Second review round (@Julientalbot):
- Desktop `display.*` listeners (lease, install log/done) match on (connectionId, profile_key),
not the profile path alone: two hosts with the same ~/.hermes path no longer repaint each
other's screen pane or install card. One predicate, `isEventForBotScreen`.
- Hero thumbnail: three consecutive failed refreshes dim the last frame and caption it
"Last seen — screen unreachable"; a dead gateway never keeps looking live.
- Lease file present but unparsable reads as HUMAN holds (fail closed); only a missing file is
a fresh agent-held profile. The next successful write repairs it.
- Taking over after `request_handoff` keeps the agent's reason on the lease and the pane shows
it while the human acts, not only before they clicked Take over.
d22d03b9dd