arcane-os 0.44.0 → 0.46.0

package/CHANGELOG.md

@@ -1,5 +1,47 @@
 # Changelog
 
+## 0.46.0
+
+- Add public `decodeMarkdownMediaRecord` for complete stored image records or
+  JSON text without storage or network access. Preserve singleton record layers,
+  original content and explicit decoding errors; never select from multiple
+  records. File previews recognize declared image records in JSON-family files
+  while ordinary untyped/non-image JSON and application preview hooks keep their
+  existing presentation and precedence.
+- Preserve complete standalone IMG tags with multiline quoted descriptions
+  through the shared Markdown renderer and its original-source mapping. Native
+  HTML handling and literal Markdown examples keep their existing parsing;
+  stored Markdown is unchanged and requires no migration.
+- Use the existing light paper palette and 15mm page margins for rendered print
+  snapshots and direct shared-theme printing. Preserve full content, rendered
+  fonts, image pixels, SVG artwork, live screen preferences, cancellation and
+  resource ownership through afterprint. A dialog request is not proof of
+  physical printing or PDF completion.
+- Keep image destinations, export selection, model and credentials application
+  owned. No saved-data migration, model/provider/default change or app layout
+  change is introduced.
+
+## 0.45.0
+
+- Add public MarkdownMedia save, read, reference parsing and hydration helpers.
+  Store complete image records in application-owned DBOPFS tables outside raw
+  Markdown, with stable references and application-selected filenames. Preserve
+  JSONL/NDJSON singleton records across cold reads and backup restoration.
+- Hydrate local images independently in shared Markdown views while preserving
+  raw Markdown, external URLs, source maps and saving. Observe cancellation and
+  individual failures without removing successful sibling images. Retain print
+  resources through afterprint; explicit PrintView preparation awaits local
+  media while native beforeprint remains synchronous.
+- Apply no-retention semantics to entity-wide persistence choices as well as
+  request persist:false: complete input and response remain available to the
+  active operation, then stay outside retained transcript, recurring model
+  context, DBOPFS and memory extraction. Capture the accepted choice before
+  rendering waits and preserve original pending calls after temporary tool
+  continuations. Existing retained turns and saved history remain untouched;
+  structural sanitization applies to new durable writes only, without migration.
+- Keep image model selection, credentials, storage selection and app orchestration
+  application-owned. No model/provider/default changes are introduced.
+
 ## 0.44.0
 
 - Add stateless `generateImages` through `arcane-os/ai/twin-cloud` with

package/README.md

@@ -19,7 +19,7 @@ version-locked SDK runtime, while an integrated Arcane checkout uses its live
 `arcane/` runtime. Both profiles share the theme, packaging, event, cancellation,
 and browser run contracts while retaining their selected application layout.
 
-This checkout defines the `0.44.0` SDK contract. Applications pin one exact npm
+This checkout defines the `0.46.0` SDK contract. Applications pin one exact npm
 version and lockfile; registry state is deliberately not baked into application
 artifacts.
 

package/docs/reference/runtime-components.md

@@ -54,6 +54,16 @@ imported component's `destroy()` through `HTMLImport`; callers that invoke
 `destroy()` directly retain responsibility for removing the element when
 appropriate.
 
+## Shared print presentation
+
+Applications loading the shared `theme.css` receive a print-only base light
+palette with a white paper surface and `15mm` page margins. Root, body, and
+scoped `data-arcane-palette` tokens override screen/custom colors during print;
+root/body margins are reset. Saved preferences, screen presentation, scrolling,
+media, and other layout rules remain unchanged. Registered rendered-print
+views use the separate [`PrintView.js`](runtime-modules.md#printviewjs) snapshot
+owner described with the editor and file preview below.
+
 ## Canonical inventory
 
 | Component | Capability | Principal methods | Events | Normalization |
@@ -426,7 +436,8 @@ history stores each tool's required user-facing message as an ordinary
 call envelope or ID and therefore does not recreate a pending executable call
 after reload. `submitToolResult()` and `submitToolResults()` accept `status` as
 the public result term; `disposition` remains an accepted input spelling.
-When a submitted turn uses `persist:false`, Chat may show its cards while that
+When a submitted turn uses `persist:false`, or its session's Chat entity has
+`persist=false`, Chat may show its cards while that
 one operation is active, then removes them when the operation settles; neither
 the input nor response remains in the retained transcript or model context.
 This cleanup also applies to failed, cancelled, detached, or replaced-session
@@ -437,6 +448,15 @@ operation's nodes so a completion listener can start another turn safely.
 Submission code passes those card references directly when it creates them;
 reusing an operation identifier never selects earlier conversation cards for
 cleanup or timestamp updates.
+The session's terminal `retained` boolean reports its actual commit decision;
+Chat uses that decision instead of retroactively interpreting a flag changed
+for a later request. A completion listener cannot erase an earlier settled
+turn by changing the next operation's retention setting.
+Chat carries a submission's no-retention choice into its copied session request
+before any rendering wait, so re-enabling the entity before dispatch cannot
+retain that temporary input. Existing falsy entity settings retain their
+no-retention meaning; a compatible custom session without a Chat entity keeps
+its existing default behavior.
 Persistent-turn recovery and existing saved history remain unchanged.
 
 For streaming sessions, every provisional structural card and the terminal
@@ -909,7 +929,16 @@ extension. Routing compares the lowercase MIME essence without its parameters;
 the callback's `mimeType` and the file content remain unchanged.
 HTML uses its complete original string in `srcdoc` without an
 added sandbox policy; Markdown reads the complete original text before
-rendering. Untransformed JSONL/NDJSON shows its complete original text,
+rendering. With no descriptor or `previewTransform`, JSON, JSONL, and NDJSON
+files are read in full and recognized through
+[`decodeMarkdownMediaRecord()`](runtime-modules.md#markdownmediajs). A complete
+stored image record, including nested single-record arrays, opens as an image
+when its decoded Blob has an `image/` media type. Untyped/non-image records,
+multiple records, and unrecognized content keep their ordinary JSON-family
+presentation; malformed recognized image encoding follows the existing
+file-open failure path.
+This recognition leaves saved content unchanged and performs no migration.
+Untransformed JSONL/NDJSON shows its complete original text,
 including lines that are not JSON records. Other binary files offer a download
 of the original `File`.
 The larger file-preview dialog reuses `--modal-width`, `--modal-max-height`,
@@ -921,11 +950,26 @@ preview ahead of the editor. Printing uses the shared
 [`PrintView.js`](runtime-modules.md#printviewjs) owner; accessible HTML frames
 are copied from their current rendered document, never substituted with source
 text. Explicit printing waits for images/fonts and HTML frame readiness.
+The shared print surface uses a light paper palette and `15mm` page margins
+while preserving image/SVG colors and leaving the screen theme unchanged.
 Native PDF and inaccessible embedded viewers require their own print command.
 `true` means the browser print dialog was requested, not that paper or a PDF
 was produced. Closed, destroyed, or unavailable previews return `false`;
 preparation failures reject and the visible control reports a concise failure.
 
+Markdown previews resolve saved `arcane-media:` images through
+[`MarkdownMedia.js`](runtime-modules.md#markdownmediajs) before connecting IMG
+nodes. Text appears while independent image reads finish; failures leave the
+complete text and successful images visible with a concise recovery status.
+Explicit printing waits for local reads and decoding. Native Print reports
+pending media because it cannot await them. Closing or replacing a preview
+cancels display readiness without waiting for storage; URLs already retained
+by a requested print remain until `afterprint`. Original Markdown and ordinary
+external image URLs remain unchanged.
+Standalone IMG blocks with multiline quoted descriptions use the shared
+[`MD.js`](runtime-modules.md#mdjs) tokenizer in both ordinary and source-mapped
+rendering; the complete description and stored Markdown remain intact.
+
 `await close()` cancels pending presentation work and closes delete, file, and
 directory dialogs in that order. A settled preview keeps its rendered content,
 media, and printing available until the file dialog actually closes; refusing
@@ -937,7 +981,7 @@ writes complete through the storage owner without reopening closed dialogs.
 
 Events: `file-manager-ready`, `file-manager-select`, `file-manager-open`, `file-manager-action`.
 
-Shared dependencies: [`DBOPFS.js`](runtime-modules.md#dbopfsjs), [`File.js`](runtime-entities.md#filejs), [`MD.js`](runtime-modules.md#mdjs), [`WaitForComponent.js`](runtime-modules.md#waitforcomponentjs).
+Shared dependencies: [`DBOPFS.js`](runtime-modules.md#dbopfsjs), [`File.js`](runtime-entities.md#filejs), [`MD.js`](runtime-modules.md#mdjs), [`MarkdownMedia.js`](runtime-modules.md#markdownmediajs), [`PrintView.js`](runtime-modules.md#printviewjs), [`WaitForComponent.js`](runtime-modules.md#waitforcomponentjs).
 
 ### Availability and normalization
 
@@ -1054,7 +1098,19 @@ Events: `markdown-document-ready`, `markdown-document-state`,
 `markdown-document-empty`, `markdown-document-error`, and
 `markdown-document-navigate`.
 
-Shared dependencies: [`MD.js`](runtime-modules.md#mdjs).
+Saved local image references use
+[`MarkdownMedia.js`](runtime-modules.md#markdownmediajs). Text rendering and
+the existing rendered event do not wait for image reads. The optional
+`labels.mediaError` supplies concise visible failure text while complete
+diagnostics remain in the developer console; successful images and document
+text remain visible. Replacing, clearing, failing, or destroying the document
+releases its display resources without deleting stored media. Markdown source
+and ordinary external image URLs remain unchanged.
+Complete standalone IMG blocks with quoted multiline descriptions render
+through the shared [`MD.js`](runtime-modules.md#mdjs) tokenizer without
+rewriting saved Markdown.
+
+Shared dependencies: [`MD.js`](runtime-modules.md#mdjs), [`MarkdownMedia.js`](runtime-modules.md#markdownmediajs).
 
 ### Availability and normalization
 
@@ -1096,14 +1152,29 @@ The visible **Print** control and `await print()` print the complete rendered
 Markdown with `entryTitle`, independently of saving. Native browser Print uses
 that same registered view unless an open file preview takes precedence.
 The SDK copies current rendered DOM/styles into a temporary print-only view,
-leaving the editor's source, controls, and screen layout in place. Explicit
-printing waits for resource readiness; native `beforeprint` is synchronous
+leaving the editor's source, controls, and screen layout in place. Both explicit
+and native print use the shared light paper palette and `15mm` page margins;
+image pixels and SVG artwork keep their colors. Explicit printing waits for
+resource readiness; native `beforeprint` is synchronous
 and uses the currently rendered content. `print()` returns `false` when the
 view is unavailable, rejects preparation failures, and returns `true` only
 when the browser dialog was requested. Completion of physical printing or PDF
 saving is not observable through this method. See
 [`PrintView.js`](runtime-modules.md#printviewjs).
 
+Saved `arcane-media:` image references are hydrated through
+[`MarkdownMedia.js`](runtime-modules.md#markdownmediajs) in detached rendered
+nodes. Source text, edit selection, source-map comments, ordinary image URLs,
+and the existing save flow remain unchanged. Image status has its own
+idle-hidden `media-status` part, separate from save status. Explicit printing
+waits for the current image reads/decoding, follows a replacement preview, and
+rechecks readiness before capture. Native Print reports still-pending media
+synchronously; it cannot wait or cancel the native dialog. Print-owned URLs
+outlive a changed or destroyed editor until `afterprint`.
+The shared [`MD.js`](runtime-modules.md#mdjs) tokenizer preserves complete
+standalone IMG blocks with quoted multiline descriptions in ordinary and
+source-mapped rendering. Existing saved markup needs no rewriting.
+
 `configure({fit:true,followPreview:true})` opts into the two independent
 behaviors. Both options default to `false`; omitted options retain their
 previous values during reconfiguration, and explicit `false` disables either.
@@ -1140,7 +1211,7 @@ lists, quotes, and tables follow their block, while invisible source positions
 use a nearby available rendered block rather than exact glyph geometry.
 
 Public CSS parts are `editor`, `title`, `toolbar`, `input`, `preview`,
-`actions`, `status`, `print-action`, and `save-action`. Applications can make the title
+`actions`, `status`, `media-status`, `print-action`, and `save-action`. Applications can make the title
 borderless and compact through `::part(title)` while retaining its native
 editing behavior and visible keyboard focus. These parts are styling hooks,
 not slots or replacement controls.

package/docs/reference/runtime-modules.md

@@ -96,6 +96,7 @@ own asynchronous work, cancellation, and backpressure.
 | [`Mail.js`](#mailjs) | esm | Builds complete reports and prefers the native mail capability with an explicit HTTP transport fallback. | Browser/native hybrid + cloud | Mail inputs/results normalized; transport failures mixed. |
 | [`MailOutbox.mjs`](#mailoutboxmjs) | esm | Persists complete mail reports before delivery and normalizes idempotent enqueue, retry, reconciliation, and invalid-record maintenance. | Browser/native WebView or compatible injected host | Complete records, full work, cancellation, and lifecycle states normalized; storage, lock, and delivery failures coded. |
 | [`MailTransport.mjs`](#mailtransportmjs) | esm | Sends one complete mail report to a normalized HTTP(S) endpoint. | Browser/server with fetch + cloud | Normalized endpoint and transport errors; remote detail preserved. |
+| [`MarkdownMedia.js`](#markdownmediajs) | esm | Saves local Markdown images separately, decodes complete stored records, and resolves stable references in rendered views. | Browser / supported native WebView | Complete image records, concurrent display reads, cancellation, and print-owned URL lifetime. |
 | [`MarkdownSpeech.js`](#markdownspeechjs) | esm | Removes repeated Markdown formatting marks from streamed narration. | Cross-host | Speech-only filtering; single marks and ordinary punctuation remain literal. |
 | [`Marked.min.js`](#markedminjs) | esm | Vendored Marked 18.0.5 Markdown lexer, parser, renderer, extension, and walk-token API. | Cross-host vendor module | Vendor-native Marked contract. |
 | [`MD.js`](#mdjs) | esm | Renders complete Markdown with Marked and optionally maps source blocks to rendered comment anchors. | Browser / native WebView | Complete raw and rendered Marked values; opt-in original-source offsets; parse errors vendor-native. |
@@ -2794,6 +2795,85 @@ import * as module from '/arcane/modules/Marked.min.js';
 console.log(Object.keys(module));
 ```
 
+## MarkdownMedia.js
+
+### Overview
+
+Stores complete images in the application's existing DBOPFS database while
+Markdown contains only a short, stable `arcane-media:` reference. Rendering
+resolves those local references into temporary display URLs. Importing the
+module starts no storage, network, provider, or rendering operation.
+
+### Public surface
+
+Public package import: `arcane-os/modules/MarkdownMedia.js`.
+
+- `await saveMarkdownMedia({blob,tableName='markdown-media',fileName})` writes
+  `{mediaType,dataUrl}` as a JSON-compatible record and returns
+  `{reference,tableName,fileName,mediaType}` only after the write completes.
+  The default filename is a new UUID followed by `.json`. There is no abort
+  option: accepted storage writes settle through the storage owner.
+- `parseMarkdownMediaReference(reference)` returns `{tableName,fileName}` for
+  a local reference, or `null` for an ordinary URL. Malformed local addresses
+  report their actual parsing error.
+- `decodeMarkdownMediaRecord(value)` synchronously decodes a complete
+  `{dataUrl,mediaType?}` record or its JSON text into a `Blob`, without storage
+  or network access. Nested single-record arrays are unwrapped; arrays with
+  multiple records are never reduced to one image. Unrecognized content,
+  including text that is not complete JSON, returns `null`. A recognized
+  record with unreadable base64 data-URL content throws its decoding error.
+  Omitted `mediaType` preserves the Blob's empty type. Input remains unchanged.
+- `await readMarkdownMedia(reference)` returns the complete `Blob`, using
+  only local storage and data-URL decoding; stored strings are never fetched
+  as network addresses. It uses the same record decoder after loading, while
+  preserving JSON parse errors for unreadable stored JSON strings and reporting
+  an unreadable record as an error rather than `null`.
+- `hydrateMarkdownMedia(root,{signal}={})` returns `{ready,destroy,retain}`
+  immediately. It includes an IMG root and descendant IMG elements, removes
+  local-reference `src` values synchronously, starts independent reads
+  together, and assigns owned object URLs. `ready` includes image decoding.
+  Use a detached fragment before connecting those images to the document.
+
+Hydration preserves Markdown source, image descriptions, ordinary URLs, and
+surrounding content. Failed reads or decodes reject `ready` with an
+`AggregateError` whose complete `failures` array contains
+`{image,reference,reason}`; successful sibling images remain visible.
+
+`destroy()` or abort settles display readiness promptly, prevents late display,
+and releases owned URLs. An already-started storage read remains observed and
+settles independently. `retain()` returns an idempotent release callback for
+printing; retained URLs survive destruction of the original view until every
+print owner releases them. Destruction never deletes stored images.
+
+Applications own record names, entry association, cleanup policy, and which
+records their existing JSON backup/export includes. Reusing the same filename
+supports an application-selected save-only retry without another generation
+request. The helper performs no existing-data migration.
+
+Exact exports: `saveMarkdownMedia`, `parseMarkdownMediaReference`,
+`decodeMarkdownMediaRecord`, `readMarkdownMedia`, `hydrateMarkdownMedia`.
+
+### Availability and normalization
+
+Browser or native WebView with the existing app-scoped DBOPFS owner, Blob,
+FileReader, object URLs, and IMG decoding. Encoding, storage, missing-record,
+parsing, and decoding errors remain observable. No Core capability is selected.
+
+### Example
+
+```javascript
+import {saveMarkdownMedia} from 'arcane-os/modules/MarkdownMedia.js';
+
+const mural = new Blob([
+    '<svg xmlns="http://www.w3.org/2000/svg" width="240" height="80"><text x="10" y="45">Octopus parking only</text></svg>'
+], {type:'image/svg+xml'});
+const {reference} = await saveMarkdownMedia({blob:mural});
+editor.insertMarkdown(`![Octopus parking only](${reference})`);
+```
+
+Here `editor` is the ready shared Markdown Editor. Its normal change/save flow
+still owns saving the Markdown; this operation saves the image record.
+
 ## MD.js
 
 ### Overview
@@ -2828,16 +2908,29 @@ mapping, not exact rendered glyph or caret geometry.
 
 Assigning `raw` or calling `append(string)` rebuilds both the complete rendered
 result and its current mapping. Without `sourceMap:true`, `sourceMap` is empty
-and the ordinary rendered output is unchanged. Existing raw content, link
+and the same parsing runs without comment anchors. Existing raw content, link
 behavior, no-op `rendered` setter, and complete `append()` result remain.
 
+Both rendering paths first use Marked's native HTML block tokenizer. When it
+does not recognize a complete standalone `<img>` tag with a newline inside a
+quoted attribute value, MD keeps that complete tag together as one HTML block.
+This includes blank lines in an image's full `alt` description. The tag must
+start at an existing Markdown block boundary with at most three leading spaces
+and end on its own line or at the end of the source. Separate inserted image
+blocks from surrounding Markdown with blank lines. Native HTML handling,
+inline prose, fenced/indented/inline code, escaped examples, and incomplete
+tags retain their existing parsing behavior. No source is rewritten or saved
+data migrated. Marked's existing rendered line-ending normalization remains;
+mapped offsets still address the exact original source, including CRLF or CR.
+
 Exact exports: `default`.
 
 ### Availability and normalization
 
-**Browser / native WebView.** Raw Marked behavior is preserved; parse errors are
-vendor-native. Rendering and the getters are DOM-independent. DOM lookup and
-scrolling belong to the consuming component;
+**Browser / native WebView.** Marked parsing, including the shared standalone
+image-token correction above; parse errors remain vendor-native. Rendering and
+the getters are DOM-independent. DOM lookup and scrolling belong to the
+consuming component;
 mapping performs no persistence or viewport movement. Transport: Marked.
 [Deep protocol details](protocols.md).
 
@@ -3071,6 +3164,9 @@ assistant content in configured model context and ChatEntity/DBOPFS history.
 That assistant-only opening survives reload and empty-chat maintenance without
 a fabricated user turn. A second opening rejects as `AI_CHAT_OPENING_EXISTS`;
 an unavailable durable ChatEntity rejects as `AI_CHAT_PERSISTENCE_UNAVAILABLE`.
+If retention is disabled while the opening is being prepared, that same error
+rolls back the opening before its append; it does not leave hidden model context.
+An opening write already accepted by DBOPFS still completes normally.
 
 `send()` accepts either
 `{message:{content,role:'user'|'tool',tool_call_id?,message?,name?,status?,persist},...}`
@@ -3086,6 +3182,20 @@ the retained transcript, memory extraction, or DBOPFS. A nonpersistent response
 therefore does not open a retained structural-tool continuation. A retained
 structural tool result must use the persistence choice captured by its matching
 assistant tool call.
+An explicitly nonretained tool-result continuation uses its matching pending
+call only for that operation, then rolls back without settling or changing the
+retained call. A later retained continuation can still settle it normally.
+
+The entity-wide `session.chatEntity.persist=false` applies the same no-retention
+rule to new turns and direct entity additions; it is not a disk-only switch.
+The session captures that setting when it accepts a request and observes it
+again before accepting a durable append. Changing it later cannot bring back
+discarded inputs or responses. A write already accepted by DBOPFS finishes
+normally; toggling the setting does not undo that write or rewrite saved data.
+Completed `send()` and `stream()` responses include a session-owned `retained`
+boolean outside `message` and the provider payload, identifying whether the
+turn entered recurring history. Existing retained and stored records remain
+untouched: this boundary applies to new additions and performs no migration.
 
 `history()` returns provider-safe configured model context, including the
 system prompt and every complete ordinary visible committed turn. Only a
@@ -3260,14 +3370,26 @@ Shared rendered-print owner used by Markdown Editor and File Manager. It
 captures the current DOM and computed styles, including accessible rendered
 HTML frames, complete text, selected images, and the current title. A temporary
 print-only surface expands scrollable content without editing the live screen.
+That surface uses the shared Arcane light-theme text, paper, and border colors,
+with `15mm` page margins. It retains rendered fonts, emphasis, and complete
+content while removing screen-theme text/shadow paint from ordinary HTML and
+pseudo-elements. Links are underlined and table cells receive visible borders.
+Image pixels, canvas snapshots, and SVG artwork keep their own colors. These
+print rules leave the live screen theme unchanged; browser print settings still
+control the eventual page output.
 
 ### Public surface
 
-Named `createPrintView({host,content,title,active,priority=0,signal,onError,retain})`
+Named `createPrintView({host,content,title,active,priority=0,signal,onError,retain,prepare})`
 returns `{print,destroy}`. `host` is a connected element; synchronous callbacks
 return the rendered content node, string title, and whether the view is active.
 Optional `retain()` returns a resource-release callback. It keeps owned media
 available until preparation is cancelled or the browser emits `afterprint`.
+Optional `prepare(signal)` may await view-owned readiness during an explicit
+print request. After it settles, current content and title are read again
+synchronously immediately before capture. A view whose content changes during
+preparation must keep its owned media retained and reject a still-pending
+snapshot through its synchronous `content()` callback.
 
 `await print()` selects that view, waits for accessible HTML frame, image, and
 font readiness, and requests the browser print dialog. It returns `false` when
@@ -3281,6 +3403,8 @@ on ties. File preview uses priority `1`; editor uses `0`. Native `beforeprint`
 is synchronous: it snapshots currently rendered content, cannot await a newly
 loading resource, and cannot cancel the browser's dialog. `onError(error)` or
 the developer console receives complete preparation failures.
+Native printing never invokes the asynchronous `prepare` callback; prepared
+views still receive the synchronous content/title read at capture.
 
 `destroy()` unregisters the view and cancels pending preparation. Once the
 dialog has been requested, its snapshot and retained media remain until
@@ -3930,12 +4054,20 @@ is applied once the body is available.
 
 The shared `theme.css` owns the default, warm, curious, hopeful, harmony, and
 warrior palettes. Each works with explicit light/dark or system appearance.
-`layout.css` imports that same owner. Explicit custom themes retain precedence
-through `data-arcane-skin="custom"` and their inline tokens.
+`layout.css` imports that same owner. On screen, explicit custom themes retain
+precedence through `data-arcane-skin="custom"` and their inline tokens.
 The bare root retains the generic neutral light/dark baseline; the prior
 layout default palette is selected explicitly through `data-user-skin="default"`,
 `body.default` compatibility, or the default swatch.
 
+During printing, `theme.css` applies the existing base light palette, with a
+white paper surface and `15mm` page margins, to the root, body, and scoped
+`data-arcane-palette` elements. These print-only tokens override screen/custom
+palette tokens. It resets the root/body margin without changing saved
+preferences, screen presentation, scrolling, media, or other layout rules.
+The separate [`PrintView.js`](#printviewjs) owner uses the same light palette
+and margins for its expanded rendered-content snapshot.
+
 A scoped `data-arcane-palette="warm"` element exposes the same palette variables
 for a chooser preview without changing the page's selection. Use any of the
 six named palettes and paint the preview with ordinary shared variables such

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "arcane-os",
-  "version": "0.44.0",
+  "version": "0.46.0",
   "description": "Arcane OS JavaScript SDK, project-local CLI, browser runtime, and repository-portable application packager.",
   "type": "module",
   "main": "./src/index.mjs",
@@ -86,7 +86,7 @@
     "test": "npm run test:unit && npm run test:functional && npm run test:integration && npm run test:regression",
     "test:release": "node ./bin/arcane-test.mjs test/npm-release.test.mjs",
     "test:unit": "node ./bin/arcane-test.mjs test/app-descriptor.test.mjs test/app-schema.test.mjs test/app-selection.test.mjs test/contracts.test.mjs test/conversation-closing-report.test.mjs test/doctor.test.mjs test/mail-credentials.test.mjs test/mail-outbox.test.mjs test/mail-public-api.test.mjs test/mail-send.test.mjs test/mail-transport.test.mjs test/targets.test.mjs test/workspace-operation-lock.test.mjs",
-    "test:functional": "node ./bin/arcane-test.mjs test/ai-request-model.test.mjs test/ai-request-retry.test.mjs test/ai-stream-cancellation.test.mjs test/browser-speech-providers.test.mjs test/browser-wasm-gpu-notice.test.mjs test/browser-wasm-download-resume.test.mjs test/chat-input.test.mjs test/chat-stream-speech.test.mjs test/chat-transcript-scroll.test.mjs test/chat-transient-retention.test.mjs test/cli.test.mjs test/continuous-voice-capture.test.mjs test/dbopfs-document-library.test.mjs test/dbopfs-png.test.mjs test/dbopfs.test.mjs test/dev-server.test.mjs test/dev-pwa.test.mjs test/dom-event-instrumentation.test.mjs test/event-manager.test.mjs test/events.test.mjs test/file-preview.test.mjs test/import-map.test.mjs test/mail-cli.test.mjs test/mail-runtime.test.mjs test/mail-server.test.mjs test/markdown-editor.test.mjs test/markdown-source-map.test.mjs test/modal.test.mjs test/packaging.test.mjs test/pwa-packaging.test.mjs test/pwa-client.test.mjs test/pwa-install.test.mjs test/pwa-worker.test.mjs test/persistent-ai-chat-session.test.mjs test/reference-completeness.test.mjs test/runtime-api-behavior.test.mjs test/runtime.test.mjs test/scaffold.test.mjs test/speech-playback.test.mjs test/site.test.mjs test/twin-cloud-images.test.mjs test/twin-cloud.test.mjs test/update-check.test.mjs test/user-explicit-updates.test.mjs",
+    "test:functional": "node ./bin/arcane-test.mjs test/ai-request-model.test.mjs test/ai-request-retry.test.mjs test/ai-stream-cancellation.test.mjs test/browser-speech-providers.test.mjs test/browser-wasm-gpu-notice.test.mjs test/browser-wasm-download-resume.test.mjs test/chat-input.test.mjs test/chat-stream-speech.test.mjs test/chat-transcript-scroll.test.mjs test/chat-transient-retention.test.mjs test/cli.test.mjs test/continuous-voice-capture.test.mjs test/dbopfs-document-library.test.mjs test/dbopfs-png.test.mjs test/dbopfs.test.mjs test/dev-server.test.mjs test/dev-pwa.test.mjs test/dom-event-instrumentation.test.mjs test/event-manager.test.mjs test/events.test.mjs test/file-preview.test.mjs test/import-map.test.mjs test/mail-cli.test.mjs test/mail-runtime.test.mjs test/mail-server.test.mjs test/markdown-editor.test.mjs test/markdown-media.test.mjs test/markdown-source-map.test.mjs test/modal.test.mjs test/packaging.test.mjs test/pwa-packaging.test.mjs test/pwa-client.test.mjs test/pwa-install.test.mjs test/pwa-worker.test.mjs test/persistent-ai-chat-session.test.mjs test/reference-completeness.test.mjs test/rendered-print.test.mjs test/runtime-api-behavior.test.mjs test/runtime.test.mjs test/scaffold.test.mjs test/speech-playback.test.mjs test/site.test.mjs test/theme-manager.test.mjs test/twin-cloud-images.test.mjs test/twin-cloud.test.mjs test/update-check.test.mjs test/user-explicit-updates.test.mjs",
     "test:integration": "node ./bin/arcane-test.mjs test/installed-package-runtime.test.mjs test/root-app-layout.test.mjs test/integrated-shared.test.mjs test/integrated-workspace.test.mjs test/mail-browser.test.mjs test/native-plan.test.mjs test/native-provider-loader.test.mjs test/npm-release.test.mjs test/release-bundle.test.mjs test/release-capability-smoke.test.mjs test/shared-payload-batch.test.mjs test/tarball.test.mjs test/browser-wasm-cpu.test.mjs test/wllama-webgpu-runtime.test.mjs",
     "test:regression": "node ./bin/arcane-test.mjs test/channel-workflows.test.mjs test/html-import-registration.test.mjs test/logging-regression.test.mjs test/markdown-speech.test.mjs test/prepared-speech.test.mjs test/native-provider-generation.test.mjs test/speech-queue-regression.test.mjs test/testing.test.mjs test/test-sets.test.mjs",
     "check": "node tools/check-source.mjs && npm test",

package/runtime/arcane/components/chat.html

@@ -3255,13 +3255,22 @@
             );
         }
 
-        const sessionRequestMessages=is.array(sessionRequest)
+        const submittedMessages=is.array(sessionRequest)
             ?sessionRequest
             :[sessionRequest];
-        if(!sessionRequestMessages.length){
+        if(!submittedMessages.length){
             throw new TypeError('A chat session request must contain at least one message.');
         }
-        const retainTurn=sessionRequestMessages.every(message=>message.persist!==false);
+        function entityRetainsMessages(){
+            return !session.chatEntity||Boolean(session.chatEntity.persist);
+        }
+        let retainTurn=submittedMessages.every(message=>message.persist!==false)
+            &&entityRetainsMessages();
+        // Preserve this submission's choice across the rendering await before
+        // dispatch; a later entity setting belongs to a later submission.
+        const sessionRequestMessages=retainTurn
+            ?submittedMessages
+            :submittedMessages.map(message=>({...message,persist:false}));
         const request={
             ...(sessionRequestMessages.length===1
                 ?{message:sessionRequestMessages[0]}
@@ -3276,9 +3285,18 @@
             ?session.aiName
             :host.aiName;
         const sessionMessageToken=Symbol(messageId);
-        const transientCards=retainTurn?[]:[...requestMessages];
+        const transientCards=[...requestMessages];
+        let retentionSettled=false;
+        function settleTurnRetention(result){
+            if(retentionSettled) return;
+            // The session reports the decision made at its actual commit boundary.
+            retainTurn=retainTurn&&(is.boolean(result?.retained)
+                ?result.retained
+                :entityRetainsMessages());
+            retentionSettled=true;
+        }
         function removeTransientSessionCards(){
-            if(!transientCards.length) return;
+            if(retainTurn||!transientCards.length) return;
             // The submitter supplies only nodes created for this submission.
             for(const card of transientCards) card.remove();
             transientCards.length=0;
@@ -3290,7 +3308,7 @@
         setSessionStatus('sending','AI is responding…');
         try{
             const responseCard=receivedMessage(responseName, '', messageId);
-            if(!retainTurn) transientCards.push(responseCard);
+            transientCards.push(responseCard);
             await streamMessage('',messageId,true);
             setMessageProgress(
                 messageId,
@@ -3344,6 +3362,7 @@
                     }
                 )
                 :await session.send(request);
+            settleTurnRetention(result);
             if(
                 destroyed
                 ||bindingGeneration!==sessionBindingGeneration
@@ -3441,6 +3460,7 @@
             );
             return result;
         }catch(error){
+            settleTurnRetention();
             if(!destroyed&&bindingGeneration===sessionBindingGeneration){
                 setPendingStructuralToolCalls(previousPendingToolCalls);
             }
@@ -3501,6 +3521,7 @@
             }
             throw error;
         }finally{
+            settleTurnRetention();
             removeTransientSessionCards();
             if(activeSessionMessageToken===sessionMessageToken){
                 activeSessionMessageToken=null;