basename instead.

* fix(test): restore theme globals in chrome tests

The chrome tests used ApplyTheme("dark") as cleanup, which writes the dark
palette's values (e.g. textPrimary #ECECEE) rather than the init-time defaults
(#F0F0F0). Depending on test order this leaked into
TestAdaptiveNeutralsPreserveDarkAppearance, which locks the init values. Use
the existing restoreThemeGlobals helper instead.

* fix(security): harden shell, git, path, and external-content boundaries

- TerminalCreate/TerminalSend now run the full Bash safety stack
  (destructive/AST/obfuscation checks), scrub provider keys from the PTY
  environment, and are classified as shell tools so they require approval.
- Extract the shared shell safety stack into validateShellCommand and reuse
  it from BashTool and the terminal tools.
- Route model-facing git invocations through a new internal/gitcmd helper
  that disables repo-controlled program execution (diff.external,
  core.fsmonitor, core.pager, core.editor) and system config.
- Download refuses sensitive paths (e.g. .env, provider.json).
- Custom linter shell-quotes the file path to prevent command injection.
- Wrap WebFetch/WebSearch/Browser output as untrusted external content
  before it enters the model context.
- URLScraper uses the SSRF guard and IP-pinned client.
- Token store rejects symlinks and repairs permissive modes.

* fix(concurrency): make tool events cancellable and close data races

- Tool event sends select on ctx.Done() so a consumer that stops draining
  (TUI quit, daemon disconnect) no longer blocks tool goroutines forever.
- Background-task supervisor publishes cmd.Wait's error on a channel instead
  of reading cmd.ProcessState concurrently with Wait.
- Guard the package-global lastAutoCommitHash with a mutex.
- Track daemon review subprocesses in a WaitGroup, release the concurrency
  slot when the review finishes, and bound each run with a timeout.
- Add timeouts to spec tool exec (go test/find/grep) and git context.

* chore: remove dead packages and make the CI fuzz gate real

- Delete internal/jsonc and internal/providers: zero production importers.
- Drop their references from the Makefile test-new/cover-new targets.
- Add a non-mutating fmt-check target and use it in make ci.
- Fix the fuzz job: each target now names a single package (./cmd/... had
  multiple, so the cmd target failed setup silently) and failures are no
  longer swallowed by || true.

Author: Patel230

.dockerignore

@@ -5,8 +5,8 @@
 .factory
 Dockerfile
 .dockerignore
-hawk_bin
-hawk_test_bin
+rho_bin
+rho_test_bin
 coverage.out
 coverage.html
 go.work

.env.example

@@ -1,10 +1,10 @@
-# hawk daemon environment variables — copy to .env and fill in.
-# Only HAWK_DAEMON_API_KEY is consumed from the environment.
-HAWK_DAEMON_API_KEY=
+# rho daemon environment variables — copy to .env and fill in.
+# Only RHO_DAEMON_API_KEY is consumed from the environment.
+RHO_DAEMON_API_KEY=
 
-# The following are NOT read by hawk — setting them has no effect:
-#   HAWK_DAEMON_PORT / HAWK_DAEMON_HOST — daemon binds 127.0.0.1:4590;
-#     override with the --host / --port flags (see `hawk daemon start --help`)
+# The following are NOT read by rho — setting them has no effect:
+#   RHO_DAEMON_PORT / RHO_DAEMON_HOST — daemon binds 127.0.0.1:4590;
+#     override with the --host / --port flags (see `rho daemon start --help`)
 #   EYRIE_API_KEY / EYRIE_BASE_URL, HARRIER_API_KEY / HARRIER_ADDR —
 #     consumed by sibling services, not by this binary
 # See docs/user-guide/05-configuration.md for the full precedence chain.

.github/CODEOWNERS

@@ -1,4 +1,4 @@
-# CODEOWNERS for hawk
+# CODEOWNERS for rho
 #
 # These owners will be the default owners for everything in the repo. Unless
 # a later match takes precedence, they will be requested for review when

.github/ISSUE_TEMPLATE/bug_report.yml

@@ -11,15 +11,15 @@ body:
         of the form as you can — the more we know, the faster we can fix it.
 
         Before submitting:
-        - Search [existing issues](https://github.com/GrayCodeAI/hawk/issues) to avoid duplicates.
+        - Search [existing issues](https://github.com/GrayCodeAI/rho/issues) to avoid duplicates.
         - If this is a security issue, please **do not** file a public issue. See `SECURITY.md`.
 
   - type: textarea
     id: what-happened
     attributes:
       label: What happened?
       description: A clear, concise description of the bug.
-      placeholder: When I run `hawk ...`, I expected X but got Y.
+      placeholder: When I run `rho ...`, I expected X but got Y.
     validations:
       required: true
 
@@ -29,7 +29,7 @@ body:
       label: Steps to reproduce
       description: Minimal steps that reliably reproduce the problem.
       placeholder: |
-        1. Run `hawk ...`
+        1. Run `rho ...`
         2. Type `...`
         3. See error `...`
     validations:
@@ -44,10 +44,10 @@ body:
       required: true
 
   - type: input
-    id: hawk-version
+    id: rho-version
     attributes:
-      label: hawk version
-      description: Output of `hawk version` (or `hawk --version`).
+      label: rho version
+      description: Output of `rho version` (or `rho --version`).
       placeholder: "0.1.0"
     validations:
       required: true

.github/ISSUE_TEMPLATE/config.yml

@@ -1,8 +1,8 @@
 blank_issues_enabled: false
 contact_links:
   - name: Security vulnerability
-    url: https://github.com/GrayCodeAI/hawk/security/advisories/new
+    url: https://github.com/GrayCodeAI/rho/security/advisories/new
     about: Please report security issues privately via a GitHub Security Advisory. See SECURITY.md.
   - name: Question / discussion
-    url: https://github.com/GrayCodeAI/hawk/discussions
+    url: https://github.com/GrayCodeAI/rho/discussions
     about: Have a question or want to discuss an idea? Open a discussion instead of an issue.

.github/ISSUE_TEMPLATE/feature_request.yml

@@ -1,35 +1,35 @@
 name: Feature request
-description: Suggest an improvement or new capability for hawk.
+description: Suggest an improvement or new capability for rho.
 title: "feat: <one-line summary>"
 labels: ["enhancement", "triage"]
 
 body:
   - type: markdown
     attributes:
       value: |
-        Thanks for proposing a feature. hawk is built **for developers first**
+        Thanks for proposing a feature. rho is built **for developers first**
         (one machine, local config, keychain credentials) — teams and enterprise
         come later. We evaluate every request against: _"would a single
         developer on their own machine benefit from this?"_
 
         Before submitting:
-        - Search [existing issues](https://github.com/GrayCodeAI/hawk/issues) to avoid duplicates.
+        - Search [existing issues](https://github.com/GrayCodeAI/rho/issues) to avoid duplicates.
         - For large changes, consider opening a discussion first.
 
   - type: textarea
     id: problem
     attributes:
       label: What problem are you trying to solve?
       description: Describe the user problem first. Solutions can come later.
-      placeholder: When I'm doing X, hawk makes me do Y, which is painful because Z.
+      placeholder: When I'm doing X, rho makes me do Y, which is painful because Z.
     validations:
       required: true
 
   - type: textarea
     id: proposal
     attributes:
       label: Proposed solution
-      description: How would you like hawk to behave? CLI flags, output, config, etc.
+      description: How would you like rho to behave? CLI flags, output, config, etc.
     validations:
       required: true
 
@@ -55,7 +55,7 @@ body:
     id: principles
     attributes:
       label: Developer fit
-      description: hawk avoids enterprise scope for now. Confirm this feature respects that.
+      description: rho avoids enterprise scope for now. Confirm this feature respects that.
       options:
         - label: Works with zero configuration (sensible defaults).
         - label: Works offline / does not require a cloud account.

.github/actions/checkout-eyrie/action.yml

@@ -1,5 +1,5 @@
 name: Checkout ecosystem
-description: Clone graycode-eco sibling repos into the workspace parent for hawk's go.work
+description: Clone graycode-eco sibling repos into the workspace parent for rho's go.work
 
 inputs:
   ref:
@@ -24,7 +24,7 @@ runs:
         # ecosystem migration; downstream guards skip absent checkouts too).
         ws_parent="$(cd "${GITHUB_WORKSPACE}/.." && pwd)"
         while IFS= read -r repo; do
-          [ "$repo" = hawk ] && continue
+          [ "$repo" = rho ] && continue
           dest="${ws_parent}/${repo}"
           if [ -d "$dest/.git" ]; then
             echo "$repo already present at $dest"