arcane-os 0.45.0 → 0.47.0

package/docs/reference/availability-and-normalization.md

@@ -72,6 +72,7 @@ version; WebKitGTK availability must not be generalized to macOS.
 | Select and observe independent LLM/STT/TTS roles | `/arcane/modules/AIProviderRuntime.js` and `AIRuntimeState.js` | **Cross-host** controller/state; registered providers retain their own host requirements | Required/projected provider members, route/configuration records, and status fields; per-role lifecycle, cancellation, stream cleanup, sticky state, and startup barriers are normalized. `localOnly` creates no fallback. |
 | Run a caller-selected local LLM entirely in a browser renderer | `arcane-os/ai/browser-wasm` through `createArcaneAI()` | **Browser** only; secure context, WebAssembly, and OPFS/DBOPFS; full WebGPU offload by default or explicit CPU with `gpuLayers:0` | The public AI API module normalizes multi-model lifecycle, status, complete all-choice streaming, cancellation, exact ordered structural tool-call visibility, and session persistence. Model sources are canonical ordered file descriptors; licenses and model choice remain application policy. |
 | Run caller-selected Whisper or Kokoro in a browser renderer | `arcane-os/ai/browser-speech` registered with `AIProviderRuntime` | **Browser** only; DBOPFS, Web Locks, Workers, Fetch/object URLs, and a caller-supplied self-contained runtime/model closure are required | STT/TTS use independent provider/2 lifecycle and status. Kokoro adds bounded Worker/session concurrency and explicit `auto`, `webgpu`, or `wasm` execution. Complete model/runtime selection, offline behavior, cancellation, Worker teardown, and request/result shapes are normalized. No runtime/model content or cloud fallback is supplied. |
+| Capture speech with the explicitly selected native browser service | `createBrowserSpeechRecognitionProvider` from `arcane-os/ai/browser-speech`, configured as STT | **Browser / native WebView**, conditional on `SpeechRecognition` or `webkitSpeechRecognition`; no SDK model, Worker, or storage required | `localOnly:false` because the browser may use a remote service. Factory/catalog remain usable without native support; inspect/load report availability. User-gesture start, exact final results, transient interim text, stop/drain and abort are owned by the provider/runtime and shared controls. No provider fallback. |
 | Prepare ordered speech playback or reuse the speech-input formatting filter | `arcane-os/speech-playback` and `arcane-os/speech-text` | **Node** with injected media adapters, or **Browser / Native WebView** media; the text filter itself is **Cross-host** | Stored and caller-owned text stays exact. Only the outbound synthesis copy automatically loses repeated same formatting marks. A capacity-advertising provider receives complete segments immediately while retaining indexed playback; native/custom synthesis stays serialized. |
 | Preserve complete chat history and memory | `/arcane/modules/PersistentAIChatSession.js` | **Browser / native WebView** with ChatEntity/DBOPFS and a configured chat function | Existing DBOPFS names and memory semantics are preserved. Live-context commit is atomic; durable persistence is explicit and coherent across user/assistant turns and atomic all-ID tool-result batches. |
 | Search an app-owned document corpus for explicit chat context | `/arcane/modules/DBOPFSDocumentLibrary.js` | **Browser** or compatible injected DBOPFS adapter | Generation/manifest completion, complete lexical search, partial read failures, and untrusted context labels are normalized. Construction does not search; an explicitly wired context builder performs retrieval for each prepared chat send. |
@@ -79,7 +80,7 @@ version; WebKitGTK availability must not be generalized to macOS.
 | Use local AI without coupling app code to Ollama HTTP | `Arcane.localAI`, `Arcane.ai`, or `/arcane/modules/Ollama.js` | Primarily **Native**; Android exposes a narrower admitted inference projection | Admission, errors, and managed-operation events are normalized. Direct Ollama response envelopes remain **Provider-native**. |
 | Use TWiN Cloud from the renderer profile | `/arcane/modules/AI.js` | **Cloud** from an allowed browser/native renderer | High-level chat behavior is normalized by the module. The TWiN access key authenticates remote LLM chat; raw provider diagnostics remain provider-specific. No automatic cloud fallback is inferred from local failure. |
 | Send one TWiN Cloud request with an explicit key and model | `fetchRequest` from `arcane-os/ai/twin-cloud` | **Node** and **Browser**, using standard Fetch and a remote HTTPS provider | Keeps complete messages and returns the full parsed provider JSON. Rejected Fetch and HTTP 529 share three retries after 3000 ms; HTTP 429 overload retains unlimited three-second retries. Optional `onRetry` reports waiting/requesting phases without blocking recovery. Shared structured-output mapping and cancellation match browser TWiN transport. No browser profile, AI/user singleton, DBOPFS, or retained request history is created. |
-| Use speech through one application helper | `/arcane/modules/AI.js` and `Arcane.speech` | **Browser** or **Native** | The helper keeps audio on device: Whisper owns STT and Kokoro owns TTS. It automatically cleans only the outbound speech-input copy and normalizes application-facing audio/text behavior while browser and native request/response plumbing differs below that boundary. |
+| Use speech through one application helper | `/arcane/modules/AI.js` and `Arcane.speech` | **Browser** or **Native** | Whisper and Kokoro keep their on-device paths; explicitly selected Web Speech STT and TWiN Cloud TTS declare their non-local behavior. The helper automatically cleans only the outbound synthesis-input copy and normalizes application-facing audio/text behavior while request/response plumbing differs below that boundary. |
 | Inspect or manage raw Ollama models | `Arcane.ollama` or `/arcane/modules/Ollama.js` | **Native** desktop Core for management; narrower Android inference only | Wrapper method names, errors, streaming correlation, and admission are Arcane-controlled. Direct Ollama success envelopes are intentionally provider-native. |
 | Use native terminal, installation, user, provisioning, or machine controls | matching `Arcane.*` namespace | **Native** and app/capability restricted | Calls and errors use the common bridge contract. Platform results can be host-specific and are marked in the method guide. |
 

package/docs/reference/inventory/package-api.json

@@ -3134,6 +3134,20 @@
       "protocol": "arcane-ai-provider/2 tts/synthesize",
       "normalization": "Construction and activation make no adapter network requests. SDK initial POSTs bypass the provider-local js-queue; follow-up status/result/audio GETs use followUpQueue capacity and cadence through complete body consumption. Retry-After affects only its job. Whole-job maxConcurrentRequests remains independent. Local Kokoro and Whisper paths are unchanged. Applications own model, voice, credentials, activation, and queue settings."
     },
+    {
+      "id": "browser-speech:createBrowserSpeechRecognitionProvider",
+      "name": "createBrowserSpeechRecognitionProvider",
+      "displayName": "createBrowserSpeechRecognitionProvider()",
+      "kind": "function",
+      "signature": "createBrowserSpeechRecognitionProvider({id,model,language}={})",
+      "entrypoints": ["arcane-os/ai/browser-speech"],
+      "primaryImport": "arcane-os/ai/browser-speech",
+      "group": "Browser speech providers",
+      "summary": "Creates an explicitly selected native browser speech recognition provider with gesture-started live capture.",
+      "availability": "Browser or WebView exposing SpeechRecognition or webkitSpeechRecognition; construction remains available on unsupported hosts",
+      "protocol": "arcane-ai-provider/2 stt with optional createCapture",
+      "normalization": "Non-local service declaration, independent STT lifecycle, exact final segments, transient interim results, graceful stop/drain and native abort. No model download, storage, microphone on activation, file-transcription emulation, or automatic fallback."
+    },
     {
       "id": "browser-speech:createBrowserKokoroProvider",
       "name": "createBrowserKokoroProvider",

package/docs/reference/runtime-components.md

@@ -54,6 +54,16 @@ imported component's `destroy()` through `HTMLImport`; callers that invoke
 `destroy()` directly retain responsibility for removing the element when
 appropriate.
 
+## Shared print presentation
+
+Applications loading the shared `theme.css` receive a print-only base light
+palette with a white paper surface and `15mm` page margins. Root, body, and
+scoped `data-arcane-palette` tokens override screen/custom colors during print;
+root/body margins are reset. Saved preferences, screen presentation, scrolling,
+media, and other layout rules remain unchanged. Registered rendered-print
+views use the separate [`PrintView.js`](runtime-modules.md#printviewjs) snapshot
+owner described with the editor and file preview below.
+
 ## Canonical inventory
 
 | Component | Capability | Principal methods | Events | Normalization |
@@ -919,7 +929,16 @@ extension. Routing compares the lowercase MIME essence without its parameters;
 the callback's `mimeType` and the file content remain unchanged.
 HTML uses its complete original string in `srcdoc` without an
 added sandbox policy; Markdown reads the complete original text before
-rendering. Untransformed JSONL/NDJSON shows its complete original text,
+rendering. With no descriptor or `previewTransform`, JSON, JSONL, and NDJSON
+files are read in full and recognized through
+[`decodeMarkdownMediaRecord()`](runtime-modules.md#markdownmediajs). A complete
+stored image record, including nested single-record arrays, opens as an image
+when its decoded Blob has an `image/` media type. Untyped/non-image records,
+multiple records, and unrecognized content keep their ordinary JSON-family
+presentation; malformed recognized image encoding follows the existing
+file-open failure path.
+This recognition leaves saved content unchanged and performs no migration.
+Untransformed JSONL/NDJSON shows its complete original text,
 including lines that are not JSON records. Other binary files offer a download
 of the original `File`.
 The larger file-preview dialog reuses `--modal-width`, `--modal-max-height`,
@@ -931,6 +950,8 @@ preview ahead of the editor. Printing uses the shared
 [`PrintView.js`](runtime-modules.md#printviewjs) owner; accessible HTML frames
 are copied from their current rendered document, never substituted with source
 text. Explicit printing waits for images/fonts and HTML frame readiness.
+The shared print surface uses a light paper palette and `15mm` page margins
+while preserving image/SVG colors and leaving the screen theme unchanged.
 Native PDF and inaccessible embedded viewers require their own print command.
 `true` means the browser print dialog was requested, not that paper or a PDF
 was produced. Closed, destroyed, or unavailable previews return `false`;
@@ -945,6 +966,9 @@ pending media because it cannot await them. Closing or replacing a preview
 cancels display readiness without waiting for storage; URLs already retained
 by a requested print remain until `afterprint`. Original Markdown and ordinary
 external image URLs remain unchanged.
+Standalone IMG blocks with multiline quoted descriptions use the shared
+[`MD.js`](runtime-modules.md#mdjs) tokenizer in both ordinary and source-mapped
+rendering; the complete description and stored Markdown remain intact.
 
 `await close()` cancels pending presentation work and closes delete, file, and
 directory dialogs in that order. A settled preview keeps its rendered content,
@@ -957,7 +981,7 @@ writes complete through the storage owner without reopening closed dialogs.
 
 Events: `file-manager-ready`, `file-manager-select`, `file-manager-open`, `file-manager-action`.
 
-Shared dependencies: [`DBOPFS.js`](runtime-modules.md#dbopfsjs), [`File.js`](runtime-entities.md#filejs), [`MD.js`](runtime-modules.md#mdjs), [`WaitForComponent.js`](runtime-modules.md#waitforcomponentjs).
+Shared dependencies: [`DBOPFS.js`](runtime-modules.md#dbopfsjs), [`File.js`](runtime-entities.md#filejs), [`MD.js`](runtime-modules.md#mdjs), [`MarkdownMedia.js`](runtime-modules.md#markdownmediajs), [`PrintView.js`](runtime-modules.md#printviewjs), [`WaitForComponent.js`](runtime-modules.md#waitforcomponentjs).
 
 ### Availability and normalization
 
@@ -1082,6 +1106,9 @@ diagnostics remain in the developer console; successful images and document
 text remain visible. Replacing, clearing, failing, or destroying the document
 releases its display resources without deleting stored media. Markdown source
 and ordinary external image URLs remain unchanged.
+Complete standalone IMG blocks with quoted multiline descriptions render
+through the shared [`MD.js`](runtime-modules.md#mdjs) tokenizer without
+rewriting saved Markdown.
 
 Shared dependencies: [`MD.js`](runtime-modules.md#mdjs), [`MarkdownMedia.js`](runtime-modules.md#markdownmediajs).
 
@@ -1125,8 +1152,10 @@ The visible **Print** control and `await print()` print the complete rendered
 Markdown with `entryTitle`, independently of saving. Native browser Print uses
 that same registered view unless an open file preview takes precedence.
 The SDK copies current rendered DOM/styles into a temporary print-only view,
-leaving the editor's source, controls, and screen layout in place. Explicit
-printing waits for resource readiness; native `beforeprint` is synchronous
+leaving the editor's source, controls, and screen layout in place. Both explicit
+and native print use the shared light paper palette and `15mm` page margins;
+image pixels and SVG artwork keep their colors. Explicit printing waits for
+resource readiness; native `beforeprint` is synchronous
 and uses the currently rendered content. `print()` returns `false` when the
 view is unavailable, rejects preparation failures, and returns `true` only
 when the browser dialog was requested. Completion of physical printing or PDF
@@ -1142,6 +1171,9 @@ waits for the current image reads/decoding, follows a replacement preview, and
 rechecks readiness before capture. Native Print reports still-pending media
 synchronously; it cannot wait or cancel the native dialog. Print-owned URLs
 outlive a changed or destroyed editor until `afterprint`.
+The shared [`MD.js`](runtime-modules.md#mdjs) tokenizer preserves complete
+standalone IMG blocks with quoted multiline descriptions in ordinary and
+source-mapped rendering. Existing saved markup needs no rewriting.
 
 `configure({fit:true,followPreview:true})` opts into the two independent
 behaviors. Both options default to `false`; omitted options retain their
@@ -1597,6 +1629,16 @@ Events: `source-explanation-ready`, `source-explanation-save`, `source-explanati
 
 ## speech.html
 
+An explicitly selected native Web Speech provider uses gesture-started live
+capture instead of MediaRecorder. The shared control retains every final
+result and emits its existing completion event once with the exact combined
+text when native capture ends. The live display retains final words alongside
+interim hypotheses while speaking; interim hypotheses stay transient. Release/Stop
+finishes native recognition; cancellation, replacement and destruction abort
+it and suppress late submission. A persisted page hide stops live native capture
+without restarting it when the page returns. Existing Whisper and TTS paths
+remain unchanged.
+
 ### Overview
 
 Coordinates explicit speech-to-text activation, speech controls, transcription
@@ -2051,6 +2093,19 @@ Native methods remain subject to the bound app's capabilities. [Deep protocol de
 
 ### Continuous capture and controls
 
+An explicitly selected native Web Speech provider uses the same ordered
+transcript/save queue in either capture mode. Each complete final text segment
+skips file transcription and enters the existing append/save stages; interim
+text stays in the transient `interim` part and never reaches a save or success
+event. Final segments waiting behind a save stay visible there until appended
+to the main transcript. Native `stopRecording()` returns the drain promise, including final
+results emitted during native stop. Browser `end` stops capture without an
+automatic restart. Provider replacement stops native capture while already
+accepted final segments retain their ordered saves. Explicit Cancel, transcript
+replacement and destruction retain the existing supersession behavior.
+This path does not require AudioWorklet or MediaRecorder. A supplied custom
+`transcribe(file,context)` callback keeps the existing audio-clip route.
+
 `configure({capture:{mode:'continuous'}})` opts into the SDK's
 [`ContinuousVoiceCapture`](runtime-modules.md#continuousvoicecapturejs) owner.
 The default capture settings are `preRollMs:1500`, `quietMs:2000`,

package/docs/reference/runtime-modules.md

@@ -96,7 +96,7 @@ own asynchronous work, cancellation, and backpressure.
 | [`Mail.js`](#mailjs) | esm | Builds complete reports and prefers the native mail capability with an explicit HTTP transport fallback. | Browser/native hybrid + cloud | Mail inputs/results normalized; transport failures mixed. |
 | [`MailOutbox.mjs`](#mailoutboxmjs) | esm | Persists complete mail reports before delivery and normalizes idempotent enqueue, retry, reconciliation, and invalid-record maintenance. | Browser/native WebView or compatible injected host | Complete records, full work, cancellation, and lifecycle states normalized; storage, lock, and delivery failures coded. |
 | [`MailTransport.mjs`](#mailtransportmjs) | esm | Sends one complete mail report to a normalized HTTP(S) endpoint. | Browser/server with fetch + cloud | Normalized endpoint and transport errors; remote detail preserved. |
-| [`MarkdownMedia.js`](#markdownmediajs) | esm | Saves local Markdown images separately and resolves their stable references in rendered views. | Browser / supported native WebView | Complete image records, concurrent display reads, cancellation, and print-owned URL lifetime. |
+| [`MarkdownMedia.js`](#markdownmediajs) | esm | Saves local Markdown images separately, decodes complete stored records, and resolves stable references in rendered views. | Browser / supported native WebView | Complete image records, concurrent display reads, cancellation, and print-owned URL lifetime. |
 | [`MarkdownSpeech.js`](#markdownspeechjs) | esm | Removes repeated Markdown formatting marks from streamed narration. | Cross-host | Speech-only filtering; single marks and ordinary punctuation remain literal. |
 | [`Marked.min.js`](#markedminjs) | esm | Vendored Marked 18.0.5 Markdown lexer, parser, renderer, extension, and walk-token API. | Cross-host vendor module | Vendor-native Marked contract. |
 | [`MD.js`](#mdjs) | esm | Renders complete Markdown with Marked and optionally maps source blocks to rendered comment anchors. | Browser / native WebView | Complete raw and rendered Marked values; opt-in original-source offsets; parse errors vendor-native. |
@@ -275,8 +275,9 @@ tool declarations, emitted tool calls, or callback ordering.
 `configureSpeechProviders({stt,tts})` commits only the two speech routes and
 leaves the current LLM route and sticky lifecycle record unchanged. Both speech
 roles must be unloaded and own no request, load, unload, or dispose operation.
-STT remains local-only (`AI_STT_DEVICE_ONLY` for a remote selection); an
-explicit TTS provider may declare `localOnly:false`.
+File-based STT remains local-only (`AI_STT_DEVICE_ONLY` for an unsupported
+remote file selection). An explicitly selected native live-capture STT provider
+or TTS provider may declare `localOnly:false`.
 `transitionSpeechProviders({stt,tts})` stops queued audio, explicitly unloads
 only STT and TTS, then commits that same closed speech route record. Neither
 method loads a model, selects a fallback, or changes caller-owned model or voice
@@ -302,6 +303,13 @@ cancels that pending unmute. The application keeps model, voice, and credential
 selection. See [DigitalOcean FAL speech](ai/browser-speech.md#digitalocean-fal-text-to-speech)
 for the public remote adapter and completed-job audio transport.
 
+`supportsTranscriptionCapture()` reports whether the selected STT provider
+offers native live capture. `createTranscriptionCapture(options={})` delegates
+to the provider runtime's owned capture boundary below and returns `null` for
+file-only providers. Shared speech controls select it automatically; apps keep
+using their existing controls and completion/save callbacks. See
+[native browser recognition](ai/browser-speech.md#native-browser-speech-recognition).
+
 `startProviders({startLanguageModel=true,startMuted=true,startTranscription=false,signal=null}={})`
 starts provider-owned text chat without requesting an STT load by default.
 Callers selecting a browser-WASM LLM pass `startLanguageModel:false` so it
@@ -961,6 +969,8 @@ The singleton exposes read-only `protocol`, `configured`, and `speechMuted`;
 `request(role,options={},preparation={})`;
 `chat(payload,options={})`; `stream(payload,options={})`;
 `transcribe(payload,options={})`;
+`supportsTranscriptionCapture(providerId=null)`;
+`createTranscriptionCapture(options={})`;
 `synthesize(payload,options={},preparation={})`; and
 `setSpeechMuted(muted)`. Provider payloads must be data-only; callbacks,
 accessors, symbols, and cycles are rejected at the provider boundary.
@@ -1099,6 +1109,24 @@ cleanup are normalized, while the
 selected provider retains its own capability, permission, download, and model
 requirements. [Deep protocol details](protocols.md#portable-ai-provider-runtime).
 
+STT providers may additionally implement `createCapture(options)`. Registration
+retains that optional method without changing the required provider/2 methods.
+`supportsTranscriptionCapture(providerId=null)` checks the current selection by
+default or a specified registered STT provider without starting it.
+`createTranscriptionCapture({language,continuous,onSegment,onInterim,onState,onError})`
+returns `null` for a provider without that method; otherwise it returns
+`{start,stop,cancel,destroy,done}`. Creation has no microphone side effect.
+`start({signal})` requires the same selected ready provider with an idle STT
+lane and invokes its capture start synchronously in the caller's gesture.
+Capture occupies one active STT request until its `done` promise settles;
+ordinary file requests remain queued, and unload/dispose/cancel use the same
+owned request cancellation lifecycle. Stop drains native final recognition;
+cancel suppresses late callbacks. Provider callbacks carry exact final
+`{text,sequence}` segments, transient `{text}` interim results, capture state,
+or complete errors. The browser provider's `done` resolves a success boolean;
+runtime cleanup errors remain observable as rejection. No callback is inserted
+into a data-only transcription request payload.
+
 ### Example
 
 ```javascript
@@ -2816,9 +2844,18 @@ Public package import: `arcane-os/modules/MarkdownMedia.js`.
 - `parseMarkdownMediaReference(reference)` returns `{tableName,fileName}` for
   a local reference, or `null` for an ordinary URL. Malformed local addresses
   report their actual parsing error.
+- `decodeMarkdownMediaRecord(value)` synchronously decodes a complete
+  `{dataUrl,mediaType?}` record or its JSON text into a `Blob`, without storage
+  or network access. Nested single-record arrays are unwrapped; arrays with
+  multiple records are never reduced to one image. Unrecognized content,
+  including text that is not complete JSON, returns `null`. A recognized
+  record with unreadable base64 data-URL content throws its decoding error.
+  Omitted `mediaType` preserves the Blob's empty type. Input remains unchanged.
 - `await readMarkdownMedia(reference)` returns the complete `Blob`, using
   only local storage and data-URL decoding; stored strings are never fetched
-  as network addresses.
+  as network addresses. It uses the same record decoder after loading, while
+  preserving JSON parse errors for unreadable stored JSON strings and reporting
+  an unreadable record as an error rather than `null`.
 - `hydrateMarkdownMedia(root,{signal}={})` returns `{ready,destroy,retain}`
   immediately. It includes an IMG root and descendant IMG elements, removes
   local-reference `src` values synchronously, starts independent reads
@@ -2841,6 +2878,9 @@ records their existing JSON backup/export includes. Reusing the same filename
 supports an application-selected save-only retry without another generation
 request. The helper performs no existing-data migration.
 
+Exact exports: `saveMarkdownMedia`, `parseMarkdownMediaReference`,
+`decodeMarkdownMediaRecord`, `readMarkdownMedia`, `hydrateMarkdownMedia`.
+
 ### Availability and normalization
 
 Browser or native WebView with the existing app-scoped DBOPFS owner, Blob,
@@ -2896,16 +2936,29 @@ mapping, not exact rendered glyph or caret geometry.
 
 Assigning `raw` or calling `append(string)` rebuilds both the complete rendered
 result and its current mapping. Without `sourceMap:true`, `sourceMap` is empty
-and the ordinary rendered output is unchanged. Existing raw content, link
+and the same parsing runs without comment anchors. Existing raw content, link
 behavior, no-op `rendered` setter, and complete `append()` result remain.
 
+Both rendering paths first use Marked's native HTML block tokenizer. When it
+does not recognize a complete standalone `<img>` tag with a newline inside a
+quoted attribute value, MD keeps that complete tag together as one HTML block.
+This includes blank lines in an image's full `alt` description. The tag must
+start at an existing Markdown block boundary with at most three leading spaces
+and end on its own line or at the end of the source. Separate inserted image
+blocks from surrounding Markdown with blank lines. Native HTML handling,
+inline prose, fenced/indented/inline code, escaped examples, and incomplete
+tags retain their existing parsing behavior. No source is rewritten or saved
+data migrated. Marked's existing rendered line-ending normalization remains;
+mapped offsets still address the exact original source, including CRLF or CR.
+
 Exact exports: `default`.
 
 ### Availability and normalization
 
-**Browser / native WebView.** Raw Marked behavior is preserved; parse errors are
-vendor-native. Rendering and the getters are DOM-independent. DOM lookup and
-scrolling belong to the consuming component;
+**Browser / native WebView.** Marked parsing, including the shared standalone
+image-token correction above; parse errors remain vendor-native. Rendering and
+the getters are DOM-independent. DOM lookup and scrolling belong to the
+consuming component;
 mapping performs no persistence or viewport movement. Transport: Marked.
 [Deep protocol details](protocols.md).
 
@@ -3345,6 +3398,13 @@ Shared rendered-print owner used by Markdown Editor and File Manager. It
 captures the current DOM and computed styles, including accessible rendered
 HTML frames, complete text, selected images, and the current title. A temporary
 print-only surface expands scrollable content without editing the live screen.
+That surface uses the shared Arcane light-theme text, paper, and border colors,
+with `15mm` page margins. It retains rendered fonts, emphasis, and complete
+content while removing screen-theme text/shadow paint from ordinary HTML and
+pseudo-elements. Links are underlined and table cells receive visible borders.
+Image pixels, canvas snapshots, and SVG artwork keep their own colors. These
+print rules leave the live screen theme unchanged; browser print settings still
+control the eventual page output.
 
 ### Public surface
 
@@ -4022,12 +4082,20 @@ is applied once the body is available.
 
 The shared `theme.css` owns the default, warm, curious, hopeful, harmony, and
 warrior palettes. Each works with explicit light/dark or system appearance.
-`layout.css` imports that same owner. Explicit custom themes retain precedence
-through `data-arcane-skin="custom"` and their inline tokens.
+`layout.css` imports that same owner. On screen, explicit custom themes retain
+precedence through `data-arcane-skin="custom"` and their inline tokens.
 The bare root retains the generic neutral light/dark baseline; the prior
 layout default palette is selected explicitly through `data-user-skin="default"`,
 `body.default` compatibility, or the default swatch.
 
+During printing, `theme.css` applies the existing base light palette, with a
+white paper surface and `15mm` page margins, to the root, body, and scoped
+`data-arcane-palette` elements. These print-only tokens override screen/custom
+palette tokens. It resets the root/body margin without changing saved
+preferences, screen presentation, scrolling, media, or other layout rules.
+The separate [`PrintView.js`](#printviewjs) owner uses the same light palette
+and margins for its expanded rendered-content snapshot.
+
 A scoped `data-arcane-palette="warm"` element exposes the same palette variables
 for a chooser preview without changing the page's selection. Use any of the
 six named palettes and paint the preview with ordinary shared variables such

package/docs/reference/sdk-api.md

@@ -169,6 +169,7 @@ browser map are cataloged separately in [Runtime modules](runtime-modules.md).
 | `createBrowserSpeechAuthority()` | function | `arcane-os/ai/browser-speech` | Browser speech providers | Browser descriptor construction; use requires the selected storage and provider Web APIs |
 | `createBrowserWasmLlmProvider()` | function | `arcane-os/ai/browser-wasm` | Browser-WASM local AI | Browser context with WebAssembly and OPFS/DBOPFS; WebGPU by default or explicit CPU with gpuLayers:0 |
 | `createBrowserWhisperProvider()` | function | `arcane-os/ai/browser-speech` | Browser speech providers | Browser with Workers, object URLs, caller-selected Whisper runtime/model artifacts, and an SDK DBOPFS speech store |
+| `createBrowserSpeechRecognitionProvider()` | function | `arcane-os/ai/browser-speech` | Browser speech providers | Browser or WebView with native SpeechRecognition; construction and catalog remain available on unsupported hosts |
 | `createCanonicalUstarHeader()` | function | `arcane-os` | Packaging and release bundles | Node |
 | `createDbopfsModelStore()` | function | `arcane-os/ai/browser-wasm` | Browser-WASM local AI | Browser with a ready DBOPFS instance and OPFS |
 | `getBrowserDeviceClass()` | function | `arcane-os/browser-device` | Browser device settings | Node and Browser; synchronous identity hint with no model, storage, or GPU operation |
@@ -7185,6 +7186,62 @@ async function transcribeAfterUserChoice(audioBlob) {
 }
 ```
 
+## createBrowserSpeechRecognitionProvider()
+
+### Overview
+
+Creates an explicitly selected provider/2 STT adapter for the browser's native
+`SpeechRecognition` or `webkitSpeechRecognition` service. It declares
+`localOnly:false` because recognition may use a remote browser service. It does
+not change Whisper, TTS, typing, stored preferences, or any default selection.
+
+### Signature and result
+
+```text
+createBrowserSpeechRecognitionProvider({id,model,language}={})
+```
+
+The application supplies its provider `id` and `model:{id}`; optional `language`
+is passed to native recognition without changing transcript text. The provider
+implements the required `catalog`, `inspect`, `status`, `load`, `request`,
+`unload`, and `dispose` methods plus `createCapture(options)`. There is no SDK
+model download or storage. Construction/catalog do not require native support;
+inspect/load report actual browser availability without opening a microphone.
+File transcription requests are unsupported for this provider.
+
+`createCapture({language,continuous,onSegment,onInterim,onState,onError})`
+returns a single-use `{start,stop,cancel,destroy,done}` handle. Start must be
+called directly from a user gesture and returns a promise for startup success.
+Final callbacks carry exact `{text,sequence}` values once per final result;
+interim `{text}` stays transient. Stop preserves pending native final results
+through `end`; cancellation aborts recognition and suppresses late text.
+`done` resolves `true` for normal native end and `false` for cancellation or
+failure. Unload/dispose cancel owned capture.
+The shared runtime's `createTranscriptionCapture()` additionally owns STT busy
+state and lifecycle replacement. See the
+[complete native capture contract](ai/browser-speech.md#native-browser-speech-recognition).
+
+### Availability and normalization
+
+Conditional browser/native-WebView support on Windows, Linux, macOS and
+Android, determined by the actual browser API and permission/service outcome,
+not by operating-system name. Missing API, denied microphone permission and
+service errors remain honest STT failures without disabling TTS or typing.
+No Core, Whisper, or cloud-provider fallback is inferred.
+
+### Example
+
+```javascript
+import {createBrowserSpeechRecognitionProvider} from 'arcane-os/ai/browser-speech';
+
+async function selectNativeRecognition(ai, signal) {
+    const provider = createBrowserSpeechRecognitionProvider(
+        {id: 'WEB_SPEECH', model: {id: 'WEB_SPEECH'}}
+    );
+    return ai.configureSpeechProvider('stt', provider, {modelId: 'WEB_SPEECH', signal});
+}
+```
+
 ## createTwinCloudTTSProvider()
 
 ### Overview

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "arcane-os",
-  "version": "0.45.0",
+  "version": "0.47.0",
   "description": "Arcane OS JavaScript SDK, project-local CLI, browser runtime, and repository-portable application packager.",
   "type": "module",
   "main": "./src/index.mjs",
@@ -86,7 +86,7 @@
     "test": "npm run test:unit && npm run test:functional && npm run test:integration && npm run test:regression",
     "test:release": "node ./bin/arcane-test.mjs test/npm-release.test.mjs",
     "test:unit": "node ./bin/arcane-test.mjs test/app-descriptor.test.mjs test/app-schema.test.mjs test/app-selection.test.mjs test/contracts.test.mjs test/conversation-closing-report.test.mjs test/doctor.test.mjs test/mail-credentials.test.mjs test/mail-outbox.test.mjs test/mail-public-api.test.mjs test/mail-send.test.mjs test/mail-transport.test.mjs test/targets.test.mjs test/workspace-operation-lock.test.mjs",
-    "test:functional": "node ./bin/arcane-test.mjs test/ai-request-model.test.mjs test/ai-request-retry.test.mjs test/ai-stream-cancellation.test.mjs test/browser-speech-providers.test.mjs test/browser-wasm-gpu-notice.test.mjs test/browser-wasm-download-resume.test.mjs test/chat-input.test.mjs test/chat-stream-speech.test.mjs test/chat-transcript-scroll.test.mjs test/chat-transient-retention.test.mjs test/cli.test.mjs test/continuous-voice-capture.test.mjs test/dbopfs-document-library.test.mjs test/dbopfs-png.test.mjs test/dbopfs.test.mjs test/dev-server.test.mjs test/dev-pwa.test.mjs test/dom-event-instrumentation.test.mjs test/event-manager.test.mjs test/events.test.mjs test/file-preview.test.mjs test/import-map.test.mjs test/mail-cli.test.mjs test/mail-runtime.test.mjs test/mail-server.test.mjs test/markdown-editor.test.mjs test/markdown-media.test.mjs test/markdown-source-map.test.mjs test/modal.test.mjs test/packaging.test.mjs test/pwa-packaging.test.mjs test/pwa-client.test.mjs test/pwa-install.test.mjs test/pwa-worker.test.mjs test/persistent-ai-chat-session.test.mjs test/reference-completeness.test.mjs test/rendered-print.test.mjs test/runtime-api-behavior.test.mjs test/runtime.test.mjs test/scaffold.test.mjs test/speech-playback.test.mjs test/site.test.mjs test/twin-cloud-images.test.mjs test/twin-cloud.test.mjs test/update-check.test.mjs test/user-explicit-updates.test.mjs",
+    "test:functional": "node ./bin/arcane-test.mjs test/ai-request-model.test.mjs test/ai-request-retry.test.mjs test/ai-stream-cancellation.test.mjs test/browser-speech-providers.test.mjs test/browser-wasm-gpu-notice.test.mjs test/browser-wasm-download-resume.test.mjs test/chat-input.test.mjs test/chat-stream-speech.test.mjs test/chat-transcript-scroll.test.mjs test/chat-transient-retention.test.mjs test/cli.test.mjs test/continuous-voice-capture.test.mjs test/dbopfs-document-library.test.mjs test/dbopfs-png.test.mjs test/dbopfs.test.mjs test/dev-server.test.mjs test/dev-pwa.test.mjs test/dom-event-instrumentation.test.mjs test/event-manager.test.mjs test/events.test.mjs test/file-preview.test.mjs test/import-map.test.mjs test/mail-cli.test.mjs test/mail-runtime.test.mjs test/mail-server.test.mjs test/markdown-editor.test.mjs test/markdown-media.test.mjs test/markdown-source-map.test.mjs test/modal.test.mjs test/packaging.test.mjs test/pwa-packaging.test.mjs test/pwa-client.test.mjs test/pwa-install.test.mjs test/pwa-worker.test.mjs test/persistent-ai-chat-session.test.mjs test/reference-completeness.test.mjs test/rendered-print.test.mjs test/runtime-api-behavior.test.mjs test/runtime.test.mjs test/scaffold.test.mjs test/speech-playback.test.mjs test/site.test.mjs test/theme-manager.test.mjs test/twin-cloud-images.test.mjs test/twin-cloud.test.mjs test/update-check.test.mjs test/user-explicit-updates.test.mjs",
     "test:integration": "node ./bin/arcane-test.mjs test/installed-package-runtime.test.mjs test/root-app-layout.test.mjs test/integrated-shared.test.mjs test/integrated-workspace.test.mjs test/mail-browser.test.mjs test/native-plan.test.mjs test/native-provider-loader.test.mjs test/npm-release.test.mjs test/release-bundle.test.mjs test/release-capability-smoke.test.mjs test/shared-payload-batch.test.mjs test/tarball.test.mjs test/browser-wasm-cpu.test.mjs test/wllama-webgpu-runtime.test.mjs",
     "test:regression": "node ./bin/arcane-test.mjs test/channel-workflows.test.mjs test/html-import-registration.test.mjs test/logging-regression.test.mjs test/markdown-speech.test.mjs test/prepared-speech.test.mjs test/native-provider-generation.test.mjs test/speech-queue-regression.test.mjs test/testing.test.mjs test/test-sets.test.mjs",
     "check": "node tools/check-source.mjs && npm test",

package/runtime/arcane/components/file-manager.html

@@ -2142,8 +2142,9 @@
         const rendered=document.createElement('div');
         rendered.className='file-preview';
         let value=fileRef.parsed;
-        const transformed=['json','jsonl','ndjson'].includes(fileRef.ext)
-            &&is.function(host.previewTransform);
+        const jsonFile=['json','jsonl','ndjson'].includes(fileRef.ext);
+        const transformed=jsonFile&&is.function(host.previewTransform);
+        let completeJSON;
 
         if(transformed){
             value=await host.previewTransform(
@@ -2155,6 +2156,37 @@
                 }
             );
             preview.controller.signal.throwIfAborted();
+        }else if(jsonFile){
+            // Recognition needs the complete file: FileEntity's parsed JSONL
+            // rows do not include every unparseable line in the original.
+            const [{decodeMarkdownMediaRecord},text]=await Promise.all([
+                import('../modules/MarkdownMedia.js'),
+                fileRef.text()
+            ]);
+            preview.controller.signal.throwIfAborted();
+            completeJSON=text;
+            let imageRecord;
+            try {
+                imageRecord = JSON.parse(completeJSON);
+            } catch {
+                // Mixed JSONL and ordinary text keep their complete presentation.
+                imageRecord = null;
+            }
+            while (is.array(imageRecord) && imageRecord.length === 1) {
+                imageRecord = imageRecord[0];
+            }
+            // A dataUrl property alone does not identify an image record.
+            // Recognize its declared media type before attempting any decoding.
+            if (is.string(imageRecord?.mediaType)
+                && imageRecord.mediaType.toLowerCase().startsWith('image/')) {
+                const image = decodeMarkdownMediaRecord(imageRecord);
+                if (image?.type.startsWith('image/')) {
+                    return renderDescriptor(
+                        {kind: 'image', content: image, alt: fileRef.name},
+                        preview
+                    );
+                }
+            }
         }
 
         switch(fileRef.ext){
@@ -2168,7 +2200,7 @@
             case 'jsonl':
             case 'ndjson':{
                 if(!transformed){
-                    rendered.append(createPreformatted(await fileRef.text()));
+                    rendered.append(createPreformatted(completeJSON));
                     break;
                 }
                 const records=is.array(value)?value:[];