arcane-os 0.1.2 → 0.2.1

package/CHANGELOG.md

@@ -1,5 +1,40 @@
 # Changelog
 
+## 0.2.1
+
+- Added explicit selected-unloaded chat activation, truthful legacy Cloud/Core
+  route readiness, and provider-native chat-response normalization without
+  startup downloads, hidden provider selection, or application policy.
+- Normalized shared STT/TTS requests at the browser-speech provider boundary
+  while retaining caller-supplied immutable runtime, model, and voice
+  authorities and fail-closed format, lifecycle, error, and cancellation rules.
+- Applied authenticated dependency import maps to every packaged browser
+  document and published a deterministic browser-readable runtime projection
+  inventory derived from the verified package receipt.
+- Added caller-budgeted complete DBOPFS source evaluation with deterministic
+  zero-score fallback, independent scoring/excerpt/output bounds, and opt-in
+  preserve-readable bootstrap/evaluation read coverage.
+- Bound external workspace validation, packaging, scaffolding, doctor,
+  toolchain, and development serving to one authenticated installed package,
+  including the exact `arcane-sdk@npm:arcane-os@0.2.1` alias form.
+
+## 0.2.0
+
+- Made the SDK the canonical owner of the portable Arcane runtime and retired
+  the Arcane OS-to-SDK overwrite direction while retaining legacy provenance in
+  the authenticated runtime receipt.
+- Added app-supplied monolithic or ordered multi-file GGUF catalogs, DBOPFS
+  manifest-last admission, inherited per-check security policy, and measured
+  per-model capability reports for the browser-WASM Wllama provider.
+- Added independent browser Whisper STT and Kokoro TTS provider/Worker
+  machinery with caller-supplied runtime/model authorities, explicit lifecycle,
+  progress, cancellation, unload, and no fallback or packaged model bytes.
+- Added schema-driven DBOPFS document bootstrap, minimal lexical retrieval and
+  explicit request-context composition without automatic corpus searches.
+- Added automatic persistent chat/history/memory composition, recurring model
+  context, structural tool-call continuity, and session-only turns through
+  `persist:false`.
+
 ## 0.1.0-dev.4
 
 - Added the central `event-pubsub`-backed `EventManager` as the preferred SDK

package/NOTICE

@@ -24,9 +24,11 @@ Third-party material retains its own terms:
 - Marked: MIT License; complete notice and terms reproduced below.
 - QRCode.js: MIT License; complete notice and terms reproduced below.
 
-No model weights are included in this package. Browser-WASM model downloads
-require caller-supplied immutable authorities and exact byte-length and
-SHA-256 verification before cache admission or inference.
+No model weights, speech runtimes, or speech model/voice bytes are included in
+this package. Browser model and speech downloads require caller-supplied
+authorities. Byte-length and SHA-256 checks inherit the app security policy,
+default to disabled, and may be enabled or overridden for one provider/load;
+an enabled check requires its expected value before cache admission.
 
 Marked
 ------

package/README.md

@@ -19,11 +19,9 @@ version-locked SDK runtime, while an integrated Arcane checkout uses its live
 `arcane/` runtime. Both profiles preserve the same app URLs, theme, packaging,
 event, cancellation, and browser run contracts.
 
-This is development software. Version `0.1.0-dev.5` synchronizes the Arcane
-`0.8.12` runtime, but it is not a production or release-candidate claim. It has
-only the `dev` channel contract; query `npm view arcane-os@dev version` for
-current registry availability. Registry state is deliberately not baked into
-the immutable package documentation.
+This checkout defines the `0.2.1` SDK contract. Applications pin one exact npm
+version and lockfile; registry state is deliberately not baked into immutable
+application artifacts.
 
 That registry query is a maintainer action, not an application behavior. Apps
 never poll npm for SDK updates or replace their own SDK or synchronized runtime.
@@ -61,29 +59,80 @@ before enabling DOM values, node content, event details, source stacks, or live
 event redispatch. Password targets, text-entry details, clipboard data, URL
 attributes, and common credential keys are excluded or redacted by default.
 
-## Runtime synchronization
+## Runtime source ownership
 
-SDK maintainers update the pinned browser runtime only from Arcane's canonical,
-clean `main` checkout. The sync command validates that checkout, its exact
-machine-bundle version, the dependency lock, and the fixed shared-payload
-selection before replacing any SDK runtime bytes:
+The SDK repository is the canonical source for portable shared runtime modules,
+entities, components, themes, browser providers and workers, public contracts,
+and their packaged byte receipts. Portable applications consume those
+SDK-owned paths and never read an Arcane OS install or source checkout at
+runtime. Arcane OS is a consumer of this contract; its repository-side cutover
+is coordinated separately and cannot become a second source authority.
+
+The source-authority cutover is complete. `runtime/arcane/` is authored here,
+and its generated manifest authenticates the complete portable inventory. The
+old Arcane OS-to-SDK synchronization direction is retired and fails closed; it
+cannot overwrite SDK-canonical source. Regenerate the receipt only after an
+authorized SDK source change:
 
 ```bash
-npm run runtime:sync -- --arcane-root /path/to/canonical/ARCANE-OS
 node tools/runtime-manifest.mjs --write
 npm run check
 ```
 
-`tools/runtime-source.json` records the reviewed upstream identity and fixed
-selection. The generated runtime manifest remains the published byte receipt.
+`tools/runtime-source.json` declares the SDK authority and retains the prior
+Arcane OS commit only as legacy provenance for migrated compatibility bytes.
+Arcane OS must consume the same locked SDK projection as other applications;
+any remaining OS-side duplicate is legacy consumer migration state, not source
+authority. The generated runtime manifest is the published content-addressed
+byte receipt.
+
+## Browser-local AI
+
+`arcane-os/ai/browser-wasm` provides the shared Wllama LLM provider. The app
+supplies its model catalog; the SDK does not hard-code Granite or any other app
+profile. Each descriptor uses one ordered `files` array, so monolithic and
+split GGUF models share the same contract:
+
+```js
+const source=createBrowserModelSource({
+    id:'app-model',
+    files:[
+        {name:'model-00001-of-00002.gguf',url:'https://models.example/one.gguf'},
+        {name:'model-00002-of-00002.gguf',url:'https://models.example/two.gguf'}
+    ]
+});
+```
+
+Expected `bytes` and `sha256` values are optional while the inherited app
+security policy leaves those checks disabled. Enabling either check requires
+that field on every member. The DBOPFS store admits all members in order and
+commits its completion manifest last. Capability reports evaluate each
+app-supplied model as `compatible`, `incompatible`, or `unknown`; the app can
+render that result without the SDK inventing or filtering its catalog.
+
+`arcane-os/ai/browser-speech` exposes independent Whisper STT and Kokoro TTS
+provider factories. The package contains the plain-JavaScript provider and
+Worker machinery, not speech runtimes, models, voices, or a CDN default. An app
+must supply each immutable runtime/model authority explicitly. Speech roles
+load, cancel, unload, fail, and recover independently, so speech failure never
+silently falls back or prevents text chat.
+
+The SDK runtime also owns `DBOPFSDocumentLibrary`,
+`DocumentLexicalSearch`, and `PersistentAIChatSession`. Document bootstrap is
+schema-driven and explicit; chat never searches a corpus unless the app wires
+that library into the request context builder. Persistent chat automatically
+maintains recurring model context and `ChatEntity` history/memory. A turn may
+set `persist:false` to remain in the current session context without entering
+durable chat or memory. `createArcaneAI(...).createChatSession(options)` wires
+that session to the same selected LLM controller, creates its `ChatEntity`, and
+uses the same controller for automatic memory extraction.
 
 ## Install
 
-After the development package is published under the npm `dev` tag, create a
-new repository-shaped Arcane application:
+Create a new repository-shaped Arcane application with the exact stable SDK:
 
 ```bash
-npx arcane-os@dev new my-app --path ./my-app --target portable --git
+npx arcane-os@0.2.1 new my-app --path ./my-app --target portable --git
 cd my-app
 npm install
 npm run check
@@ -94,7 +143,7 @@ To enroll an existing repository, install the exact SDK and initialize only
 missing Arcane files:
 
 ```bash
-npm install --save-dev --save-exact arcane-os@dev
+npm install --save-dev --save-exact arcane-os@0.2.1
 npm exec -- arcane init my-app --target portable
 ```
 
@@ -110,7 +159,7 @@ npm exec -- arcane-os targets
 No global SDK install or standalone Arcane CLI is required. The application
 repository's exact npm dependency and lockfile own the CLI and toolchain version.
 
-Use `npx arcane-os@dev` for the initial bootstrap because it names this npm
+Use `npx arcane-os@0.2.1` for the initial bootstrap because it names this npm
 package explicitly; bare `npx arcane` outside an installed project could resolve
 a different package. Both installed commands invoke the same headless toolchain.
 Project-local npm scripts use the SDK pinned by that app's `package-lock.json`,
@@ -131,7 +180,7 @@ node ./bin/arcane.mjs new local-app --path ../local-app --target portable --git
 
 # From the generated app repository
 cd ../local-app
-npm install --save-dev --save-exact ../arcane-os-sdk/arcane-os-0.1.0-dev.5.tgz
+npm install --save-dev --save-exact ../arcane-os-sdk/arcane-os-0.2.1.tgz
 npm run check
 npm ci
 ```
@@ -141,9 +190,9 @@ same location. npm records its integrity in `package-lock.json`, while Arcane
 still verifies the installed package name and exact version, the locked runtime
 identity, and the runtime bytes. Local directory `file:` dependencies are not
 accepted because npm may install them as links; use a packed `.tgz`. A GitHub
-runner also needs that tarball at the locked path. When the registry exposes
-`arcane-os@dev`, replace the local declaration with the exact registry package
-and commit the regenerated lock.
+runner also needs that tarball at the locked path. After publication, replace
+the local declaration with the exact `arcane-os@0.2.1` registry package and
+commit the regenerated lock.
 
 Generated repositories use `npm ci --ignore-scripts` in CI. Run dependency
 installation once and commit `package-lock.json` before enabling that workflow.
@@ -255,7 +304,7 @@ recorded length through a final identity check; an appended byte, concurrent
 growth, path replacement, or hard link fails closed. NFC paths use defined
 UTF-8 byte ordering, covered by one pinned golden bundle digest on every
 supported Node/runner combination. This SDK accepts only the explicitly listed
-`0.1.0-dev.5` bundle generation; structural validity does not imply cross-SDK
+`0.2.1` bundle generation; structural validity does not imply cross-SDK
 compatibility, and a release with zero payload bytes cannot be created. Portable
 path validation rejects file/directory prefix conflicts, case-colliding prefix
 spellings, and Windows device aliases including superscript COM/LPT digits.
@@ -301,7 +350,7 @@ package installation, or assertions.
 
 ## Current target support
 
-Version `0.1.0-dev.5` exposes one browser target and five explicitly paired
+Version `0.2.1` exposes one browser target and five explicitly paired
 native development targets: a verified non-runnable portable directory, a
 Windows x64 unsigned-local-test EXE bundle, Linux x64 and Linux ARM64
 unsigned-local-test DEBs, and an Android development-signed APK. The

package/browser-runtime/ARCANE_SDK_BROWSER_RELEASE.json

@@ -1,7 +1,7 @@
 {
   "schemaVersion": 1,
   "builder": "arcane-sdk-browser-runtime-v1",
-  "sdkVersion": "0.1.2",
+  "sdkVersion": "0.2.1",
   "source": {
     "authority": "arcane-os-sdk",
     "repository": "https://github.com/TheWizardNexus/arcane-os-sdk.git",
@@ -28,37 +28,72 @@
       }
     ]
   },
-  "fileCount": 18,
-  "totalBytes": 9099015,
-  "contentSha256": "5e03f45a732db51cb5a2b2193cc79ecda34501d07a9b2e82e794e5fa37d55d00",
+  "fileCount": 25,
+  "totalBytes": 9279974,
+  "contentSha256": "a9715c4b3aef70ec4042e4738089568d6588877b29582e0f758ed83897b6814f",
   "files": [
     {
       "path": "ai/ARCANE_AI_BROWSER_WASM_COMPONENTS.json",
       "sourcePath": "browser-runtime/ai/ARCANE_AI_BROWSER_WASM_COMPONENTS.json",
       "provenance": "sdk-source-identity",
-      "bytes": 2554,
-      "sha256": "9f6e710f6b6aa8ea42f69823931b2b56a2eec9db242e3c95c6d6f6a6ce77a03b"
+      "bytes": 3173,
+      "sha256": "7f4e361eb2270ea63cdb2f6d4b899d5c87e4b955e1b4692b800f3e89e23568fc"
+    },
+    {
+      "path": "ai/browser-kokoro-worker.mjs",
+      "sourcePath": "browser-runtime/ai/browser-kokoro-worker.mjs",
+      "provenance": "sdk-source-identity",
+      "bytes": 110,
+      "sha256": "5c08370aeefa6a99f4018ddaf7c0d7ac8e7189811957947ce2eba4131e19a76f"
+    },
+    {
+      "path": "ai/browser-speech-artifacts.mjs",
+      "sourcePath": "browser-runtime/ai/browser-speech-artifacts.mjs",
+      "provenance": "sdk-source-identity",
+      "bytes": 36576,
+      "sha256": "6504c01f6548a37291619cc6b69ae85da2cc1463ef12e83101eefdc92ad2ea74"
+    },
+    {
+      "path": "ai/browser-speech-providers.mjs",
+      "sourcePath": "browser-runtime/ai/browser-speech-providers.mjs",
+      "provenance": "sdk-source-identity",
+      "bytes": 25982,
+      "sha256": "65e0a8da2bcd46b11c3ea2ca496105875977decc53d4e4c94ca56949dbb569b1"
+    },
+    {
+      "path": "ai/browser-speech.mjs",
+      "sourcePath": "browser-runtime/ai/browser-speech.mjs",
+      "provenance": "sdk-source-identity",
+      "bytes": 266,
+      "sha256": "fceadaafc0755ebb39071550bb2f497df14e23bef169779f970195d678e73ffc"
     },
     {
       "path": "ai/browser-wasm-llm-provider.mjs",
       "sourcePath": "browser-runtime/ai/browser-wasm-llm-provider.mjs",
       "provenance": "sdk-source-identity",
-      "bytes": 37944,
-      "sha256": "c89042b541c64de8b6528ee3a7dce0e2b62be8b5c229875fd8a26a1efded26a2"
+      "bytes": 87005,
+      "sha256": "1643dfc732cda823b8714a88d23d6e8bee48b7f8d1cf6da95906e75d6562ba9a"
     },
     {
       "path": "ai/browser-wasm.mjs",
       "sourcePath": "browser-runtime/ai/browser-wasm.mjs",
       "provenance": "sdk-source-identity",
-      "bytes": 1549,
-      "sha256": "b6536f6869a080e6cf167965da1dd8b473c172c6cbce1f5ee6a6142dd06c93f2"
+      "bytes": 3324,
+      "sha256": "0a0eb93db352b0a734f60d0273960c49315d51323b75f82f82e4f85d54101868"
+    },
+    {
+      "path": "ai/browser-whisper-worker.mjs",
+      "sourcePath": "browser-runtime/ai/browser-whisper-worker.mjs",
+      "provenance": "sdk-source-identity",
+      "bytes": 110,
+      "sha256": "949a4dddfae712855fb83c2aed2608657fea62d09b03e131bf8faa95be7e3aed"
     },
     {
       "path": "ai/browser-wllama-runtime.mjs",
       "sourcePath": "browser-runtime/ai/browser-wllama-runtime.mjs",
       "provenance": "sdk-source-identity",
-      "bytes": 13559,
-      "sha256": "946f1814b7374baa6a6e33a4e4f9790c8f1504c65104e05cbe640005687d94f5"
+      "bytes": 32364,
+      "sha256": "f1d1ad5e3dce70fdefba4f112e7f48029f257f65b98b7adce34cd60f5517908a"
     },
     {
       "path": "ai/internal/sha256.mjs",
@@ -71,8 +106,22 @@
       "path": "ai/model-controller.mjs",
       "sourcePath": "browser-runtime/ai/model-controller.mjs",
       "provenance": "sdk-source-identity",
-      "bytes": 19159,
-      "sha256": "922a9653f48c19093f02d7307c9600c70a1742c3b7a315df3ab2023db8025905"
+      "bytes": 23672,
+      "sha256": "a36aea3e62835cf568bd03ebc4be0fa8e0112a15dc9fec3c213b1c8cefa33b56"
+    },
+    {
+      "path": "ai/speech-worker-client.mjs",
+      "sourcePath": "browser-runtime/ai/speech-worker-client.mjs",
+      "provenance": "sdk-source-identity",
+      "bytes": 6501,
+      "sha256": "ebfa4272725482a89ad6f89a1ff732c1e5b9803075f0d559c046800350abf75d"
+    },
+    {
+      "path": "ai/speech-worker-runtime.mjs",
+      "sourcePath": "browser-runtime/ai/speech-worker-runtime.mjs",
+      "provenance": "sdk-source-identity",
+      "bytes": 17308,
+      "sha256": "feff8873f7d1c7b82f9cd797afe5beb47fa34113e491b2916ada0fcc3e62b101"
     },
     {
       "path": "ai/wllama/LICENCE",
@@ -83,10 +132,10 @@
     },
     {
       "path": "ai/wllama/index.mjs",
-      "sourcePath": "node_modules/@wllama/wllama/esm/index.js",
-      "provenance": "vendor-package-identity",
-      "bytes": 373519,
-      "sha256": "4637e42d636010493a9b274fbbe70bfd8120365da726b1d9e589d85ca84a00d6"
+      "sourcePath": "browser-runtime/ai/wllama/index.mjs",
+      "provenance": "deterministic-derived-vendor",
+      "bytes": 392852,
+      "sha256": "b119a7cdffabc8541dce283381d18ada4027c0560728aac1fe45bdd30cdac8e2"
     },
     {
       "path": "ai/wllama/llama.cpp-LICENSE",

package/browser-runtime/ai/ARCANE_AI_BROWSER_WASM_COMPONENTS.json

@@ -1,14 +1,18 @@
 {
   "schemaVersion": 1,
   "kind": "arcane-ai-browser-wasm-components",
-  "protocol": "arcane-ai-browser-wasm/1",
+  "protocol": "arcane-ai-browser-wasm/2",
   "packageExport": "arcane-os/ai/browser-wasm",
   "browserEntry": "ai/browser-wasm.mjs",
   "runtimePolicy": {
-    "modelAuthorities": "caller-supplied-exact-bytes-and-sha256",
+    "modelAuthorities": "fieldwise-security-default-false-with-optional-byteLength-and-sha256-checks",
     "modelWeightsPacked": false,
     "remoteModelHelpers": false,
     "compatibilityRuntime": false,
+    "webgpuAdmission": "adapter-plus-full-offload-plus-buffer-queue-and-settled-fence-evidence",
+    "cpuFallback": false,
+    "cancellation": "abortSignal-plus-llama-cancel-acknowledgement",
+    "cleanup": "worker-termination-only-no-native-unload-claim",
     "toolCalls": "structural-only-never-executed"
   },
   "components": [
@@ -28,9 +32,16 @@
         {
           "role": "runtime-module",
           "path": "ai/wllama/index.mjs",
-          "sourcePath": "node_modules/@wllama/wllama/esm/index.js",
-          "bytes": 373519,
-          "sha256": "4637e42d636010493a9b274fbbe70bfd8120365da726b1d9e589d85ca84a00d6"
+          "sourcePath": "browser-runtime/ai/wllama/index.mjs",
+          "bytes": 392852,
+          "sha256": "b119a7cdffabc8541dce283381d18ada4027c0560728aac1fe45bdd30cdac8e2",
+          "projection": {
+            "protocol": "arcane-wllama-webgpu-evidence/1",
+            "inputPath": "node_modules/@wllama/wllama/esm/index.js",
+            "inputBytes": 373519,
+            "inputSha256": "4637e42d636010493a9b274fbbe70bfd8120365da726b1d9e589d85ca84a00d6",
+            "wasmModified": false
+          }
         },
         {
           "role": "runtime-wasm",

package/browser-runtime/ai/browser-kokoro-worker.mjs

@@ -0,0 +1,3 @@
+import { installBrowserSpeechWorker } from "./speech-worker-runtime.mjs";
+
+installBrowserSpeechWorker("tts");