arcane-os 0.59.0 → 0.59.1

package/CHANGELOG.md

@@ -1,5 +1,17 @@
 # Changelog
 
+## 0.59.1
+
+- Forward the existing AI synthesis signal into native Core synthesis and
+  preserve the established AI cancellation error contract.
+- Carry `AI.fetchSTT(audio, signal)` cancellation through
+  `Arcane.speech.transcribe(request, {signal})` into the existing Core request
+  lifetime. Preserve complete requests and results, one-argument facade calls,
+  unrelated errors and the 180-second timeout. Actual inference interruption
+  and resource release remain with the selected speech service.
+- No speech engine, model, runtime dependency, default-provider switch or data
+  migration is introduced.
+
 ## 0.59.0
 
 - Reconcile marked generated PWA references when a root application's PWA is

package/README.md

@@ -20,7 +20,7 @@ selected SDK projection or an explicit live SDK source mount. Both profiles
 share the theme, packaging, event, cancellation,
 and browser run contracts while retaining their selected application layout.
 
-This checkout defines the `0.59.0` SDK contract. Development applications declare
+This checkout defines the `0.59.1` SDK contract. Development applications declare
 `arcane-os` as `latest` and retain their lockfile. Exact SDK pins begin when Roshi
 designates a production build. Follow [Consumer updates](docs/consumer-updates.md)
 to refresh and compare the installed SDK and lockfile with the published channel;

package/browser-runtime/core/client.mjs

@@ -569,7 +569,7 @@ export function createCoreFacade(client){
         mail:{send:request=>invoke('mail.send',request??{},{timeoutMs:450000})},
         speech:{status:()=>invoke('speech.status',{},{timeoutMs:10000}),
             synthesize:(request,options)=>invoke('speech.synthesize',request??{},{timeoutMs:180000,signal:options?.signal}),
-            transcribe:request=>invoke('speech.transcribe',request??{},{timeoutMs:180000})},
+            transcribe:(request,options)=>invoke('speech.transcribe',request??{},{timeoutMs:180000,signal:options?.signal})},
         localAI:{status:()=>invoke('localai.status',{},{timeoutMs:15000}),
             ensurePlatform:()=>invoke('localai.platform.ensure',{},long),recover:request=>invoke('localai.services.recover',request??{},long),
             setParallelRequests:request=>invoke('localai.parallel.requests.set',request??{},long),

package/docs/reference/README.md

@@ -42,6 +42,7 @@ alone does not make bare module names resolve in a browser.
 | Inspect complete AI and speech calls using the shared developer-mode preference | [Shared logger](sdk-api.md#arcanelogging) and [speech developer diagnostics](ai/browser-speech.md#developer-diagnostics) |
 | Use the `arcane` command | [CLI reference](cli.md) |
 | Install an app and cache selected resources offline | [Progressive web applications](pwa.md) |
+| Disable source PWA generation or explicitly retire confirmed generated output | [Source PWA retirement](pwa.md#disable-source-pwa-generation-and-retire-generated-output) |
 | Generate named browser imports or inspect the selected physical runtime | [`arcane import-map`](cli.md#arcane-import-map) and [browser runtime delivery](protocols.md#browser-runtime-delivery) |
 | Connect an application through the shared WebSocket transport | [Shared WebSocket clients](websocket-client.md) |
 | Choose browser, native, cloud, or cross-host behavior | [Availability and normalization](availability-and-normalization.md) |
@@ -51,12 +52,14 @@ alone does not make bare module names resolve in a browser.
 | Submit complete speech parts immediately and play them in order | [`SpeechPlayback`](runtime-modules.md#speechplaybackjs) and the [basic browser example](ai/browser-speech.md#play-a-complete-array-with-speechplayback) |
 | Call `globalThis.Arcane` | [Arcane Core API](core/arcane-api.md) |
 | Connect a browser to one Core transport | [Core browser client](core-client.md) |
+| Cancel one Core speech synthesis request without changing its payload | [Speech request lifetime](core-client.md#events-and-request-lifetime) and [Core facade](sdk-api.md#createcorefacade) |
 | Compose native Core dispatch, service lifecycle, and stdio hosting | [Native Core runtime](core-runtime.md) |
 | Run application-selected llama.cpp, Ollama or ONNX through Core | [Local AI through Core](local-ai.md) |
 | Retain a Nemotron model and diarize caller-fed audio streams | [Native speaker diarization](diarization.md) |
 | Persist application-selected preferences through Core | [Core preferences service](core-preferences.md) |
 | Read complete selected Git text without changing a checkout | [Git text snapshots](git-text-snapshot.md) |
 | Build an installed-SDK portable Core payload | [Portable Core packaging](core-native-packaging.md) |
+| Pass host-selected state defaults and unchanged explicit launch values to services | [Launch-time locations](core-native-packaging.md#launch-time-locations) |
 | Build a Windows executable without an OS checkout | [Windows executable packaging](core-native-packaging.md#windows-executable) |
 | Compose a Mac application with an architecture-matched host | [macOS application composition](core-native-packaging.md#macos-application-composition) |
 | Subscribe to native events | [Arcane event reference](core/arcane-events.md) |

package/docs/reference/core/arcane-ai-contracts.md

@@ -564,7 +564,7 @@ defaulting.
 
 ### Speech transcription request
 
-`Arcane.speech.transcribe(request)` accepts an exact
+`Arcane.speech.transcribe(request, options?)` accepts an exact
 `SpeechTranscriptionRequest`.
 
 | Field | Type | Required | Constraints / default | Description |
@@ -573,6 +573,19 @@ defaulting.
 | `mimeType` | `string` | No | Default `"audio/webm"`; base type must be `audio/webm` | Media type; codec parameters may follow. |
 | `model` | `string` | No | Default `"whisper-small"`; `whisper(?:[._-][a-z0-9]+)*` | Whisper identifier. The fixed service rejects unsupported variants. |
 
+### Speech transcription controls
+
+The optional second argument is `SpeechTranscriptionControls`:
+
+| Field | Type | Required | Default | Description |
+|---|---|---:|---|---|
+| `signal` | `AbortSignal` | No | No caller signal | Cancels this request through Core. The facade forwards it separately from the complete audio request; the registered service owns actual engine interruption. |
+
+Existing one-argument calls retain their behavior. The facade's request timeout
+remains 180 seconds. A pre-aborted signal dispatches no request, and an
+in-flight abort cancels the request and suppresses late responses. Other
+properties of this controls record are unused; they do not enter the payload.
+
 ### Speech transcription result
 
 | Field | Type | Required | Constraints / default | Description |

package/docs/reference/core/arcane-api.md

@@ -105,7 +105,7 @@ directly.
 | `Arcane.localAI.setParallelRequests(request)` | `request`: [`LocalAIParallelRequestsRequest`](arcane-ai-contracts.md#local-ai-parallel-request-configuration) | [`Promise<LocalAIParallelRequestsResult>`](arcane-ai-contracts.md#local-ai-parallel-request-configuration) | Solves one app-owned verified model/context's maximum directly from native model and memory/resource evidence without a product ceiling, clamps a positive request to that result (`0` requests the maximum), and changes the machine-wide managed Ollama setting only when needed. A tentative change uses one fresh stopped-service snapshot before the final value is written, then Core ensures, loads, and confirms the exact model. A restart unloads resident models. Automatic mutation currently requires the dedicated `ai.runtime.manage` capability on Microsoft NT desktop Core and operating-system authorization; Linux returns administrator-managed systemd guidance, and Android user-managed loopback sessions do not invoke it. |
 | `Arcane.speech.status()` | None | [`Promise<SpeechStatus>`](arcane-ai-contracts.md#speech-status) | Reads bounded, independent Kokoro and Whisper readiness through Core or an admitted Android native host. Requires `ai.inference`. |
 | `Arcane.speech.synthesize(request)` | `request`: [`SpeechSynthesisRequest`](arcane-ai-contracts.md#speech-synthesis-request) | [`Promise<SpeechSynthesisResult>`](arcane-ai-contracts.md#speech-synthesis-result) | Synthesizes bounded local speech through the native host and fixed loopback runtime. Requires `ai.inference`. |
-| `Arcane.speech.transcribe(request)` | `request`: [`SpeechTranscriptionRequest`](arcane-ai-contracts.md#speech-transcription-request) | [`Promise<SpeechTranscriptionResult>`](arcane-ai-contracts.md#speech-transcription-result) | Sends bounded canonical base64 bytes labeled `audio/webm` to local Whisper through the native host. The bridge validates encoding, label, and bounds; the fixed service parses the media container. Requires `ai.inference`. |
+| `Arcane.speech.transcribe(request, options?)` | `request`: [`SpeechTranscriptionRequest`](arcane-ai-contracts.md#speech-transcription-request); `options?`: [`SpeechTranscriptionControls`](arcane-ai-contracts.md#speech-transcription-controls) | [`Promise<SpeechTranscriptionResult>`](arcane-ai-contracts.md#speech-transcription-result) | Sends the complete request to the selected native transcription service; optional cancellation reaches Core's request lifetime. The registered host service owns media decoding and actual engine interruption. |
 | `Arcane.ollama.version()` | None | [`Promise<OllamaVersionResponse>`](arcane-ai-contracts.md#ollama-provider-responses) | Gets the managed Ollama version for Settings, Terminal, and Shell diagnostics. |
 | `Arcane.ollama.models()` | None | [`Promise<OllamaModelsResponse>`](arcane-ai-contracts.md#ollama-provider-responses) | Lists the raw provider inventory envelope; it is not the application admission catalog. |
 | `Arcane.ollama.list()` | None | [`Promise<OllamaModelsResponse>`](arcane-ai-contracts.md#ollama-provider-responses) | Alias of the raw `models()` inventory. |

package/docs/reference/core/reference/arcane-api/ai-and-ollama.md

@@ -703,7 +703,7 @@ console.info(result.contentType, result.audioBase64.length);
 
 ### Overview
 
-`Arcane.speech.transcribe(request)` sends bounded caller-supplied audio bytes,
+`Arcane.speech.transcribe(request, options?)` sends bounded caller-supplied audio bytes,
 labeled as WebM, to the fixed local transcription service. Use it after local
 capture permission and recording have succeeded; the method itself does not
 capture audio or grant microphone permission.
@@ -739,18 +739,21 @@ work after `ANDROID_SPEECH_QUEUE_FULL`.
 ### Streaming, cancellation, and events
 
 Transcription resolves one complete text result and emits no method event. The
-wrapper timeout is 180 seconds and no signal is exposed. Core and Android do
-not promise cancellation when the renderer stops waiting.
+wrapper timeout remains 180 seconds. Optional `{signal}` controls the Core
+request lifetime separately from the complete audio payload. Pre-abort sends
+no request; in-flight abort cancels that request and suppresses late responses.
+The registered native service owns actual inference interruption and resource
+release. `AI.fetchSTT(audio, signal)` forwards its signal through this call.
 
 ### Example
 
 ```javascript
-async function transcribeRecordedWebM(audioBase64) {
+async function transcribeRecordedWebM(audioBase64, signal) {
     const result = await globalThis.Arcane.speech.transcribe({
         audioBase64: audioBase64,
         mimeType: 'audio/webm',
         model: 'whisper-small'
-    });
+    }, {signal});
     return result.text;
 }
 ```

package/docs/reference/core-client.md

@@ -84,6 +84,13 @@ signal sends no synthesis request; an in-flight abort sends `request.cancel`
 and suppresses late responses. Actual synthesis interruption depends on the
 registered speech service and its engine; the facade supplies no speech engine.
 
+`Arcane.speech.transcribe(request, {signal})` forwards cancellation through the
+same request lifetime and retains its 180,000 ms timeout and complete request.
+`AI.fetchSTT(audio, signal)` carries that signal into the native call. A
+pre-aborted signal sends no transcription request; an in-flight abort sends
+`request.cancel` and suppresses late responses. The registered transcription
+service owns interruption and release of its actual engine operation.
+
 ## Events and request lifetime
 
 `events.on(name, listener)`, `once(name, listener)` and

package/docs/reference/sdk-api.md

@@ -4563,6 +4563,12 @@ The object includes `importMap(options)`, which merges defaults with explicit
 call options and refreshes every directly navigable descriptor-selected browser
 document for one selected app. The equivalent generic route is
 `execute('import-map', options)`.
+For a standalone root app with `pwa.enabled:false`, ordinary refresh removes
+marked SDK-generated PWA references from selected documents. An explicit
+`importMap({retireGeneratedPwa:true})` also retires the four standard root PWA
+outputs and matching older manifest references after the application owner
+confirms they are generated. See [disabled-PWA retirement](pwa.md#disable-source-pwa-generation-and-retire-generated-output)
+for the required source-selection adjustment and preserved content.
 It also includes `upgrade(options)`, which performs the explicit installed-SDK
 consumer upgrade described by `upgradeApplication()`, and
 `updateCheck(options)`, which invokes `checkSdkUpdate()` once. Constructing the
@@ -4685,6 +4691,25 @@ documents through sequential writes and has no supported dry-run or
 all-file transaction. An error or cancellation can leave completed writes in
 place; rerun the operation after resolving the cause.
 
+For a standalone `appsRoot:'.'` app with `pwa.enabled:false`, ordinary refresh
+removes active generated registration scripts and matching manifest relationships
+marked `data-arcane-manifest`. Unmarked references and existing PWA files remain.
+Set `retireGeneratedPwa:true` only after confirming generated ownership of the
+matching root manifest references and all four standard outputs:
+`arcane.webmanifest`, `arcane-offline.json`, `arcane-sw.js` and `arcane-pwa.mjs`.
+Remove those generated outputs from required `package.include` entries first,
+and confirm that unselected documents no longer need them. The operation writes
+selected reference changes before deleting these files; its
+`import-map.root-files.completed` event reports actual removed paths in
+`retiredPwa`. Repeated retirement accepts already-absent output.
+
+An omitted PWA record selects no retirement; an enabled record keeps normal
+generation. The option belongs only to this explicit import-map API route.
+Ordinary development refresh does not forward file-retirement authority, and
+there is no new CLI flag. Other files, unselected/inactive HTML, authored content
+and browser registrations, caches and saved data keep their existing ownership.
+See the complete [source PWA contract](pwa.md#disable-source-pwa-generation-and-retire-generated-output).
+
 The exact command `'upgrade'` dispatches `upgradeApplication(options)`. It is
 external-workspace-only and runs that application's ordinary `npm upgrade`
 command. It does not independently reconcile the installed SDK projection,
@@ -6899,6 +6924,14 @@ Import it from `arcane-os/core/client`. The result includes `runtime`, `events`,
 `Error` and the existing `ai`, `environment`, `mail`, `speech`, `localAI`,
 `ollama`, application, platform, storage and other host namespaces.
 
+`facade.speech.synthesize(request, {signal})` accepts an optional `AbortSignal`
+through the same correlated request lifetime. The complete request and existing
+180,000 ms timeout remain unchanged. A pre-aborted signal sends no synthesis
+request; an in-flight abort emits that request's `request.cancel`, rejects with
+`ARCANE_REQUEST_ABORTED` and leaves unrelated requests active. Late responses
+cannot settle the cancelled request. Actual native synthesis interruption belongs
+to the registered service and engine; this facade supplies no engine.
+
 ### Availability and normalization
 
 **Browser and native WebView JavaScript hosts with a Core client.** Creating the
@@ -7560,8 +7593,9 @@ import createDiarizationService from 'arcane-os/core/diarization';
 
 ### Overview
 
-Reads only the complete JSON object explicitly selected by
-`--arcane-launch-config <path>`; it does not search for application configuration.
+Reads the complete JSON object explicitly selected by
+`--arcane-launch-config <path>`, with an optional separately supplied native host
+state-directory default. It does not search for application configuration.
 
 ### Signature and result
 
@@ -7569,11 +7603,15 @@ Reads only the complete JSON object explicitly selected by
 async readCoreLaunchContext({argv=process.argv.slice(2)}={})
 ```
 
-Import it from `arcane-os/core/host`. The promise resolves to `{}` when the flag
-is absent, or the complete parsed object when present. A missing flag value,
-unreadable file, malformed JSON or non-object value rejects. Relative paths use
-the process working directory. The reader does not rewrite content or mutate
-the environment.
+Import it from `arcane-os/core/host`. `--arcane-host-state-root <directory>`
+supplies a `stateRoot` default; every field from the explicit launch JSON object
+then takes precedence unchanged, including a relative, null or other explicitly
+present `stateRoot`. With neither argument, the promise resolves to `{}`.
+A missing argument value, unreadable launch file, malformed JSON or non-object
+value rejects. Relative launch-file paths use the process working directory.
+The reader does not choose, resolve or validate the state directory, rewrite
+content, discover or migrate stored data, or mutate the environment. An
+application-selected `preferencesFile` remains a separate unchanged field.
 
 ```javascript
 import {readCoreLaunchContext} from 'arcane-os/core/host';
@@ -7584,7 +7622,10 @@ const launchContext = await readCoreLaunchContext();
 The generated entry supplies artifact-derived `appRoot`, then applies the whole
 explicit context and passes the same object as every service factory's second
 argument. Authored service options remain the first argument. Workspace/state
-locations and additional fields belong to the launcher/application. See
+locations and additional fields belong to the launcher/application. Windows and
+Mac launchers forward their actual host-selected state directory through the
+separate argument; other composing hosts may use the same seam. This JavaScript
+contract does not establish a compiled host or matching release archive. See
 [launch-time locations](core-native-packaging.md#launch-time-locations).
 
 ## createCoreLocalAIProvider()

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "arcane-os",
-  "version": "0.59.0",
+  "version": "0.59.1",
   "description": "Arcane OS JavaScript SDK, project-local CLI, browser runtime, and repository-portable application packager.",
   "type": "module",
   "main": "./src/index.mjs",

package/runtime/arcane/modules/AI.js

@@ -4084,11 +4084,19 @@ class AI {
             if(signal?.aborted){
                 throw normalizeAIRequestAbort(signal.reason);
             }
-            const response=await nativeSpeech.transcribe({
-                audioBase64:this.#arrayBufferToBase64(audioBytes),
-                mimeType,
-                model
-            });
+            let response;
+            try{
+                response=await nativeSpeech.transcribe({
+                    audioBase64:this.#arrayBufferToBase64(audioBytes),
+                    mimeType,
+                    model
+                },{signal});
+            }catch(error){
+                if(isAIRequestAbort(error,signal)){
+                    throw normalizeAIRequestAbort(error);
+                }
+                throw error;
+            }
             if(signal?.aborted){
                 throw normalizeAIRequestAbort(signal.reason);
             }
@@ -4138,13 +4146,21 @@ class AI {
         const speed=is.finite(payload.speed)?payload.speed:this.voiceSpeed;
         const nativeSpeech=this.#nativeSpeech(this.ttsService,'tts');
         if(nativeSpeech){
-            const response=await nativeSpeech.synthesize({
-                model,
-                voice,
-                input,
-                responseFormat,
-                speed
-            });
+            let response;
+            try{
+                response=await nativeSpeech.synthesize({
+                    model,
+                    voice,
+                    input,
+                    responseFormat,
+                    speed
+                },{signal});
+            }catch(error){
+                if(isAIRequestAbort(error,signal)){
+                    throw normalizeAIRequestAbort(error);
+                }
+                throw error;
+            }
             if(signal?.aborted){
                 throw normalizeAIRequestAbort(signal.reason);
             }