arcane-os 0.64.0 → 0.66.0

package/docs/reference/sdk-api.md

@@ -55,9 +55,12 @@ runtime layouts.
 | `arcane-os/core/contracts` | Shared Core protocol, frame, method and diagnostic error contracts. |
 | `arcane-os/core/classic-source` | Node generator for the canonical classic-script Core client projection. |
 | `arcane-os/core/runtime` | App-neutral native Core dispatcher and service lifecycle. |
+| `arcane-os/core/development` | App-service composition and document-owned Core transport during source development, independently of local AI. |
 | `arcane-os/core/stdio` | Framed Node stdio transport with graceful runtime drain. |
 | `arcane-os/core/host` | Node-only reusable Core host lifecycle with explicitly supplied services. |
-| `arcane-os/core/repositories` | Native persistent ArcaneData paths and explicitly selected connected working repositories. |
+| `arcane-os/codex/app-server` | Explicit native Codex App Server session, complete live turns, server requests and recovery. |
+| `arcane-os/mcp/stdio` | Node MCP STDIO server for app-owned tools and static resources. |
+| `arcane-os/core/repositories` | Native persistent ArcaneData paths, connected working repositories and scoped non-secret Git identity configuration. |
 | `arcane-os/core/packaged-web` | Core-owned packaged web listener with a persisted loopback origin and ready/failure events. |
 | `arcane-os/core/preferences` | Existing preference RPC methods with an application-selected file, ordered writes and owned drain. |
 | `arcane-os/core/diarization` | Lazy native speaker-diarization service, explicit stream methods and lifecycle/result events. |
@@ -71,6 +74,9 @@ runtime layouts.
 | `arcane-os/ai/core-image` | Browser image lifecycle and complete PNG Blobs through an available Core service. |
 | `arcane-os/core/image` | Native image Core service with independent runtime preparation and retained model ownership. |
 | `arcane-os/core/speech` | Independent injected STT/TTS engine loading, request cancellation and joined Core service lifetime. |
+| `arcane-os/local-ai/whisper` | Retained native Whisper model, complete recordings and joined helper lifetime. |
+| `arcane-os/local-ai/whisper/build` | First-party persistent helper build against selected installed Whisper headers and libraries. |
+| `arcane-os/local-ai/whisper/openvino-build` | Optional Windows x64 Intel NPU encoder runtime producer using selected installed sources and toolchain. |
 | `arcane-os/ai/core-model-assets` | Complete stored browser model members projected through Core into native working files. |
 | `arcane-os/core/model-assets` | Native working-file preparation, engine retain handles and joined cleanup. |
 | `arcane-os/integrated-provider` | Fixed integrated shared-development provider. |
@@ -383,6 +389,13 @@ The remaining data-only subpaths are eight JSON Schemas and package metadata.
 | `createCoreFacade()` | function | `arcane-os/core/client` | Core browser client | Browser and native WebView JavaScript hosts |
 | `installCoreClient()` | function | `arcane-os/core/client` | Core browser client | Browser and native WebView JavaScript hosts |
 | `getInstalledCoreClient()` | function | `arcane-os/core/client` | Core browser client | Browser and native WebView JavaScript hosts |
+| `subscribeCoreClient()` | function | `arcane-os/core/client` | Core browser client | Browser and native WebView JavaScript hosts |
+| `createDevelopmentCore()` | function | `arcane-os/core/development`, `arcane-os` | Core source development | Node on Windows, Linux and macOS; Android requires host adaptation |
+| `createCodexAppServerSession()` | function | `arcane-os/codex/app-server` | Native Codex sessions | Node with an explicitly selected Codex App Server executable |
+| `openCodexAppServerSession()` | function | `arcane-os/codex/app-server` | Native Codex sessions | Node with an explicitly selected Codex App Server executable |
+| `createMcpStdioServer()` | function | `arcane-os/mcp/stdio` | MCP STDIO | Node streams on Windows, Linux and macOS; Android needs host adaptation |
+| `MCP_PROTOCOL_VERSION` | constant | `arcane-os/mcp/stdio` | MCP STDIO | Node |
+| `McpProtocolError` | class | `arcane-os/mcp/stdio` | MCP STDIO | Node |
 | `createCoreClassicSource()` | function | `arcane-os/core/classic-source` | Core classic client projection | Node; generated source runs in browser and native WebView renderers |
 | `createCoreRuntime()` | function | `arcane-os/core/runtime` | Native Core runtime | Node on Windows, Linux and macOS native hosts; Android requires host adaptation |
 | `encodeCoreFrame()` | function | `arcane-os/core/stdio` | Native Core stdio transport | Node |
@@ -395,6 +408,7 @@ The remaining data-only subpaths are eight JSON Schemas and package metadata.
 | `readCoreLaunchContext()` | function | `arcane-os/core/host` | Native Core host composition | Node; reads explicitly selected launch JSON |
 | `resolveArcaneDataPaths()` | function | `arcane-os/core/repositories` | Native repository workspaces | Node on Windows, Linux and macOS; Android supplies its data root |
 | `createRepositoryWorkspace()` | function | `arcane-os/core/repositories` | Native repository workspaces | Node with Git; Android requires host process adaptation |
+| `readGitIdentity()` | function | `arcane-os/core/repositories` | Native repository workspaces | Node with Git; Android requires host process adaptation |
 | `createWindowsNativeProvider()` | function | `arcane-os/native/windows-provider` | Windows native provider | Node assembly; Windows x64/WebView2 execution |
 | `arcaneNativeBuilderProvider` | singleton | `arcane-os/native/windows-provider` | Windows native provider | Node assembly; Windows x64/WebView2 execution |
 | `arcaneNativeBuilderProvider default export` | singleton | `arcane-os/native/windows-provider` | Windows native provider | Node assembly; Windows x64/WebView2 execution |
@@ -417,6 +431,10 @@ The remaining data-only subpaths are eight JSON Schemas and package metadata.
 | `createLocalImageService()` | function | `arcane-os/core/image` | Core local images | Node Core with selected stable-diffusion.cpp requirements |
 | `createLocalImageService default export` | function | `arcane-os/core/image` | Core local images | Same native image service factory |
 | `createSpeechService()` | function | `arcane-os/core/speech` | Core native speech | Node Core with explicitly supplied speech engines |
+| `createWhisperRuntime()` | function | `arcane-os/local-ai/whisper` | Core native speech | Node with a prepared matching helper, runtime, decoder and selected model |
+| `createWhisperRuntime default export` | function | `arcane-os/local-ai/whisper` | Core native speech | Same retained native engine factory |
+| `buildWhisperHelper()` | function | `arcane-os/local-ai/whisper/build` | Core native speech | Node with installed CMake/C++17 toolchain and matching Whisper source/runtime |
+| `buildWhisperOpenVinoRuntime()` | function | `arcane-os/local-ai/whisper/openvino-build` | Core native speech | Windows x64 Node with installed matching Whisper/OpenVINO sources and CMake/MSVC toolchain |
 | `createSpeechService default export` | function | `arcane-os/core/speech` | Core native speech | Same shared speech service factory |
 | `prepareCoreModelAssets()` | function | `arcane-os/ai/core-model-assets` | Core model assets | Browser with complete Blob/File members and available Core service |
 | `createModelAssetService()` | function | `arcane-os/core/model-assets` | Core model assets | Node Core with an application-selected working directory |
@@ -4138,6 +4156,11 @@ inspection is distinct from executing them or verifying a browser deployment.
 
 Starts one owned browser development server with exact runtime/app route mappings and a caller-selected bind address.
 
+Source callers may pass `core`, a handle returned by
+[`createDevelopmentCore()`](#createdevelopmentcore). The server delegates the
+Core HTTP routes and closes that owner during shutdown. The existing internal
+`localAI` handle remains accepted; `core` takes precedence when explicitly supplied.
+
 HTTP and HTTPS serving use published `node-http-server` 10.0.0. The SDK
 selects source routes and supplies generated representations; the module owns
 static-file conditional GET/HEAD handling and response delivery. The SDK
@@ -4658,6 +4681,14 @@ async function usedescribeTargets(...arguments_) {
 
 Starts one owned browser development server for the selected application.
 
+The selected descriptor's `native.services` composes application Core services
+independently of local AI. Programmatic `serviceModules:[{module,options}]`
+replaces that list; `services` adds constructed service definitions and `context`
+supplies app-owned launch fields. The result adds `core` when composed and retains
+`localAI` for selected native local AI. Page rendering and the listener do not
+wait for service readiness. See [source-development Core](core-development.md)
+for explicit `/arcane-core.js` loading, cancellation and current-state replay.
+
 `http`, `https`, `certPath`, `keyPath`, and `tls` follow the
 [`startDevServer()` transport contract](#startdevserver), alongside `host`, `port`, and
 `httpPort`. By default, `port` selects HTTPS and `httpPort` selects the HTTP `308`
@@ -5183,7 +5214,7 @@ a dedicated bare Git cache. It does not create or alter a working checkout.
 ### Signature, lifecycle, and result
 
 ```text
-createGitTextSnapshot({cacheDirectory,remote,ref,selectPath,onEvent,run=runProcess}={})
+createGitTextSnapshot({cacheDirectory,remote,ref,selectPath,gitIdentity,onEvent,run=runProcess}={})
 ```
 
 Import from `arcane-os`. The application owns the cache location, remote, ref,
@@ -5195,6 +5226,11 @@ await accepted refresh/process cleanup. Errors remain observable instead of
 returning stale or partial success. See [Git text snapshots](git-text-snapshot.md)
 for complete inputs, text semantics, errors, events and Core service composition.
 
+Optional `gitIdentity:{name?,email?,username?}` captures a child-process-only
+selection for init/fetch and subsequent Git commands, preserving shared refresh
+cancellation and complete content. See [Git identity configuration](core-repositories.md#git-identity-configuration)
+for author precedence, scoped defaults and credential username semantics.
+
 ### Example
 
 ```js
@@ -7062,6 +7098,46 @@ const client = getInstalledCoreClient();
 console.log(client ? client.runtime.current() : 'No SDK client is installed.');
 ```
 
+## subscribeCoreClient()
+
+### Overview
+
+Observes the selected global's SDK client installation without creating a
+transport or delaying rendering. Applications can subscribe before independently
+loaded development or native bootstrap code installs the client.
+
+### Signature and result
+
+```text
+subscribeCoreClient(listener,{global=globalThis,emitCurrent=true,signal}={})
+```
+
+Import from `arcane-os/core/client`. Returns an idempotent unsubscribe function.
+The listener receives `{client,previousClient,reason,error}` with the exact
+client and error objects. Reasons are `current`, `installed`, `closed` and
+`transport-failed`. Current state replays synchronously unless disabled; an
+already-aborted signal registers nothing. Close or terminal failure releases
+the prior installation before notification. A reentrant replacement is retained.
+
+### Availability and normalization
+
+**Browser and native WebView JavaScript hosts.** Installation is distinct from
+Core, service or model readiness. Read `client.runtime.current()` and subscribe
+to that client's authoritative runtime/service events for those states. This
+observer starts no service and uses the shared event owner, not polling. See
+[Core client](core-client.md) and [source-development Core](core-development.md).
+
+### Example
+
+```javascript
+import {subscribeCoreClient} from 'arcane-os/core/client';
+
+const unsubscribe = subscribeCoreClient(function installationChanged({client}) {
+    console.log(client ? client.runtime.current() : 'Core is not installed.');
+});
+// The application owner calls unsubscribe() when this observer is retired.
+```
+
 ## createCoreClassicSource()
 
 ### Overview
@@ -7102,6 +7178,93 @@ const source = await createCoreClassicSource({
 nativeHost.setDocumentCreatedScript(source);
 ```
 
+## createCodexAppServerSession()
+
+Import from `arcane-os/codex/app-server`. Creates a synchronous session handle
+without starting a process. `connect()` starts the caller-selected executable
+and completes native JSONL initialization. The session owns explicit thread
+creation/resumption, complete native requests, live turn callbacks, exact-turn
+completion, interruption, real server-request replies and process retirement.
+Application-owned prompts, approvals and display policy stay with the caller.
+It neither attaches to desktop chats nor installs or authenticates Codex.
+See the complete [session options, methods, events, results, errors and recovery
+contract](codex-app-server.md).
+
+## openCodexAppServerSession()
+
+Import from `arcane-os/codex/app-server`. Creates the same session, awaits
+`connect()`, and returns it; failed opening disposes the owned process before
+rejecting. Prefer `createCodexAppServerSession()` when the caller must retain
+the handle during initialization. Neither factory creates or resumes a thread.
+See [connection ownership](codex-app-server.md#open-an-explicitly-selected-connection).
+
+## createMcpStdioServer()
+
+Import from `arcane-os/mcp/stdio`. Creates one optional Node STDIO session for
+application-owned tool and static-resource descriptors. `start()` attaches
+caller-owned streams; handlers receive complete arguments and return explicit
+MCP result containers. Requests run independently; protocol output writes are
+ordered. Normal EOF and `close()` drain accepted work. Cancellation is
+cooperative, and transport failures remain observable through `closed`.
+See [options, handlers, methods, errors and supported profile](mcp-stdio.md).
+
+## MCP_PROTOCOL_VERSION
+
+Import from `arcane-os/mcp/stdio`. The supported initialization profile is
+exactly `'2025-11-25'`. This does not claim later profiles or every optional
+capability. See [protocol support](mcp-stdio.md#mcp_protocol_version).
+
+## McpProtocolError
+
+Import from `arcane-os/mcp/stdio`. `new McpProtocolError(code,message,data)`
+represents an explicit JSON-RPC error with complete message and optional data.
+Ordinary domain tool failures use an explicit `CallToolResult` with `isError`.
+See [error outcomes](mcp-stdio.md#mcpprotocolerror).
+
+## createDevelopmentCore()
+
+### Overview
+
+Composes application-selected Core services and the SDK-owned development HTTP
+transport independently of local AI. Import from `arcane-os/core/development`
+or `arcane-os`; ordinary applications normally use `developApplication()` with
+their descriptor's `native.services`.
+
+### Signature and result
+
+`createDevelopmentCore({appRoot=process.cwd(),application,version,services=[],serviceModules=[],context={},getReplayEvents,signal,onEvent}={})`
+returns `{ready,handler,current,close}` synchronously. Module default factories
+receive unchanged `(options,context)`. `ready` reports composed dispatcher
+startup, not readiness of every service. `current()` returns complete
+`{state,error,core}`; `handler(request,response)` owns `/rpc`, `/events` and both
+bootstrap aliases; idempotent `close()` joins accepted service work and output.
+
+### Availability and example
+
+Node on Windows, Linux and macOS. Browser callers use the public Core client.
+Android needs its host adapter. This adds no cross-process host discovery.
+
+```javascript
+import {createDevelopmentCore, startDevServer} from 'arcane-os';
+
+const core = createDevelopmentCore({
+    appRoot: process.cwd(),
+    serviceModules: [{module: 'bridge/moon-cheese.mjs', options: {shelf: 'Lunar cheddar'}}]
+});
+let server;
+try {
+    server = await startDevServer({workspaceRoot: process.cwd(), core});
+    await server.closed;
+} finally {
+    await core.close();
+}
+```
+
+The [complete guide](core-development.md) defines document cancellation,
+service-lifetime drain, diagnostics, optional explicit service snapshots and
+non-blocking page bootstrap. App policy and explicit native process activation
+remain app-owned.
+
 ## createCoreRuntime()
 
 ### Overview
@@ -7728,10 +7891,10 @@ explicit existing path. The application owns the remote, branch and Core API.
 ### Signature and result
 
 ```text
-createRepositoryWorkspace({name,directory,dataRoot,remote,branch,onEvent,run=runProcess}={})
+createRepositoryWorkspace({name,directory,dataRoot,remote,branch,gitIdentity,onEvent,run=runProcess}={})
 ```
 
-Returns `{directory,open,status,pull,push,close,drain,dispose}`. Construction does
+Returns `{directory,open,status,pull,push,write,close,drain,dispose}`. Construction does
 no I/O. Operations accept `{signal}`; a missing or empty destination clones once,
 while existing checkout files, branches, remotes and local changes remain intact.
 Same-directory calls are ordered within the process. Shutdown drains accepted
@@ -7739,6 +7902,20 @@ work and preserves the checkout. No CLI cwd, launch state, preference, snapshot
 cache or existing user-data location changes. See the [complete inputs, results,
 errors and lifecycle](core-repositories.md#one-connected-working-checkout).
 
+Optional `gitIdentity:{name?,email?,username?}` captures explicit non-secret
+settings for child Git operations without writing global/local configuration.
+Selected author fields override inherited child author/committer fields;
+omitted fields remain inherited. Username remains a credential hint, with
+authentication owned by ordinary Git and its configured helper.
+
+`write({files:[{path,content}],message,signal})` snapshots the exact selected
+strings, writes those repository-relative files, commits only their literal
+paths and performs an ordinary non-force push. It retains unrelated staged
+paths and existing Git filters/hooks. Results and causal failures distinguish
+confirmed local writes, commits, pushes and uncertain attempted side effects;
+complete process output is retained. See [the complete writer outcome
+contract](core-repositories.md#write-commit-and-push-selected-text).
+
 ```javascript
 import {createRepositoryWorkspace} from 'arcane-os/core/repositories';
 
@@ -7750,6 +7927,45 @@ await repository.open({signal});
 await repository.close();
 ```
 
+## readGitIdentity()
+
+### Overview
+
+Reads non-secret global, repository-local and effective Git configuration
+without changing files or querying credentials.
+
+### Signature and result
+
+```text
+readGitIdentity({directory,signal,onEvent,run=runProcess}={})
+```
+
+Import from `arcane-os/core/repositories`. Returns a promise for
+`{global,local,effective}`, each observed scope containing `{name,email,githubUser}`.
+Fields preserve complete UTF-8 strings, including empty values, leading U+FEFF
+and newlines; unset fields are `null`. Git values outside UTF-8 fail with
+`ARCANE_GIT_IDENTITY_NOT_TEXT` instead of replacement characters.
+With no directory, only global configuration is read and local/effective
+are `null`. Existing repository directories, including bare caches, select the
+context for all three observations. Configured includes and ordinary Git
+precedence remain in effect. These are config observations, not authenticated
+accounts or environment-resolved commit identities.
+
+Independent scope queries run concurrently and join cleanup before settlement.
+Raw stdout is parser-owned rather than emitted as text events; an injected
+`run` must honor the existing raw-output process contract. Lifecycle and stderr
+events retain their ordinary route. Errors preserve their original object,
+code, cause and process diagnostics, with complete captured output added as
+`rawStdout` (a Buffer). The raw-mode process result retains `stdout:null`.
+If that property already exists or cannot be attached, a wrapper retains the
+original as `cause`, its code/details/exit code and this observation's raw
+output; original causal failures remain on the cause. An attachment exception
+is retained as `attachmentError`. Existing property values remain untouched.
+Decoding failures include their cause, complete process details and raw output.
+Already-represented observer errors appear once; separate failures use
+`AggregateError`. See the [complete contract and
+per-process selection example](core-repositories.md#git-identity-configuration).
+
 ## createCoreLocalAIProvider()
 
 ### Overview
@@ -7955,6 +8171,132 @@ selected model and native engine.
 The default export from `arcane-os/core/image` is the same
 `createLocalImageService` factory and lifecycle described above.
 
+## createWhisperRuntime()
+
+### Overview
+
+Creates one retained native Whisper engine from a prepared runtime or a lazy
+preparation function. Construction starts no helper, model load or inference.
+Import the named factory from `arcane-os/local-ai/whisper`.
+
+### Syntax and inputs
+
+```javascript
+createWhisperRuntime({runtime, prepare, modelId, temporaryDirectory, onEvent}={})
+```
+
+Supply `runtime` or `prepare({signal,onEvent})`, and an application-owned
+`temporaryDirectory`. `modelId` selects a model from the prepared runtime;
+omitting it uses the runtime's selected model. `onEvent` receives complete
+native preparation/process diagnostics. The runtime describes matching helper,
+Whisper backend libraries, decoder and model files; see the complete
+[native Whisper preparation contract](local-whisper.md).
+
+### Returned members and lifetime
+
+| Member | Contract |
+| --- | --- |
+| `current()` | Returns `providerId`, `modelId`, `state`, `loaded`, `busy`, `requestId`, `requestedBackend`, `observedBackend`, `backendEvidence`, `requestedEncoder`, `observedEncoder`, `encoderEvidence` and `error`. State reports actual helper/model readiness; encoder and decoder initialization evidence remain separate. |
+| `subscribe(listener,{replay=true,signal}={})` | Observes the current snapshot immediately by default, then each state change; returns the unsubscribe closure. |
+| `load({modelId,signal}={})` | Prepares the selected runtime if necessary and retains its initialized helper/model. Same-model loading is shared; replacement remains explicit. |
+| `transcribe(request,{signal,onProgress,requestId}={})` | Accepts the complete `{audioBase64,mimeType?,model?,language?,translate?}` recording for the loaded model and returns `{text,language,duration,segments}`. `audioBase64` transports the original media; the decoder recognizes its actual format. Progress is ordered; control metadata stays outside the request. |
+| `unload()` | Cancels owned loading/transcription, joins decoder/helper work and releases the retained model before resolving its state snapshot. |
+| `close()` | Performs joined unload and disposes state observation. Repeated calls share the closing result. |
+
+The decoder consumes the complete submitted media into native 16 kHz mono PCM
+without changing the caller's recording. The result preserves the engine's
+complete text and segment order. Temporary operation files remain until decoder
+and inference settle. The engine accepts one active recording; overlapping
+requests report `WHISPER_BUSY`, and unavailable/closing/model failures retain
+their explicit diagnostics. Caller cancellation retains its supplied reason.
+
+With `backend: 'auto'`, an eligible accelerated native failure may drain that
+helper and retry the same complete recording and selected model once on the
+prepared CPU backend. Its snapshot is `recovering`, unloaded and busy during
+recovery. Cancellation, malformed input, observer/protocol failure and explicit
+backend selection do not cause that retry. `requestId` is the actual optional
+transport correlation, never a generated replacement or payload field; it
+remains through terminal error settlement and clears or changes on the next
+request/load/unload/close. The [shared speech adapter](native-speech.md) preserves
+only that continuing owned request, while new requests require actual readiness.
+
+### Availability and example
+
+Node on Windows, Linux and macOS with matching native resources; Android needs
+the corresponding host/process adaptation. Prepared files establish resource
+availability, not execution on every platform. This uses an already prepared
+runtime and the application's own temporary directory:
+
+```javascript
+import {createWhisperRuntime} from 'arcane-os/local-ai/whisper';
+import {createSpeechService} from 'arcane-os/core/speech';
+
+const stt = createWhisperRuntime({runtime, modelId: 'whisper-small', temporaryDirectory});
+const speech = createSpeechService({stt});
+// Register speech with the existing Core owner; it owns start/drain/dispose.
+```
+
+## createWhisperRuntime default export
+
+The default binding from `arcane-os/local-ai/whisper` is identical to the named
+[`createWhisperRuntime()`](#createwhisperruntime) factory and has the same inputs,
+members, readiness, cancellation and native-resource requirements.
+
+## buildWhisperHelper()
+
+`buildWhisperHelper({runtime,outputRoot,cmake='cmake',generator,cmakeArgs=[],env,
+signal,onEvent}={})` from `arcane-os/local-ai/whisper/build` builds the first-party
+persistent helper using the installed native toolchain. `runtime.directory`
+selects the prepared libraries and `runtime.sourceDirectory` selects their
+matching headers; `outputRoot` owns build/install output. Optional CMake
+arguments, generator and environment remain caller-selected.
+
+The operation runs configure, Release build and install in order. It returns
+`{platform,architecture,root,executable,runtimeDirectory,diagnostics}`, with
+complete `configure`, `compile` and `install` process results. Cancellation and
+process errors use the existing owned process lifetime. It installs neither a
+toolchain nor a model and performs no inference. Windows helper installation
+includes the selected compiler's redistributable runtime closure. Use a
+toolchain and prepared runtime matching the target platform/architecture; a
+source package alone is not a compiled helper. See the [helper build procedure](local-whisper.md).
+
+## buildWhisperOpenVinoRuntime()
+
+`buildWhisperOpenVinoRuntime({sourceDirectory,openvinoDirectory,cudaDirectory,
+outputRoot,cmake='cmake',generator,cmakeArgs=[],env,signal,onEvent}={})` from
+`arcane-os/local-ai/whisper/openvino-build` produces the optional native Intel
+NPU encoder runtime on Windows x64. This producer uses an already installed
+compatible CMake/MSVC environment, Whisper 1.9.4 source and OpenVINO 2026.3.1
+development tree. Required `sourceDirectory`, `openvinoDirectory` and
+`outputRoot` name those inputs and the producer-owned output. It installs no
+driver, toolchain or model and performs no inference.
+
+The producer copies Whisper source into `outputRoot/source`, applies its
+encoder-failure propagation and stderr diagnostic corrections there, and runs
+CMake configure/build into `outputRoot/build`. The original source stays
+unchanged. It assembles the runtime under `outputRoot/runtime`, retaining
+OpenVINO/NPU, CPU, TBB, import libraries and packaging notices. Optional
+`cudaDirectory` names the matching upstream b5130 CUDA library directory;
+its selected precompiled backend libraries add CUDA alongside CPU. Omission
+produces the NPU-plus-CPU tree. `cmake`, `generator`, `cmakeArgs` and `env`
+configure the existing build environment.
+
+The result is `{version,openvinoVersion,platform,architecture,encoder,backend,
+backends,root,directory,libraryDirectory,sourceDirectory,diagnostics}`.
+`directory` equals `root`; the returned `sourceDirectory` is the copied source.
+`diagnostics` retains complete `configure` and `compile` process results.
+`signal` and `onEvent` use the existing process cancellation and diagnostic
+contract. Missing required strings produce a `TypeError`; an unsupported
+producer host or unmatched source correction reports an error. Filesystem,
+process, cancellation and observer failures remain observable, with partial
+producer output left for its owner.
+
+Build the matching first-party helper separately with `buildWhisperHelper`,
+then retain its complete installed `bin` alongside this runtime. The
+[complete producer example](../guides/native-whisper-openvino.md#produce-the-optional-native-runtime)
+covers that composition. Applications normally select the precompiled asset
+through `encoder: 'openvino-npu'`; they do not run this producer at startup.
+
 ## createSpeechService()
 
 ### Overview and usage

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "arcane-os",
-  "version": "0.64.0",
+  "version": "0.66.0",
   "description": "Arcane OS JavaScript SDK, project-local CLI, browser runtime, and repository-portable application packager.",
   "type": "module",
   "main": "./src/index.mjs",
@@ -59,8 +59,11 @@
     "./core/contracts": "./browser-runtime/core/contracts.mjs",
     "./core/classic-source": "./src/core-classic-source.mjs",
     "./core/runtime": "./src/core/runtime.mjs",
+    "./core/development": "./src/core/development.mjs",
     "./core/stdio": "./src/core/stdio.mjs",
     "./core/host": "./src/core/host.mjs",
+    "./codex/app-server": "./src/codex/app-server.mjs",
+    "./mcp/stdio": "./src/mcp/stdio-server.mjs",
     "./core/repositories": "./src/core/repositories.mjs",
     "./core/packaged-web": "./src/core/services/packaged-web.mjs",
     "./core/preferences": "./src/core/services/preferences.mjs",
@@ -76,6 +79,7 @@
     "./local-ai/image": "./src/local-ai/image-runtime.mjs",
     "./local-ai/whisper": "./src/local-ai/whisper/index.mjs",
     "./local-ai/whisper/build": "./src/local-ai/whisper/build.mjs",
+    "./local-ai/whisper/openvino-build": "./src/local-ai/whisper/openvino-build.mjs",
     "./integrated-provider": "./src/integrated-provider-loader.mjs",
     "./packager": "./src/packager/core.mjs",
     "./release-bundle": "./src/release-bundle.mjs",
@@ -117,7 +121,7 @@
     "test": "npm run test:unit && npm run test:functional && npm run test:integration && npm run test:regression",
     "test:release": "node ./bin/arcane-test.mjs test/npm-release.test.mjs",
     "test:unit": "node ./bin/arcane-test.mjs test/app-descriptor.test.mjs test/app-schema.test.mjs test/app-selection.test.mjs test/contracts.test.mjs test/conversation-closing-report.test.mjs test/doctor.test.mjs test/mail-credentials.test.mjs test/mail-outbox.test.mjs test/mail-public-api.test.mjs test/mail-send.test.mjs test/mail-transport.test.mjs test/native-windows-icon.test.mjs test/targets.test.mjs test/workspace-operation-lock.test.mjs",
-    "test:functional": "node ./bin/arcane-test.mjs test/ai-request-model.test.mjs test/ai-request-retry.test.mjs test/ai-stream-cancellation.test.mjs test/browser-decisions.test.mjs test/browser-speech-providers.test.mjs test/browser-wasm-gpu-notice.test.mjs test/browser-wasm-download-resume.test.mjs test/chat-input.test.mjs test/chat-stream-speech.test.mjs test/chat-transcript-scroll.test.mjs test/chat-transient-retention.test.mjs test/cli.test.mjs test/continuous-voice-capture.test.mjs test/core-classic-source.test.mjs test/core-client.test.mjs test/core-host.test.mjs test/core-packaged-web.test.mjs test/core-runtime.test.mjs test/core-stdio.test.mjs test/dbopfs-document-library.test.mjs test/dbopfs-png.test.mjs test/dbopfs.test.mjs test/dev-server.test.mjs test/dev-pwa.test.mjs test/dom-event-instrumentation.test.mjs test/event-manager.test.mjs test/events.test.mjs test/file-preview.test.mjs test/import-map.test.mjs test/local-image-editing.test.mjs test/mail-cli.test.mjs test/mail-runtime.test.mjs test/mail-server.test.mjs test/markdown-editor.test.mjs test/markdown-media.test.mjs test/markdown-source-map.test.mjs test/modal.test.mjs test/native-module-packaging.test.mjs test/native-module-resource-references.test.mjs test/packaging.test.mjs test/pwa-packaging.test.mjs test/pwa-client.test.mjs test/pwa-install.test.mjs test/pwa-worker.test.mjs test/persistent-ai-chat-session.test.mjs test/reference-completeness.test.mjs test/rendered-print.test.mjs test/runtime-api-behavior.test.mjs test/runtime.test.mjs test/scaffold.test.mjs test/speech-playback.test.mjs test/site.test.mjs test/theme-manager.test.mjs test/twin-cloud-images.test.mjs test/twin-cloud.test.mjs test/websocket-client-import-map.test.mjs test/websocket.test.mjs test/update-check.test.mjs test/user-explicit-updates.test.mjs",
+    "test:functional": "node ./bin/arcane-test.mjs test/ai-ollama-readiness.test.mjs test/core-ollama-lifecycle.test.mjs test/ai-request-model.test.mjs test/ai-request-retry.test.mjs test/ai-stream-cancellation.test.mjs test/browser-decisions.test.mjs test/browser-speech-providers.test.mjs test/browser-wasm-gpu-notice.test.mjs test/browser-wasm-download-resume.test.mjs test/chat-input.test.mjs test/chat-stream-speech.test.mjs test/chat-transcript-scroll.test.mjs test/chat-transient-retention.test.mjs test/cli.test.mjs test/continuous-voice-capture.test.mjs test/codex-app-server.test.mjs test/mcp-stdio-server.test.mjs test/core-classic-source.test.mjs test/core-client.test.mjs test/core-client-installation.test.mjs test/core-development.test.mjs test/core-host.test.mjs test/core-packaged-web.test.mjs test/core-runtime.test.mjs test/core-stdio.test.mjs test/dbopfs-document-library.test.mjs test/dbopfs-png.test.mjs test/dbopfs.test.mjs test/dev-server.test.mjs test/dev-pwa.test.mjs test/dom-event-instrumentation.test.mjs test/event-manager.test.mjs test/events.test.mjs test/file-preview.test.mjs test/import-map.test.mjs test/local-image-editing.test.mjs test/mail-cli.test.mjs test/mail-runtime.test.mjs test/mail-server.test.mjs test/markdown-editor.test.mjs test/markdown-media.test.mjs test/markdown-source-map.test.mjs test/modal.test.mjs test/native-module-packaging.test.mjs test/native-module-resource-references.test.mjs test/packaging.test.mjs test/pwa-packaging.test.mjs test/pwa-client.test.mjs test/pwa-install.test.mjs test/pwa-worker.test.mjs test/persistent-ai-chat-session.test.mjs test/reference-completeness.test.mjs test/rendered-print.test.mjs test/runtime-api-behavior.test.mjs test/runtime.test.mjs test/scaffold.test.mjs test/speech-playback.test.mjs test/site.test.mjs test/theme-manager.test.mjs test/twin-cloud-images.test.mjs test/twin-cloud.test.mjs test/websocket-client-import-map.test.mjs test/websocket.test.mjs test/update-check.test.mjs test/user-explicit-updates.test.mjs",
     "test:integration": "node ./bin/arcane-test.mjs test/installed-package-runtime.test.mjs test/root-app-layout.test.mjs test/integrated-shared.test.mjs test/integrated-workspace.test.mjs test/mail-browser.test.mjs test/native-macos-provider.test.mjs test/native-plan.test.mjs test/native-portable-provider.test.mjs test/native-provider-loader.test.mjs test/npm-release.test.mjs test/release-bundle.test.mjs test/release-capability-smoke.test.mjs test/shared-payload-batch.test.mjs test/tarball.test.mjs test/browser-wasm-cpu.test.mjs test/wllama-webgpu-runtime.test.mjs",
     "test:regression": "node ./bin/arcane-test.mjs test/channel-workflows.test.mjs test/html-import-registration.test.mjs test/html-import-packaged-script.test.mjs test/logging-regression.test.mjs test/markdown-speech.test.mjs test/prepared-speech.test.mjs test/native-provider-generation.test.mjs test/speech-queue-regression.test.mjs test/testing.test.mjs test/test-sets.test.mjs",
     "check": "node tools/check-source.mjs && npm test",