[MyPrototypeWhat]

Summary

Add MiniMax Pet (minimax-pet), authored by MiniMax, version 0.5.8: appearance, tasks and settings tabs, a transparent desktop companion, five-line result previews, and answer-needed reminders from visible user conversations. There is no independent chat or automatic Agent turn.

plugins/minimax-ai/minimax-pet/  self-contained installable package
sources/minimax-ai/minimax-pet/  editable source, tests and build tools

Retain the source/distribution layout and validate all 34 shipped files byte for byte. Plugin identity, display name, Skill and documentation agree. Root discovery tables include the app.

Remove the two third-party pet atlases, their metadata, license copies, attribution and references. Replace the old icon and default pet with original geometric artwork generated from an included Node-only script: nine animation states and sixteen look directions. No external images, fonts or models are used; code, documentation and the new artwork are copyright MiniMax and distributed under MIT. User-imported resources retain their respective licenses and are not part of this package.

Expand the existing opening Skill to guide custom pet creation, validation and import. Include exact v1/v2 atlas dimensions, all nine animation rows, the sixteen clockwise look directions starting at up, metadata and transparent-PNG requirements, and a standalone Node validator inside the installable Skill. Correct the default artwork gaze orientation to match the player. This adds guidance for the current Agent, with no automatic Agent execution in the MiniApp.

Remove private requirement links, development paths and acceptance references; use public npm registry URLs; omit private records and caches. The installed plugin needs neither a build nor development dependencies.

Retain upstream's session.read capability and minimum-version feature (MiniMax Code 3.1.4, observed on 3.1.4-preview). Extend strict shape validation and documentation to deviceAccess: ["microphone"], rejecting unknown/duplicate grants. Read access does not grant execution access. Observation and speech still require supporting Host capabilities; no Host implementation is included or modified.

Evidence

• Repository CI configuration is unchanged from the target branch. Pet source tests, HTTP smoke and distribution comparison are local validation; no pet-specific workflow/job is added.
• Root repository check: 71/71 tests; pet Node/DOM tests: 249/249; isolated HTTP smoke: 67/67; complete source/distribution comparison: 34 files, no exclusions or differences.
• Skill before/after: previously it only opened the app; now an Agent has a precise creation/import procedure and a packaged checker. Skill structure validation passes. Running the checker directly from the installable package in an isolated directory accepts a custom v2 atlas (ok: true, 1536 x 2288, 73 cells, no warnings) and rejects a metadata/dimension mismatch with exit 1. Eleven dedicated checker tests cover decoding, metadata, malformed data and file bounds; this does not claim a real model generated or imported a custom pet.
• New asset tests actually decode PNG chunks and checksums, check transparent backgrounds and every playable animation frame, distinguish all sixteen look directions and verify the four cardinal gaze directions, and compare bundled pixels with regenerated artwork. The recovery and import tests now use self-generated PNG fixtures; synthetic WebP format-header coverage is retained.
• Public npm install succeeds with 63 locked registry URLs and retained integrity values. Dependencies, local data and staging output are Git-ignored and absent from the installable package. Independent review found no private URLs, credentials, user paths, real session records, image metadata, private Host code or ASAR source in the public candidate.
• One expected warning: HOST_EXTENSION_UNVERIFIED for microphone. Upstream declares read access at 3.1.4; complete task monitoring and microphone/transcription still have no verified minimum released Desktop version. The README requires a supporting Host build and explains feature detection. Existing warnings in unrelated packages are unchanged. Static validation is not a permission or runtime compatibility guarantee.
• macOS development-build UI acceptance predates the new artwork. This revision verifies artwork by actual image decoding, frame coverage, deterministic pixel reproduction and visual inspection. Released-client installation, Windows GUI and real microphone recording/transcription have not been verified here. No user profile, real sessions or screenshots are included.
• The Host gives the final plugin ID its own data directory; older local prototype data is not automatically moved. Historical browser preference keys remain only for read-once compatibility.

Merge Danger

Door: one-way

Public source can be cloned even if the commit is later reverted.

Blast Radius: MiniApps

One new plugin and the declaration checks and documentation needed to validate it. This PR does not merge or publish an official marketplace release.