arcane-os 0.65.0 → 0.67.0

package/docs/reference/sdk-api.md

@@ -60,7 +60,7 @@ runtime layouts.
 | `arcane-os/core/host` | Node-only reusable Core host lifecycle with explicitly supplied services. |
 | `arcane-os/codex/app-server` | Explicit native Codex App Server session, complete live turns, server requests and recovery. |
 | `arcane-os/mcp/stdio` | Node MCP STDIO server for app-owned tools and static resources. |
-| `arcane-os/core/repositories` | Native persistent ArcaneData paths and explicitly selected connected working repositories. |
+| `arcane-os/core/repositories` | Native persistent ArcaneData paths, connected working repositories and scoped non-secret Git identity configuration. |
 | `arcane-os/core/packaged-web` | Core-owned packaged web listener with a persisted loopback origin and ready/failure events. |
 | `arcane-os/core/preferences` | Existing preference RPC methods with an application-selected file, ordered writes and owned drain. |
 | `arcane-os/core/diarization` | Lazy native speaker-diarization service, explicit stream methods and lifecycle/result events. |
@@ -74,6 +74,9 @@ runtime layouts.
 | `arcane-os/ai/core-image` | Browser image lifecycle and complete PNG Blobs through an available Core service. |
 | `arcane-os/core/image` | Native image Core service with independent runtime preparation and retained model ownership. |
 | `arcane-os/core/speech` | Independent injected STT/TTS engine loading, request cancellation and joined Core service lifetime. |
+| `arcane-os/local-ai/whisper` | Retained native Whisper model, complete recordings and joined helper lifetime. |
+| `arcane-os/local-ai/whisper/build` | First-party persistent helper build against selected installed Whisper headers and libraries. |
+| `arcane-os/local-ai/whisper/openvino-build` | Optional Windows x64 Intel NPU encoder runtime producer using selected installed sources and toolchain. |
 | `arcane-os/ai/core-model-assets` | Complete stored browser model members projected through Core into native working files. |
 | `arcane-os/core/model-assets` | Native working-file preparation, engine retain handles and joined cleanup. |
 | `arcane-os/integrated-provider` | Fixed integrated shared-development provider. |
@@ -105,7 +108,7 @@ runtime layouts.
 | `arcane-os/pwa` | Nonblocking PWA registration, worker updates, native installation state and a dismissible installation component. |
 | `arcane-os/ai/browser-wasm` | Caller-selected browser-local Wllama inference, complete DBOPFS model storage, streaming, cancellation, and structural tool-call results. |
 | `arcane-os/ai/core-local` | Browser llama.cpp provider through an available Core connection; browser-local Wllama and ONNX remain independently available. |
-| `arcane-os/ai/browser-decisions` | Explicit-load Laya FP16 and Julia-1 FP32 typed decisions through the shared Transformers.js Worker owner. |
+| `arcane-os/ai/browser-decisions` | Explicit-load Laya and Julia-1 typed decisions with caller-selected precision through the shared Transformers.js Worker owner. |
 | `arcane-os/ai/tool-text-stream` | Shared selected tool-argument text observer for provider integration. |
 | `arcane-os/ai/twin-cloud` | Stateless chat, System One state/questions and image generation with explicit key/model, complete results and operation-specific retry/cancellation. |
 | `arcane-os/ai/browser-speech` | Caller-selected Whisper/Kokoro, native browser recognition/synthesis, cloud TTS, upstream assets, role lifecycle and cancellation. |
@@ -405,6 +408,7 @@ The remaining data-only subpaths are eight JSON Schemas and package metadata.
 | `readCoreLaunchContext()` | function | `arcane-os/core/host` | Native Core host composition | Node; reads explicitly selected launch JSON |
 | `resolveArcaneDataPaths()` | function | `arcane-os/core/repositories` | Native repository workspaces | Node on Windows, Linux and macOS; Android supplies its data root |
 | `createRepositoryWorkspace()` | function | `arcane-os/core/repositories` | Native repository workspaces | Node with Git; Android requires host process adaptation |
+| `readGitIdentity()` | function | `arcane-os/core/repositories` | Native repository workspaces | Node with Git; Android requires host process adaptation |
 | `createWindowsNativeProvider()` | function | `arcane-os/native/windows-provider` | Windows native provider | Node assembly; Windows x64/WebView2 execution |
 | `arcaneNativeBuilderProvider` | singleton | `arcane-os/native/windows-provider` | Windows native provider | Node assembly; Windows x64/WebView2 execution |
 | `arcaneNativeBuilderProvider default export` | singleton | `arcane-os/native/windows-provider` | Windows native provider | Node assembly; Windows x64/WebView2 execution |
@@ -430,6 +434,7 @@ The remaining data-only subpaths are eight JSON Schemas and package metadata.
 | `createWhisperRuntime()` | function | `arcane-os/local-ai/whisper` | Core native speech | Node with a prepared matching helper, runtime, decoder and selected model |
 | `createWhisperRuntime default export` | function | `arcane-os/local-ai/whisper` | Core native speech | Same retained native engine factory |
 | `buildWhisperHelper()` | function | `arcane-os/local-ai/whisper/build` | Core native speech | Node with installed CMake/C++17 toolchain and matching Whisper source/runtime |
+| `buildWhisperOpenVinoRuntime()` | function | `arcane-os/local-ai/whisper/openvino-build` | Core native speech | Windows x64 Node with installed matching Whisper/OpenVINO sources and CMake/MSVC toolchain |
 | `createSpeechService default export` | function | `arcane-os/core/speech` | Core native speech | Same shared speech service factory |
 | `prepareCoreModelAssets()` | function | `arcane-os/ai/core-model-assets` | Core model assets | Browser with complete Blob/File members and available Core service |
 | `createModelAssetService()` | function | `arcane-os/core/model-assets` | Core model assets | Node Core with an application-selected working directory |
@@ -3737,11 +3742,19 @@ Runs one fast-forward-only pull after proving the selected repository worktree i
 ### Signature and result
 
 ```text
-async repositoryPull({ workspaceRoot=process.cwd(), signal, onEvent, run=runProcess }={})
+async repositoryPull({ workspaceRoot=process.cwd(), target, signal, onEvent, run=runProcess }={})
 ```
 
 Import it from `arcane-os`. The signature above states whether settlement is synchronous or promise-based. The overview and owning group define result authority, side effects, callbacks, events, cancellation, and lifecycle.
 
+Optional `target:{remote,ref}` captures exact nonempty native-representable
+strings before any wait and selects `git pull --ff-only -- <remote> <ref>:`.
+The current clean branch receives a fast-forward-only integration; the SDK
+never switches branches, resets or changes configuration. Without a target,
+the existing configured pull and result remain unchanged. Targeted results
+add `target`, complete `stdout` and `stderr` to the existing pull result.
+See [checkout configuration and selected targets](core-repositories.md#existing-checkout-configuration-and-selected-targets).
+
 ### Availability and normalization
 
 **Node; network-assisted Git.** SDK-normalized inputs, errors, events, and documented result. Deep protocol: [Node ESM](protocols.md).
@@ -3765,7 +3778,7 @@ Pushes the selected attached branch through the repository's configured remote a
 ### Signature, parameters, and result
 
 ```text
-async repositoryPush({ workspaceRoot=process.cwd(), signal, onEvent, run=runProcess }={})
+async repositoryPush({ workspaceRoot=process.cwd(), target, signal, onEvent, run=runProcess }={})
 ```
 
 Import it from `arcane-os`. `workspaceRoot` selects the Git worktree. `signal`
@@ -3776,10 +3789,16 @@ should keep the default.
 
 Before pushing, the SDK runs `git rev-parse --show-toplevel`,
 `git branch --show-current`, and `git status --short --branch` in order. It rejects a
-detached HEAD, then runs plain `git push`; the repository's current branch,
+detached HEAD, then, without `target`, runs plain `git push`; the repository's current branch,
 configured upstream/remote, Git credentials, hooks, and server policy remain
 authoritative. Unlike `repositoryPull()`, this function does **not** require a
-clean worktree. It does not create a commit or select a remote/refspec for you.
+clean worktree. It does not create a commit or choose an application destination.
+Optional `target:{remote,ref}` captures the original nonempty
+native-representable strings before any wait and runs
+`git push --no-follow-tags -- <remote> HEAD:<ref>`. This publishes current HEAD
+to the caller-selected ref without force or implicit configured tag following.
+It changes no branch or Git configuration; credentials, URL interpretation,
+hooks and remote rejection remain Git-owned.
 
 The promise resolves to
 `{action:'push', repositoryRoot, branch, output}`. `output` is trimmed stdout,
@@ -3787,6 +3806,9 @@ or trimmed stderr when stdout is empty. A missing Git executable, failed status
 probe, rejected/nonzero push, cancellation, or event-callback failure rejects
 with the normalized process error. Cancellation stops the local process tree;
 it cannot prove that a remote accepted no objects before the interruption.
+Targeted results also contain the captured `target` and complete
+`stdout`/`stderr`; omitting the target preserves the existing result shape.
+See [checkout configuration and selected targets](core-repositories.md#existing-checkout-configuration-and-selected-targets).
 
 ### Availability and normalization
 
@@ -5209,7 +5231,7 @@ a dedicated bare Git cache. It does not create or alter a working checkout.
 ### Signature, lifecycle, and result
 
 ```text
-createGitTextSnapshot({cacheDirectory,remote,ref,selectPath,onEvent,run=runProcess}={})
+createGitTextSnapshot({cacheDirectory,remote,ref,selectPath,gitIdentity,onEvent,run=runProcess}={})
 ```
 
 Import from `arcane-os`. The application owns the cache location, remote, ref,
@@ -5221,6 +5243,11 @@ await accepted refresh/process cleanup. Errors remain observable instead of
 returning stale or partial success. See [Git text snapshots](git-text-snapshot.md)
 for complete inputs, text semantics, errors, events and Core service composition.
 
+Optional `gitIdentity:{name?,email?,username?}` captures a child-process-only
+selection for init/fetch and subsequent Git commands, preserving shared refresh
+cancellation and complete content. See [Git identity configuration](core-repositories.md#git-identity-configuration)
+for author precedence, scoped defaults and credential username semantics.
+
 ### Example
 
 ```js
@@ -7881,18 +7908,42 @@ explicit existing path. The application owns the remote, branch and Core API.
 ### Signature and result
 
 ```text
-createRepositoryWorkspace({name,directory,dataRoot,remote,branch,onEvent,run=runProcess}={})
+createRepositoryWorkspace({name,directory,dataRoot,remote,branch,gitIdentity,onEvent,run=runProcess}={})
 ```
 
-Returns `{directory,open,status,pull,push,write,close,drain,dispose}`. Construction does
-no I/O. Operations accept `{signal}`; a missing or empty destination clones once,
+Returns `{directory,open,status,configuration,pull,push,write,close,drain,dispose}`. Construction does
+no I/O. Preparing operations accept `{signal}`; a missing or empty destination clones once,
 while existing checkout files, branches, remotes and local changes remain intact.
 Same-directory calls are ordered within the process. Shutdown drains accepted
 work and preserves the checkout. No CLI cwd, launch state, preference, snapshot
 cache or existing user-data location changes. See the [complete inputs, results,
 errors and lifecycle](core-repositories.md#one-connected-working-checkout).
 
-`write({files:[{path,content}],message,signal})` snapshots the exact selected
+Optional `gitIdentity:{name?,email?,username?}` captures explicit non-secret
+settings for child Git operations without writing global/local configuration.
+Selected author fields override inherited child author/committer fields;
+omitted fields remain inherited. Username remains a credential hint, with
+authentication owned by ordinary Git and its configured helper.
+
+`configuration({signal})` observes an existing working root without clone,
+initialization or fetch. It returns `{repositoryRoot,headRef,origin,upstream}`:
+full symbolic HEAD (including unborn, null when detached), origin URL/pushURL
+arrays and current branch remote/merge/URL/pushURL arrays. Unset, empty and
+repeated configuration values remain distinct. These are ordinary configured
+values, not authentication or endpoint proof, and are not atomic with later
+operations. Raw stdout is decoded without replacement; unrepresentable text
+reports `ARCANE_GIT_CONFIGURATION_NOT_TEXT` with full diagnostics.
+
+`pull({target,signal})`, `push({target,signal})` and
+`write({files:[{path,content}],message,target,signal})` accept optional
+`target:{remote,ref}`, captured as original strings at acceptance. The target
+selects a fast-forward-only pull into the current branch or a non-force push
+of current HEAD to the selected ref, without switching branches or changing
+configuration. It is independent of initial-clone `remote`/`branch`; omission
+preserves ordinary configured behavior. See the [complete configuration and
+target contract](core-repositories.md#existing-checkout-configuration-and-selected-targets).
+
+`write` snapshots the exact selected
 strings, writes those repository-relative files, commits only their literal
 paths and performs an ordinary non-force push. It retains unrelated staged
 paths and existing Git filters/hooks. Results and causal failures distinguish
@@ -7911,6 +7962,45 @@ await repository.open({signal});
 await repository.close();
 ```
 
+## readGitIdentity()
+
+### Overview
+
+Reads non-secret global, repository-local and effective Git configuration
+without changing files or querying credentials.
+
+### Signature and result
+
+```text
+readGitIdentity({directory,signal,onEvent,run=runProcess}={})
+```
+
+Import from `arcane-os/core/repositories`. Returns a promise for
+`{global,local,effective}`, each observed scope containing `{name,email,githubUser}`.
+Fields preserve complete UTF-8 strings, including empty values, leading U+FEFF
+and newlines; unset fields are `null`. Git values outside UTF-8 fail with
+`ARCANE_GIT_IDENTITY_NOT_TEXT` instead of replacement characters.
+With no directory, only global configuration is read and local/effective
+are `null`. Existing repository directories, including bare caches, select the
+context for all three observations. Configured includes and ordinary Git
+precedence remain in effect. These are config observations, not authenticated
+accounts or environment-resolved commit identities.
+
+Independent scope queries run concurrently and join cleanup before settlement.
+Raw stdout is parser-owned rather than emitted as text events; an injected
+`run` must honor the existing raw-output process contract. Lifecycle and stderr
+events retain their ordinary route. Errors preserve their original object,
+code, cause and process diagnostics, with complete captured output added as
+`rawStdout` (a Buffer). The raw-mode process result retains `stdout:null`.
+If that property already exists or cannot be attached, a wrapper retains the
+original as `cause`, its code/details/exit code and this observation's raw
+output; original causal failures remain on the cause. An attachment exception
+is retained as `attachmentError`. Existing property values remain untouched.
+Decoding failures include their cause, complete process details and raw output.
+Already-represented observer errors appear once; separate failures use
+`AggregateError`. See the [complete contract and
+per-process selection example](core-repositories.md#git-identity-configuration).
+
 ## createCoreLocalAIProvider()
 
 ### Overview
@@ -8141,7 +8231,7 @@ Whisper backend libraries, decoder and model files; see the complete
 
 | Member | Contract |
 | --- | --- |
-| `current()` | Returns `providerId`, `modelId`, `state`, `loaded`, `busy`, `requestId`, `requestedBackend`, `observedBackend`, `backendEvidence` and `error`. State reports actual helper/model readiness. |
+| `current()` | Returns `providerId`, `modelId`, `state`, `loaded`, `busy`, `requestId`, `requestedBackend`, `observedBackend`, `backendEvidence`, `requestedEncoder`, `observedEncoder`, `encoderEvidence` and `error`. State reports actual helper/model readiness; encoder and decoder initialization evidence remain separate. |
 | `subscribe(listener,{replay=true,signal}={})` | Observes the current snapshot immediately by default, then each state change; returns the unsubscribe closure. |
 | `load({modelId,signal}={})` | Prepares the selected runtime if necessary and retains its initialized helper/model. Same-model loading is shared; replacement remains explicit. |
 | `transcribe(request,{signal,onProgress,requestId}={})` | Accepts the complete `{audioBase64,mimeType?,model?,language?,translate?}` recording for the loaded model and returns `{text,language,duration,segments}`. `audioBase64` transports the original media; the decoder recognizes its actual format. Progress is ordered; control metadata stays outside the request. |
@@ -8205,6 +8295,43 @@ includes the selected compiler's redistributable runtime closure. Use a
 toolchain and prepared runtime matching the target platform/architecture; a
 source package alone is not a compiled helper. See the [helper build procedure](local-whisper.md).
 
+## buildWhisperOpenVinoRuntime()
+
+`buildWhisperOpenVinoRuntime({sourceDirectory,openvinoDirectory,cudaDirectory,
+outputRoot,cmake='cmake',generator,cmakeArgs=[],env,signal,onEvent}={})` from
+`arcane-os/local-ai/whisper/openvino-build` produces the optional native Intel
+NPU encoder runtime on Windows x64. This producer uses an already installed
+compatible CMake/MSVC environment, Whisper 1.9.4 source and OpenVINO 2026.3.1
+development tree. Required `sourceDirectory`, `openvinoDirectory` and
+`outputRoot` name those inputs and the producer-owned output. It installs no
+driver, toolchain or model and performs no inference.
+
+The producer copies Whisper source into `outputRoot/source`, applies its
+encoder-failure propagation and stderr diagnostic corrections there, and runs
+CMake configure/build into `outputRoot/build`. The original source stays
+unchanged. It assembles the runtime under `outputRoot/runtime`, retaining
+OpenVINO/NPU, CPU, TBB, import libraries and packaging notices. Optional
+`cudaDirectory` names the matching upstream b5130 CUDA library directory;
+its selected precompiled backend libraries add CUDA alongside CPU. Omission
+produces the NPU-plus-CPU tree. `cmake`, `generator`, `cmakeArgs` and `env`
+configure the existing build environment.
+
+The result is `{version,openvinoVersion,platform,architecture,encoder,backend,
+backends,root,directory,libraryDirectory,sourceDirectory,diagnostics}`.
+`directory` equals `root`; the returned `sourceDirectory` is the copied source.
+`diagnostics` retains complete `configure` and `compile` process results.
+`signal` and `onEvent` use the existing process cancellation and diagnostic
+contract. Missing required strings produce a `TypeError`; an unsupported
+producer host or unmatched source correction reports an error. Filesystem,
+process, cancellation and observer failures remain observable, with partial
+producer output left for its owner.
+
+Build the matching first-party helper separately with `buildWhisperHelper`,
+then retain its complete installed `bin` alongside this runtime. The
+[complete producer example](../guides/native-whisper-openvino.md#produce-the-optional-native-runtime)
+covers that composition. Applications normally select the precompiled asset
+through `encoder: 'openvino-npu'`; they do not run this producer at startup.
+
 ## createSpeechService()
 
 ### Overview and usage
@@ -8983,14 +9110,19 @@ native installation eligibility and URL-bar promotion.
 
 ### Overview
 
-Creates an explicitly loaded browser model for Laya typed decisions in FP16 or
-Julia-1 in FP32. The shared Worker owns Transformers.js loading, full-input
+Creates an explicitly loaded browser model for Laya typed decisions or
+Julia-1. Laya defaults to FP16 and Julia to FP32; callers may select `dtype`
+explicitly. The shared Worker owns Transformers.js loading, full-input
 encoding, batched inference, complete results, cancellation and resource lifetime.
 Applications own model selection, questions, option meanings and decision policy.
 Existing chat and speech providers are unchanged.
 
 ### Signature and result
 
+```text
+createBrowserDecisionModel({family,model,revision,device,dtype,runtime}={})
+```
+
 ```js
 import {createBrowserDecisionModel} from 'arcane-os/ai/browser-decisions';
 
@@ -9015,8 +9147,11 @@ precision, tokenization, output meanings, lifecycle and model limitations.
 ### Availability and normalization
 
 Browser module Workers plus the selected Transformers.js backend are required
-on explicit use. Import and construction do not activate a model. Laya fixes
-`dtype: 'fp16'`; Julia fixes `dtype: 'fp32'`; there is no precision fallback.
+on explicit use. Import and construction do not activate a model. The optional
+nonempty `dtype` string defaults to `fp16` for Laya and `fp32` for Julia. An
+explicit value is forwarded unchanged to the upstream loader; unsupported
+selections report its failure without precision fallback. For Laya FP32, pass
+`dtype: 'fp32'`.
 Cancellation terminates that client's Worker and rejects its in-flight work.
 No decisions are inserted into chat history or durable storage.
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "arcane-os",
-  "version": "0.65.0",
+  "version": "0.67.0",
   "description": "Arcane OS JavaScript SDK, project-local CLI, browser runtime, and repository-portable application packager.",
   "type": "module",
   "main": "./src/index.mjs",
@@ -69,6 +69,7 @@
     "./core/preferences": "./src/core/services/preferences.mjs",
     "./core/diarization": "./src/diarization/service.mjs",
     "./core/local-ai": "./src/core/services/local-ai.mjs",
+    "./core/decisions": "./src/core/services/decisions.mjs",
     "./core/image": "./src/core/services/image.mjs",
     "./core/speech": "./src/core/services/speech.mjs",
     "./core/model-assets": "./src/core/services/model-assets.mjs",
@@ -76,6 +77,7 @@
     "./diarization/build": "./src/diarization/build.mjs",
     "./local-ai": "./src/local-ai/install.mjs",
     "./local-ai/onnx": "./src/local-ai/onnx.mjs",
+    "./local-ai/decisions": "./src/local-ai/decisions.mjs",
     "./local-ai/image": "./src/local-ai/image-runtime.mjs",
     "./local-ai/whisper": "./src/local-ai/whisper/index.mjs",
     "./local-ai/whisper/build": "./src/local-ai/whisper/build.mjs",
@@ -121,7 +123,7 @@
     "test": "npm run test:unit && npm run test:functional && npm run test:integration && npm run test:regression",
     "test:release": "node ./bin/arcane-test.mjs test/npm-release.test.mjs",
     "test:unit": "node ./bin/arcane-test.mjs test/app-descriptor.test.mjs test/app-schema.test.mjs test/app-selection.test.mjs test/contracts.test.mjs test/conversation-closing-report.test.mjs test/doctor.test.mjs test/mail-credentials.test.mjs test/mail-outbox.test.mjs test/mail-public-api.test.mjs test/mail-send.test.mjs test/mail-transport.test.mjs test/native-windows-icon.test.mjs test/targets.test.mjs test/workspace-operation-lock.test.mjs",
-    "test:functional": "node ./bin/arcane-test.mjs test/ai-ollama-readiness.test.mjs test/core-ollama-lifecycle.test.mjs test/ai-request-model.test.mjs test/ai-request-retry.test.mjs test/ai-stream-cancellation.test.mjs test/browser-decisions.test.mjs test/browser-speech-providers.test.mjs test/browser-wasm-gpu-notice.test.mjs test/browser-wasm-download-resume.test.mjs test/chat-input.test.mjs test/chat-stream-speech.test.mjs test/chat-transcript-scroll.test.mjs test/chat-transient-retention.test.mjs test/cli.test.mjs test/continuous-voice-capture.test.mjs test/codex-app-server.test.mjs test/mcp-stdio-server.test.mjs test/core-classic-source.test.mjs test/core-client.test.mjs test/core-client-installation.test.mjs test/core-development.test.mjs test/core-host.test.mjs test/core-packaged-web.test.mjs test/core-runtime.test.mjs test/core-stdio.test.mjs test/dbopfs-document-library.test.mjs test/dbopfs-png.test.mjs test/dbopfs.test.mjs test/dev-server.test.mjs test/dev-pwa.test.mjs test/dom-event-instrumentation.test.mjs test/event-manager.test.mjs test/events.test.mjs test/file-preview.test.mjs test/import-map.test.mjs test/local-image-editing.test.mjs test/mail-cli.test.mjs test/mail-runtime.test.mjs test/mail-server.test.mjs test/markdown-editor.test.mjs test/markdown-media.test.mjs test/markdown-source-map.test.mjs test/modal.test.mjs test/native-module-packaging.test.mjs test/native-module-resource-references.test.mjs test/packaging.test.mjs test/pwa-packaging.test.mjs test/pwa-client.test.mjs test/pwa-install.test.mjs test/pwa-worker.test.mjs test/persistent-ai-chat-session.test.mjs test/reference-completeness.test.mjs test/rendered-print.test.mjs test/runtime-api-behavior.test.mjs test/runtime.test.mjs test/scaffold.test.mjs test/speech-playback.test.mjs test/site.test.mjs test/theme-manager.test.mjs test/twin-cloud-images.test.mjs test/twin-cloud.test.mjs test/websocket-client-import-map.test.mjs test/websocket.test.mjs test/update-check.test.mjs test/user-explicit-updates.test.mjs",
+    "test:functional": "node ./bin/arcane-test.mjs test/ai-ollama-readiness.test.mjs test/core-ollama-lifecycle.test.mjs test/ai-request-model.test.mjs test/ai-request-retry.test.mjs test/ai-stream-cancellation.test.mjs test/browser-decisions.test.mjs test/browser-speech-providers.test.mjs test/browser-wasm-gpu-notice.test.mjs test/browser-wasm-download-resume.test.mjs test/chat-input.test.mjs test/chat-stream-speech.test.mjs test/chat-transcript-scroll.test.mjs test/chat-transient-retention.test.mjs test/cli.test.mjs test/continuous-voice-capture.test.mjs test/codex-app-server.test.mjs test/mcp-stdio-server.test.mjs test/core-classic-source.test.mjs test/core-client.test.mjs test/core-client-installation.test.mjs test/core-ai-installation.test.mjs test/core-llama-lifecycle.test.mjs test/core-development.test.mjs test/core-host.test.mjs test/core-model-assets.test.mjs test/core-native-services.test.mjs test/core-packaged-web.test.mjs test/core-runtime.test.mjs test/core-stdio.test.mjs test/dbopfs-document-library.test.mjs test/dbopfs-png.test.mjs test/dbopfs.test.mjs test/dev-server.test.mjs test/dev-pwa.test.mjs test/dom-event-instrumentation.test.mjs test/event-manager.test.mjs test/events.test.mjs test/file-preview.test.mjs test/import-map.test.mjs test/local-image-editing.test.mjs test/mail-cli.test.mjs test/mail-runtime.test.mjs test/mail-server.test.mjs test/markdown-editor.test.mjs test/markdown-media.test.mjs test/markdown-source-map.test.mjs test/modal.test.mjs test/native-decisions.test.mjs test/native-onnx.test.mjs test/native-module-packaging.test.mjs test/native-module-resource-references.test.mjs test/packaging.test.mjs test/pwa-packaging.test.mjs test/pwa-client.test.mjs test/pwa-install.test.mjs test/pwa-worker.test.mjs test/persistent-ai-chat-session.test.mjs test/reference-completeness.test.mjs test/rendered-print.test.mjs test/runtime-api-behavior.test.mjs test/runtime.test.mjs test/scaffold.test.mjs test/speech-playback.test.mjs test/site.test.mjs test/theme-manager.test.mjs test/twin-cloud-images.test.mjs test/twin-cloud.test.mjs test/websocket-client-import-map.test.mjs test/websocket.test.mjs test/update-check.test.mjs test/user-explicit-updates.test.mjs",
     "test:integration": "node ./bin/arcane-test.mjs test/installed-package-runtime.test.mjs test/root-app-layout.test.mjs test/integrated-shared.test.mjs test/integrated-workspace.test.mjs test/mail-browser.test.mjs test/native-macos-provider.test.mjs test/native-plan.test.mjs test/native-portable-provider.test.mjs test/native-provider-loader.test.mjs test/npm-release.test.mjs test/release-bundle.test.mjs test/release-capability-smoke.test.mjs test/shared-payload-batch.test.mjs test/tarball.test.mjs test/browser-wasm-cpu.test.mjs test/wllama-webgpu-runtime.test.mjs",
     "test:regression": "node ./bin/arcane-test.mjs test/channel-workflows.test.mjs test/html-import-registration.test.mjs test/html-import-packaged-script.test.mjs test/logging-regression.test.mjs test/markdown-speech.test.mjs test/prepared-speech.test.mjs test/native-provider-generation.test.mjs test/speech-queue-regression.test.mjs test/testing.test.mjs test/test-sets.test.mjs",
     "check": "node tools/check-source.mjs && npm test",
@@ -158,6 +160,7 @@
     "tag": "latest"
   },
   "dependencies": {
+    "@huggingface/tokenizers": "0.2.0",
     "event-pubsub": "6.1.1",
     "js-queue": "3.1.1",
     "node-http-server": "10.0.0",

package/src/core/repositories.mjs

@@ -4,7 +4,11 @@ import path from 'node:path';
 import Is from 'strong-type';
 import {ArcaneError, throwIfAborted} from '../errors.mjs';
 import {runProcess} from '../process.mjs';
-import {repositoryPull, repositoryPush, repositoryStatus} from '../repository.mjs';
+import {captureRepositoryTarget, repositoryConfiguration, repositoryPull, repositoryPush,
+    repositoryPushArguments, repositoryStatus} from '../repository.mjs';
+import {createGitIdentityRunner} from '../git-identity.mjs';
+
+export {readGitIdentity} from '../git-identity.mjs';
 
 const is = new Is(false);
 const directoryOperations = new Map();
@@ -41,7 +45,7 @@ export function resolveArcaneDataPaths({dataRoot} = {}) {
 
 /** One connected checkout, composed into an application's own Core service. */
 export function createRepositoryWorkspace(
-    {name, directory, dataRoot, remote, branch, onEvent, run = runProcess} = {}
+    {name, directory, dataRoot, remote, branch, gitIdentity, onEvent, run = runProcess} = {}
 ) {
     let selected = directory;
     if (selected === undefined) {
@@ -55,12 +59,13 @@ export function createRepositoryWorkspace(
     if (remote !== undefined) requireString(remote, 'remote');
     if (branch !== undefined) requireString(branch, 'branch');
     if (!is.function(run)) throw new TypeError('run must implement the SDK process adapter.');
+    const execute = createGitIdentityRunner(run, gitIdentity);
     const repositoryDirectory = path.resolve(selected);
     const pending = new Set();
     let opened = false;
     let closing = null;
 
-    async function prepare(signal, execute = run) {
+    async function prepare(signal, prepareRun = execute) {
         throwIfAborted(signal);
         if (opened) return {directory: repositoryDirectory, cloned: false};
         let entries;
@@ -74,7 +79,7 @@ export function createRepositoryWorkspace(
         if (entries.length) {
             // A parent checkout or a bare object cache is not this connection's
             // working root. Inspection never changes an existing destination.
-            const result = await execute(
+            const result = await prepareRun(
                 'git',
                 ['rev-parse', '--is-inside-work-tree', '--show-prefix'],
                 {cwd: repositoryDirectory, signal, onEvent}
@@ -97,7 +102,7 @@ export function createRepositoryWorkspace(
         const arguments_ = ['clone', '--progress'];
         if (branch !== undefined) arguments_.push('--branch', branch);
         arguments_.push('--', remote, repositoryDirectory);
-        const result = await execute(
+        const result = await prepareRun(
             'git',
             arguments_,
             {cwd: path.dirname(repositoryDirectory), signal, onEvent}
@@ -142,35 +147,52 @@ export function createRepositoryWorkspace(
         return accept(
             async function readRepositoryStatus() {
                 await prepare(signal);
-                return repositoryStatus({workspaceRoot: repositoryDirectory, signal, onEvent, run});
+                return repositoryStatus({workspaceRoot: repositoryDirectory, signal, onEvent, run: execute});
+            },
+            signal
+        );
+    }
+
+    function configuration({signal} = {}) {
+        return accept(
+            function readRepositoryConfiguration() {
+                return repositoryConfiguration({workspaceRoot: repositoryDirectory, signal, onEvent, run: execute});
             },
             signal
         );
     }
 
-    function pull({signal} = {}) {
+    function pull({target, signal} = {}) {
+        let selectedTarget;
+        try { selectedTarget = captureRepositoryTarget(target); }
+        catch (error) { return Promise.reject(error); }
         return accept(
             async function pullRepository() {
                 await prepare(signal);
-                return repositoryPull({workspaceRoot: repositoryDirectory, signal, onEvent, run});
+                return repositoryPull({workspaceRoot: repositoryDirectory, target: selectedTarget, signal, onEvent, run: execute});
             },
             signal
         );
     }
 
-    function push({signal} = {}) {
+    function push({target, signal} = {}) {
+        let selectedTarget;
+        try { selectedTarget = captureRepositoryTarget(target); }
+        catch (error) { return Promise.reject(error); }
         return accept(
             async function pushRepository() {
                 await prepare(signal);
-                return repositoryPush({workspaceRoot: repositoryDirectory, signal, onEvent, run});
+                return repositoryPush({workspaceRoot: repositoryDirectory, target: selectedTarget, signal, onEvent, run: execute});
             },
             signal
         );
     }
 
-    function write({files, message, signal} = {}) {
+    function write({files, message, target, signal} = {}) {
         let selectedFiles;
+        let selectedTarget;
         try {
+            selectedTarget = captureRepositoryTarget(target);
             requireString(message, 'message');
             if (!message.isWellFormed()) throw new TypeError('message cannot be represented completely as UTF-8 text.');
             if (!is.array(files) || files.length === 0) {
@@ -206,6 +228,7 @@ export function createRepositoryWorkspace(
             async function writeRepositoryFiles() {
                 const outcome = {
                     directory: repositoryDirectory,
+                    ...(selectedTarget === undefined ? {} : {target: {...selectedTarget}}),
                     state: 'local',
                     stage: 'prepare',
                     paths: selectedFiles.map(function selectedPath(file) { return file.path; }),
@@ -260,7 +283,7 @@ export function createRepositoryWorkspace(
                     }
 
                     try {
-                        const result = await run(
+                        const result = await execute(
                             'git',
                             args,
                             {cwd: options.cwd ?? repositoryDirectory, signal, onEvent: observeEvent,
@@ -317,7 +340,7 @@ export function createRepositoryWorkspace(
                         ['--literal-pathspecs', 'commit', '--only', '--cleanup=verbatim', '--file', '-', '--', ...outcome.paths],
                         commitMessage()
                     );
-                    await executeGit('push', ['push']);
+                    await executeGit('push', repositoryPushArguments(selectedTarget));
                     outcome.stage = 'complete';
                     return outcome;
                 } catch (cause) {
@@ -353,7 +376,7 @@ export function createRepositoryWorkspace(
         return closing;
     }
 
-    return {directory: repositoryDirectory, open, status, pull, push, write, close, drain: close, dispose: close};
+    return {directory: repositoryDirectory, open, status, configuration, pull, push, write, close, drain: close, dispose: close};
 }
 
 function requireString(value, name) {

package/src/core/runtime.mjs

@@ -150,11 +150,22 @@ class CoreRuntime {
         };
     }
 
+    async getService(name) {
+        if (this.#closing) throw failure('CORE_CLOSING', 'Core is closing.');
+        const service = this.#services.get(name);
+        if (!service) throw failure('CORE_SERVICE_UNAVAILABLE', `Core service ${String(name)} is not registered.`);
+        await this.#startService(service);
+        return service.definition;
+    }
+
     #serviceContext(service) {
         const runtime = this;
         return {
             application: this.#application,
             service: service.name,
+            getService(name) {
+                return runtime.getService(name);
+            },
             emit(event, data) {
                 return runtime.emit(event, data);
             }