arcane-os 0.66.0 → 0.68.0

package/docs/reference/sdk-api.md

@@ -69,6 +69,8 @@ runtime layouts.
 | `arcane-os/core/local-ai` | Native llama.cpp, Ollama and ONNX Core service, model readiness, complete responses and owned lifecycle. See [local AI through Core](local-ai.md). |
 | `arcane-os/local-ai` | Official runtime installation and native artifact bundling for selected llama.cpp/Ollama/ONNX/image requirements and NeMo libraries. |
 | `arcane-os/local-ai/onnx` | Retained native ONNX worker sessions with explicit graph loading and complete tensor inference. |
+| `arcane-os/local-ai/decisions` | Explicit native Laya FP32 decisions using the existing ONNX owner and a tokenizer Worker. |
+| `arcane-os/core/decisions` | Renderer-independent typed-decision service composed with existing local-AI and model-assets owners. |
 | `arcane-os/ai/core-onnx` | Optional browser access to system ONNX through an existing Core connection. |
 | `arcane-os/local-ai/image` | Retained native stable-diffusion.cpp context, complete PNG generation and owned worker lifetime. |
 | `arcane-os/ai/core-image` | Browser image lifecycle and complete PNG Blobs through an available Core service. |
@@ -108,7 +110,7 @@ runtime layouts.
 | `arcane-os/pwa` | Nonblocking PWA registration, worker updates, native installation state and a dismissible installation component. |
 | `arcane-os/ai/browser-wasm` | Caller-selected browser-local Wllama inference, complete DBOPFS model storage, streaming, cancellation, and structural tool-call results. |
 | `arcane-os/ai/core-local` | Browser llama.cpp provider through an available Core connection; browser-local Wllama and ONNX remain independently available. |
-| `arcane-os/ai/browser-decisions` | Explicit-load Laya FP16 and Julia-1 FP32 typed decisions through the shared Transformers.js Worker owner. |
+| `arcane-os/ai/browser-decisions` | Explicit-load Laya and Julia-1 typed decisions with caller-selected precision through the shared Transformers.js Worker owner. |
 | `arcane-os/ai/tool-text-stream` | Shared selected tool-argument text observer for provider integration. |
 | `arcane-os/ai/twin-cloud` | Stateless chat, System One state/questions and image generation with explicit key/model, complete results and operation-specific retry/cancellation. |
 | `arcane-os/ai/browser-speech` | Caller-selected Whisper/Kokoro, native browser recognition/synthesis, cloud TTS, upstream assets, role lifecycle and cancellation. |
@@ -169,6 +171,9 @@ The remaining data-only subpaths are eight JSON Schemas and package metadata.
 | `acceptWebSocket()` | function | `arcane-os`, `arcane-os/websocket` | WebSocket protocol | Node; browser-native client interoperability |
 | `WS` | class | `arcane-os`, `arcane-os/websocket-client` | Shared WebSocket clients | Node and native-WebSocket browser hosts |
 | `createBrowserDecisionModel()` | function | `arcane-os/ai/browser-decisions` | Browser typed decisions | Browser module Workers and the caller-selected inference backend |
+| `createNativeDecisionModel()` | function | `arcane-os/local-ai/decisions` | Native typed decisions | Node with an existing native ONNX owner and selected Laya FP32 files |
+| `createNativeDecisionService()` | function | `arcane-os/core/decisions` | Native typed decisions | Node Core with existing local-AI and model-assets services |
+| `createNativeDecisionService default export` | function | `arcane-os/core/decisions` | Native typed decisions | Same native decision service factory |
 | `fetchRequest()` | function | `arcane-os/ai/twin-cloud` | TWiN Cloud requests | Node and Browser; remote HTTPS provider |
 | `fetchSystemOneRequest()` | function | `arcane-os/ai/twin-cloud` | TWiN Cloud state-and-questions requests | Node and Browser; remote HTTPS provider |
 | `generateImages()` | function | `arcane-os/ai/twin-cloud` | TWiN Cloud image generation | Node and Browser with Fetch and Blob; remote HTTPS provider |
@@ -3742,11 +3747,19 @@ Runs one fast-forward-only pull after proving the selected repository worktree i
 ### Signature and result
 
 ```text
-async repositoryPull({ workspaceRoot=process.cwd(), signal, onEvent, run=runProcess }={})
+async repositoryPull({ workspaceRoot=process.cwd(), target, signal, onEvent, run=runProcess }={})
 ```
 
 Import it from `arcane-os`. The signature above states whether settlement is synchronous or promise-based. The overview and owning group define result authority, side effects, callbacks, events, cancellation, and lifecycle.
 
+Optional `target:{remote,ref}` captures exact nonempty native-representable
+strings before any wait and selects `git pull --ff-only -- <remote> <ref>:`.
+The current clean branch receives a fast-forward-only integration; the SDK
+never switches branches, resets or changes configuration. Without a target,
+the existing configured pull and result remain unchanged. Targeted results
+add `target`, complete `stdout` and `stderr` to the existing pull result.
+See [checkout configuration and selected targets](core-repositories.md#existing-checkout-configuration-and-selected-targets).
+
 ### Availability and normalization
 
 **Node; network-assisted Git.** SDK-normalized inputs, errors, events, and documented result. Deep protocol: [Node ESM](protocols.md).
@@ -3770,7 +3783,7 @@ Pushes the selected attached branch through the repository's configured remote a
 ### Signature, parameters, and result
 
 ```text
-async repositoryPush({ workspaceRoot=process.cwd(), signal, onEvent, run=runProcess }={})
+async repositoryPush({ workspaceRoot=process.cwd(), target, signal, onEvent, run=runProcess }={})
 ```
 
 Import it from `arcane-os`. `workspaceRoot` selects the Git worktree. `signal`
@@ -3781,10 +3794,16 @@ should keep the default.
 
 Before pushing, the SDK runs `git rev-parse --show-toplevel`,
 `git branch --show-current`, and `git status --short --branch` in order. It rejects a
-detached HEAD, then runs plain `git push`; the repository's current branch,
+detached HEAD, then, without `target`, runs plain `git push`; the repository's current branch,
 configured upstream/remote, Git credentials, hooks, and server policy remain
 authoritative. Unlike `repositoryPull()`, this function does **not** require a
-clean worktree. It does not create a commit or select a remote/refspec for you.
+clean worktree. It does not create a commit or choose an application destination.
+Optional `target:{remote,ref}` captures the original nonempty
+native-representable strings before any wait and runs
+`git push --no-follow-tags -- <remote> HEAD:<ref>`. This publishes current HEAD
+to the caller-selected ref without force or implicit configured tag following.
+It changes no branch or Git configuration; credentials, URL interpretation,
+hooks and remote rejection remain Git-owned.
 
 The promise resolves to
 `{action:'push', repositoryRoot, branch, output}`. `output` is trimmed stdout,
@@ -3792,6 +3811,9 @@ or trimmed stderr when stdout is empty. A missing Git executable, failed status
 probe, rejected/nonzero push, cancellation, or event-callback failure rejects
 with the normalized process error. Cancellation stops the local process tree;
 it cannot prove that a remote accepted no objects before the interruption.
+Targeted results also contain the captured `target` and complete
+`stdout`/`stderr`; omitting the target preserves the existing result shape.
+See [checkout configuration and selected targets](core-repositories.md#existing-checkout-configuration-and-selected-targets).
 
 ### Availability and normalization
 
@@ -7280,9 +7302,18 @@ createCoreRuntime({application, version, services=[]}={})
 ```
 
 Import it from `arcane-os/core/runtime`. The runtime exposes `current()`,
-`subscribe()`, `onFrame()`, `emit()`, `registerService()`, `start()`, `handle()`
+`subscribe()`, `onFrame()`, `emit()`, `registerService()`, `getService()`, `start()`, `handle()`
 and idempotent `close()`.
 
+`await runtime.getService(name)` and service `context.getService(name)` return
+the actual registered service after its shared startup. They wait for that
+dependency alone, may start it before `runtime.start()`, and add no renderer or
+all-service barrier. Unknown services reject with `CORE_SERVICE_UNAVAILABLE`;
+new lookups during shutdown reject with `CORE_CLOSING`. Startup failures retain
+their original error. This is readiness, not a lifetime lease: retain acquired
+native handles for their actual cleanup rather than looking them up during
+disposal. See [native service composition](core-runtime.md#native-service-composition).
+
 Services start independently. Request-lifetime work receives cooperative
 cancellation; accepted `lifetime:'service'` work survives renderer cancellation.
 Shutdown stops admission, waits accepted responses, then runs each service's
@@ -7894,8 +7925,8 @@ explicit existing path. The application owns the remote, branch and Core API.
 createRepositoryWorkspace({name,directory,dataRoot,remote,branch,gitIdentity,onEvent,run=runProcess}={})
 ```
 
-Returns `{directory,open,status,pull,push,write,close,drain,dispose}`. Construction does
-no I/O. Operations accept `{signal}`; a missing or empty destination clones once,
+Returns `{directory,open,status,configuration,pull,push,write,close,drain,dispose}`. Construction does
+no I/O. Preparing operations accept `{signal}`; a missing or empty destination clones once,
 while existing checkout files, branches, remotes and local changes remain intact.
 Same-directory calls are ordered within the process. Shutdown drains accepted
 work and preserves the checkout. No CLI cwd, launch state, preference, snapshot
@@ -7908,7 +7939,25 @@ Selected author fields override inherited child author/committer fields;
 omitted fields remain inherited. Username remains a credential hint, with
 authentication owned by ordinary Git and its configured helper.
 
-`write({files:[{path,content}],message,signal})` snapshots the exact selected
+`configuration({signal})` observes an existing working root without clone,
+initialization or fetch. It returns `{repositoryRoot,headRef,origin,upstream}`:
+full symbolic HEAD (including unborn, null when detached), origin URL/pushURL
+arrays and current branch remote/merge/URL/pushURL arrays. Unset, empty and
+repeated configuration values remain distinct. These are ordinary configured
+values, not authentication or endpoint proof, and are not atomic with later
+operations. Raw stdout is decoded without replacement; unrepresentable text
+reports `ARCANE_GIT_CONFIGURATION_NOT_TEXT` with full diagnostics.
+
+`pull({target,signal})`, `push({target,signal})` and
+`write({files:[{path,content}],message,target,signal})` accept optional
+`target:{remote,ref}`, captured as original strings at acceptance. The target
+selects a fast-forward-only pull into the current branch or a non-force push
+of current HEAD to the selected ref, without switching branches or changing
+configuration. It is independent of initial-clone `remote`/`branch`; omission
+preserves ordinary configured behavior. See the [complete configuration and
+target contract](core-repositories.md#existing-checkout-configuration-and-selected-targets).
+
+`write` snapshots the exact selected
 strings, writes those repository-relative files, commits only their literal
 paths and performs an ordinary non-force push. It retains unrelated staged
 paths and existing Git filters/hooks. Results and causal failures distinguish
@@ -7976,7 +8025,7 @@ Construction selects no model and installs no runtime or transport.
 ### Signature and result
 
 ```text
-createCoreLocalAIProvider({client=getInstalledCoreClient(),id='llama.cpp'}={})
+createCoreLocalAIProvider({client,id='llama.cpp'}={})
 ```
 
 Import it from `arcane-os/ai/core-local`. The provider implements
@@ -7988,6 +8037,16 @@ payloads and parsed streaming chunks, and cancel on observed readiness loss.
 Missing Core reports unavailability; it does not choose a browser or cloud route.
 Dispose/unregister at the caller's owning lifecycle boundary.
 
+Omitted `client` follows late installation, replacement and retirement through
+the shared Core installation subscription. An explicit client, including
+`null`, remains fixed. Replacement revokes readiness and cancels owned work;
+late results cannot restore it. `inspect()` distinguishes explicit load
+capability from loaded readiness, while `status()` remains observational.
+Disposal releases only an actually retained selection through its captured
+client, so never-loaded and already-unloaded providers send no native unload.
+The provider/2 runtime reconciles status at its operation boundaries; this
+does not add an idle role-state subscription.
+
 ```javascript
 import {createCoreLocalAIProvider} from 'arcane-os/ai/core-local';
 import {getAIProviderRuntime} from 'arcane-os/ai-provider-runtime';
@@ -8020,6 +8079,13 @@ resolved installed runtime records. It returns a Core service definition with
 existing Core lifecycle. Shutdown cancels owned work and joins owned processes;
 an already running external service remains under its external owner.
 
+After `await context.getService('local-ai')`, `service.getONNXRuntime()` returns
+that service's actual prepared ONNX owner. It creates no engine and rejects
+unavailable or closing access. Reacquire on each explicit load after recovery;
+retain the returned handle for cleanup. Core shutdown cancels request-lifetime
+work, and independent services dispose concurrently. See
+[native service owners](local-ai.md#native-service-owners).
+
 Optional `prepare({signal,onEvent})` supplies resolved runtime records during
 this service's startup. Only operations depending on that service wait for its
 preparation; the development listener and independently composed image/model
@@ -8029,7 +8095,10 @@ requirements. The managed development and native entrypoints separate them.
 
 The service provides `localai.status`, explicit `localai.services.recover`,
 `llama.status/models/load/unload/chat`, `onnx.status/load/run/unload`, and the documented native Ollama methods.
-`localai.state` reports runtime/model changes. `llama.chunk` and `ollama.chunk`
+`localai.state` reports runtime/model changes. `llama.status` and `llama.models`
+observe current state without starting, restarting or waiting for an engine.
+Explicit load retains startup and exact catalog-membership checks.
+`llama.chunk` and `ollama.chunk`
 carry original parsed chunks with `streamId`; terminal responses remain complete.
 There is no background health polling or implicit model choice.
 
@@ -8046,7 +8115,7 @@ and [native bundling](local-ai.md#native-bundling).
 
 `createONNXRuntime({modulePath,signal?,onEvent?})` from `arcane-os/local-ai/onnx`
 owns retained native ONNX sessions in workers. It exposes `load({id,model,
-sessionOptions?,signal?})`, `run({id,feeds,fetches?,runOptions?,signal?})`,
+sessionOptions?,executionPreference?,signal?})`, `run({id,feeds,fetches?,runOptions?,signal?})`,
 `unload({id,signal?})`, `current()`, replaying `subscribe(listener)` and `close()`.
 The direct model path is absolute. Complete typed tensor records use
 `{type,dims,data}`; callers own the actual graph's inputs and preprocessing.
@@ -8056,11 +8125,22 @@ before replacement. Independent sessions run concurrently; same-session work
 waits at that session's loading/execution boundary. Queued cancellation removes
 that request; active cancellation retires the affected worker and suppresses
 its response. Native code can delay termination; cleanup waits for actual exit.
+`current().sessions[].stopping` revokes new-run availability at terminal
+shutdown; `exited` records actual Worker exit. A recoverable run error leaves
+the loaded session usable. Unload joins exit and output delivery even when a
+termination request fails, preserving the complete cleanup error.
+
+The generic load defaults to CPU. `executionPreference:'gpu'` tries advertised
+CUDA, TensorRT, DirectML, CoreML and WebGPU session creation before CPU.
+Explicit `sessionOptions.executionProviders` takes precedence unchanged.
+The complete `execution` record reports discovery, provider attempts and
+fallback; successful creation establishes configuration, not physical GPU
+execution. Inference is never replayed on a different provider after failure.
 See [complete signatures, readiness, cancellation and usage](local-ai.md#native-onnx-sessions).
 
 ## createCoreONNXRuntime()
 
-`createCoreONNXRuntime({client=getInstalledCoreClient()}={})` from
+`createCoreONNXRuntime({client}={})` from
 `arcane-os/ai/core-onnx` accesses an available Core ONNX service. Its `load`,
 `run`, and `unload` mirror the native session selection and accept `signal` and
 `timeoutMs` (default `0`). Relative model paths resolve at Core's `appRoot`.
@@ -8068,7 +8148,11 @@ The accessor owns complete tensor transport encoding/decoding, `inspect()`,
 `current()`, replaying `subscribe(listener)` and `close()`. Closing cancels this
 accessor's requests and subscriptions; unloading shared models is explicit.
 Construction installs no runtime and opens no transport. Existing browser
-ONNX/Wllama remain independent. See [Core and browser usage](local-ai.md#onnx-through-core-and-the-browser).
+ONNX/Wllama remain independent. Omitted `client` follows late installation and
+reads each installed connection's current status; explicit clients, including
+`null`, remain fixed. Retirement or replacement clears readiness and cancels
+owned work, with late old-client results suppressed. Close also removes the
+installation subscription. See [Core and browser usage](local-ai.md#onnx-through-core-and-the-browser).
 
 ## createImageRuntime()
 
@@ -8108,12 +8192,18 @@ browser accessor's detach-only ownership below. See the
 
 ## createCoreImageRuntime()
 
-`createCoreImageRuntime({client=getInstalledCoreClient(),signal?,onEvent?})`
+`createCoreImageRuntime({client,signal?,onEvent?})`
 from `arcane-os/ai/core-image` returns immediately with `load`, `generate`, `edit`,
 `unload`, `inspect`, `current`, `subscribe` and `close`. It subscribes before
 requesting an initial status snapshot so newer lifecycle events win. It opens
 no connection and installs or selects no model.
 
+Omitted `client` follows late Core installation, replacement and retirement;
+an explicit client, including `null`, remains fixed. Each installed client is
+observed before its status request. Retirement cancels owned work and removes
+old readiness; late results cannot restore it. Close removes both service and
+installation subscriptions without closing the shared client or model.
+
 `load({model,context?,assetProjectionId?,resourcePaths?,signal?})` and
 `generate({model,prompt,parameters?,assetProjectionId?,resourcePaths?,signal?,
 onProgress?})` use the selected Core service. Generation acknowledges with
@@ -8410,6 +8500,14 @@ directory and complete member files.
 
 `current()` returns `{closing,projections}`. `retain(id)` accepts a completed
 projection and returns `{id,directory,members,release}` for a native owner.
+Native `prepare({id,workingDirectory,members,signal,onProgress})` accepts
+ordered `{path,url}` members and returns their ready projection. Explicit calls
+stream complete upstream responses through the same file owner; startup
+downloads nothing. Independent members transfer concurrently and progress
+reports phases and completed files. `release(id)` relinquishes preparation
+ownership; cancellation, release and disposal join fetches and writes before
+cleanup. Native retain handles keep completed files alive until actual engine
+release. See [native preparation](model-assets.md#native-ownership).
 `dispose()` releases preparation ownership and joins file writes, closes and
 all native retain lifetimes before cleanup. The native owner releases its
 handle only after its actual context/worker use ends. Original stored model
@@ -9071,18 +9169,127 @@ See the [mounting contract](pwa.md#mountpwainstallprompt) and
 [component reference](runtime-components.md#pwa-installhtml). The browser owns
 native installation eligibility and URL-bar promotion.
 
+## createNativeDecisionModel()
+
+### Overview
+
+Runs explicitly selected Laya FP32 option scoring through an existing native
+ONNX owner, with tokenization in a Node Worker. It creates no second inference
+engine and starts no model download at construction.
+
+### Signature and result
+
+```text
+createNativeDecisionModel({onnx,modelAssets,workingDirectory,paths,model='onnx-community/laya-typed-decisions-ONNX',revision='main',dtype='fp32',sessionOptions,executionPreference='gpu',signal}={})
+```
+
+Import from `arcane-os/local-ai/decisions`. Supply the existing `onnx` owner and
+either `modelAssets` plus `workingDirectory`, or native `paths` for the model,
+tokenizer and tokenizer configuration. The selected graph requires FP32. The
+handle exposes `load`, `evaluate`, `classify`, `current`, `status`, `subscribe`,
+`unload` and terminal `dispose`; `classify` aliases `evaluate` and `status`
+aliases `current`.
+
+`evaluate(rows,{signal,runOptions})` preserves each complete `state`, `question`,
+`options` and optional `type` separately. It returns `{decisions,outputs}` with
+original rows, typed values, raw logits, unrounded probabilities and every
+named tensor output. It requires a loading or loaded activation. Cancellation
+retires the shared activation and joins its actual ONNX/tokenizer lifetime;
+working files remain retained until both Workers exit. Ordinary invalid rows
+leave a healthy session and sibling evaluations intact.
+
+### Availability and normalization
+
+**Node on Windows, Linux and macOS with the selected ONNX Runtime; Android needs
+host adaptation.** GPU preference attempts actual advertised providers before
+CPU fallback; accepted configuration does not prove GPU node execution. Model
+selection, unchanged payloads, scoring interpretation and persistence remain
+application-owned. Complete lifecycle, errors and paths are documented in
+[native typed decisions](native-decisions.md).
+
+### Example
+
+```javascript
+import {createNativeDecisionModel} from 'arcane-os/local-ai/decisions';
+
+function createMoonChefDecisions({onnx, paths}) {
+    return createNativeDecisionModel({onnx, paths});
+}
+```
+
+The caller explicitly loads the returned model before evaluation and unloads
+or disposes it at its owning boundary; defining this function downloads nothing.
+
+## createNativeDecisionService()
+
+### Overview
+
+Composes the same native decision model into an existing Core runtime without
+a renderer. The factory starts no inference, tokenizer or model preparation.
+
+### Signature and result
+
+```text
+createNativeDecisionService(configuration={}, {appRoot=process.cwd()}={})
+```
+
+Import from `arcane-os/core/decisions`. Configuration selects the model options
+above and an optional service `name` (default `decisions`); relative supplied
+`paths` resolve from `appRoot`. Explicit load obtains the registered local-AI
+and, when needed, model-assets owners through `context.getService`, then
+reacquires `getONNXRuntime()` after any recovery. Native members are `load`,
+`evaluate`, `classify`, `current`, `subscribe`, `unload`, `dispose` and Core
+`start(context)`.
+
+RPC exposes `decisions.status`, `decisions.load`, `decisions.evaluate` and
+`decisions.unload`. Evaluation accepts `{rows,runOptions?}` and returns complete
+`{decisions,outputs}` using the existing tensor codec at the JSON boundary.
+`decisions.state` and replaying `subscribe(listener,{emitCurrent:true,signal})`
+report lifecycle. Unload is accepted service-lifetime cleanup; host shutdown
+still cancels request-lifetime load/evaluation.
+
+### Availability and normalization
+
+**Node Core with an existing local-AI ONNX service and selected model files.**
+Registration does not wait for all services or open another host. Original
+inputs, complete outputs, failures and cleanup semantics match the native
+model. See [composition and example](native-decisions.md#compose-with-existing-core-services).
+
+### Example
+
+```javascript
+import {createNativeDecisionService} from 'arcane-os/core/decisions';
+
+const decisions = createNativeDecisionService({
+    model: 'onnx-community/laya-typed-decisions-ONNX',
+    dtype: 'fp32',
+    workingDirectory: '.models/laya'
+});
+// Add decisions to the application's existing Core services; load explicitly.
+```
+
+## createNativeDecisionService default export
+
+The default export from `arcane-os/core/decisions` is exactly the named
+`createNativeDecisionService` factory, with the same arguments and lifecycle.
+
 ## createBrowserDecisionModel()
 
 ### Overview
 
-Creates an explicitly loaded browser model for Laya typed decisions in FP16 or
-Julia-1 in FP32. The shared Worker owns Transformers.js loading, full-input
+Creates an explicitly loaded browser model for Laya typed decisions or
+Julia-1. Laya defaults to FP16 and Julia to FP32; callers may select `dtype`
+explicitly. The shared Worker owns Transformers.js loading, full-input
 encoding, batched inference, complete results, cancellation and resource lifetime.
 Applications own model selection, questions, option meanings and decision policy.
 Existing chat and speech providers are unchanged.
 
 ### Signature and result
 
+```text
+createBrowserDecisionModel({family,model,revision,device,dtype,runtime}={})
+```
+
 ```js
 import {createBrowserDecisionModel} from 'arcane-os/ai/browser-decisions';
 
@@ -9107,8 +9314,11 @@ precision, tokenization, output meanings, lifecycle and model limitations.
 ### Availability and normalization
 
 Browser module Workers plus the selected Transformers.js backend are required
-on explicit use. Import and construction do not activate a model. Laya fixes
-`dtype: 'fp16'`; Julia fixes `dtype: 'fp32'`; there is no precision fallback.
+on explicit use. Import and construction do not activate a model. The optional
+nonempty `dtype` string defaults to `fp16` for Laya and `fp32` for Julia. An
+explicit value is forwarded unchanged to the upstream loader; unsupported
+selections report its failure without precision fallback. For Laya FP32, pass
+`dtype: 'fp32'`.
 Cancellation terminates that client's Worker and rejects its in-flight work.
 No decisions are inserted into chat history or durable storage.
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "arcane-os",
-  "version": "0.66.0",
+  "version": "0.68.0",
   "description": "Arcane OS JavaScript SDK, project-local CLI, browser runtime, and repository-portable application packager.",
   "type": "module",
   "main": "./src/index.mjs",
@@ -69,6 +69,7 @@
     "./core/preferences": "./src/core/services/preferences.mjs",
     "./core/diarization": "./src/diarization/service.mjs",
     "./core/local-ai": "./src/core/services/local-ai.mjs",
+    "./core/decisions": "./src/core/services/decisions.mjs",
     "./core/image": "./src/core/services/image.mjs",
     "./core/speech": "./src/core/services/speech.mjs",
     "./core/model-assets": "./src/core/services/model-assets.mjs",
@@ -76,6 +77,7 @@
     "./diarization/build": "./src/diarization/build.mjs",
     "./local-ai": "./src/local-ai/install.mjs",
     "./local-ai/onnx": "./src/local-ai/onnx.mjs",
+    "./local-ai/decisions": "./src/local-ai/decisions.mjs",
     "./local-ai/image": "./src/local-ai/image-runtime.mjs",
     "./local-ai/whisper": "./src/local-ai/whisper/index.mjs",
     "./local-ai/whisper/build": "./src/local-ai/whisper/build.mjs",
@@ -121,7 +123,7 @@
     "test": "npm run test:unit && npm run test:functional && npm run test:integration && npm run test:regression",
     "test:release": "node ./bin/arcane-test.mjs test/npm-release.test.mjs",
     "test:unit": "node ./bin/arcane-test.mjs test/app-descriptor.test.mjs test/app-schema.test.mjs test/app-selection.test.mjs test/contracts.test.mjs test/conversation-closing-report.test.mjs test/doctor.test.mjs test/mail-credentials.test.mjs test/mail-outbox.test.mjs test/mail-public-api.test.mjs test/mail-send.test.mjs test/mail-transport.test.mjs test/native-windows-icon.test.mjs test/targets.test.mjs test/workspace-operation-lock.test.mjs",
-    "test:functional": "node ./bin/arcane-test.mjs test/ai-ollama-readiness.test.mjs test/core-ollama-lifecycle.test.mjs test/ai-request-model.test.mjs test/ai-request-retry.test.mjs test/ai-stream-cancellation.test.mjs test/browser-decisions.test.mjs test/browser-speech-providers.test.mjs test/browser-wasm-gpu-notice.test.mjs test/browser-wasm-download-resume.test.mjs test/chat-input.test.mjs test/chat-stream-speech.test.mjs test/chat-transcript-scroll.test.mjs test/chat-transient-retention.test.mjs test/cli.test.mjs test/continuous-voice-capture.test.mjs test/codex-app-server.test.mjs test/mcp-stdio-server.test.mjs test/core-classic-source.test.mjs test/core-client.test.mjs test/core-client-installation.test.mjs test/core-development.test.mjs test/core-host.test.mjs test/core-packaged-web.test.mjs test/core-runtime.test.mjs test/core-stdio.test.mjs test/dbopfs-document-library.test.mjs test/dbopfs-png.test.mjs test/dbopfs.test.mjs test/dev-server.test.mjs test/dev-pwa.test.mjs test/dom-event-instrumentation.test.mjs test/event-manager.test.mjs test/events.test.mjs test/file-preview.test.mjs test/import-map.test.mjs test/local-image-editing.test.mjs test/mail-cli.test.mjs test/mail-runtime.test.mjs test/mail-server.test.mjs test/markdown-editor.test.mjs test/markdown-media.test.mjs test/markdown-source-map.test.mjs test/modal.test.mjs test/native-module-packaging.test.mjs test/native-module-resource-references.test.mjs test/packaging.test.mjs test/pwa-packaging.test.mjs test/pwa-client.test.mjs test/pwa-install.test.mjs test/pwa-worker.test.mjs test/persistent-ai-chat-session.test.mjs test/reference-completeness.test.mjs test/rendered-print.test.mjs test/runtime-api-behavior.test.mjs test/runtime.test.mjs test/scaffold.test.mjs test/speech-playback.test.mjs test/site.test.mjs test/theme-manager.test.mjs test/twin-cloud-images.test.mjs test/twin-cloud.test.mjs test/websocket-client-import-map.test.mjs test/websocket.test.mjs test/update-check.test.mjs test/user-explicit-updates.test.mjs",
+    "test:functional": "node ./bin/arcane-test.mjs test/ai-ollama-readiness.test.mjs test/core-ollama-lifecycle.test.mjs test/ai-request-model.test.mjs test/ai-request-retry.test.mjs test/ai-stream-cancellation.test.mjs test/browser-decisions.test.mjs test/browser-speech-providers.test.mjs test/browser-wasm-gpu-notice.test.mjs test/browser-wasm-download-resume.test.mjs test/chat-input.test.mjs test/chat-stream-speech.test.mjs test/chat-transcript-scroll.test.mjs test/chat-transient-retention.test.mjs test/cli.test.mjs test/continuous-voice-capture.test.mjs test/codex-app-server.test.mjs test/mcp-stdio-server.test.mjs test/core-classic-source.test.mjs test/core-client.test.mjs test/core-client-installation.test.mjs test/core-ai-installation.test.mjs test/core-llama-lifecycle.test.mjs test/core-development.test.mjs test/core-host.test.mjs test/core-model-assets.test.mjs test/core-native-services.test.mjs test/core-packaged-web.test.mjs test/core-runtime.test.mjs test/core-stdio.test.mjs test/dbopfs-document-library.test.mjs test/dbopfs-png.test.mjs test/dbopfs.test.mjs test/dev-server.test.mjs test/dev-pwa.test.mjs test/dom-event-instrumentation.test.mjs test/event-manager.test.mjs test/events.test.mjs test/file-preview.test.mjs test/import-map.test.mjs test/local-image-editing.test.mjs test/mail-cli.test.mjs test/mail-runtime.test.mjs test/mail-server.test.mjs test/markdown-editor.test.mjs test/markdown-media.test.mjs test/markdown-source-map.test.mjs test/modal.test.mjs test/native-decisions.test.mjs test/native-onnx.test.mjs test/native-module-packaging.test.mjs test/native-module-resource-references.test.mjs test/packaging.test.mjs test/pwa-packaging.test.mjs test/pwa-client.test.mjs test/pwa-install.test.mjs test/pwa-worker.test.mjs test/persistent-ai-chat-session.test.mjs test/reference-completeness.test.mjs test/rendered-print.test.mjs test/runtime-api-behavior.test.mjs test/runtime.test.mjs test/scaffold.test.mjs test/speech-playback.test.mjs test/site.test.mjs test/theme-manager.test.mjs test/twin-cloud-images.test.mjs test/twin-cloud.test.mjs test/websocket-client-import-map.test.mjs test/websocket.test.mjs test/update-check.test.mjs test/user-explicit-updates.test.mjs",
     "test:integration": "node ./bin/arcane-test.mjs test/installed-package-runtime.test.mjs test/root-app-layout.test.mjs test/integrated-shared.test.mjs test/integrated-workspace.test.mjs test/mail-browser.test.mjs test/native-macos-provider.test.mjs test/native-plan.test.mjs test/native-portable-provider.test.mjs test/native-provider-loader.test.mjs test/npm-release.test.mjs test/release-bundle.test.mjs test/release-capability-smoke.test.mjs test/shared-payload-batch.test.mjs test/tarball.test.mjs test/browser-wasm-cpu.test.mjs test/wllama-webgpu-runtime.test.mjs",
     "test:regression": "node ./bin/arcane-test.mjs test/channel-workflows.test.mjs test/html-import-registration.test.mjs test/html-import-packaged-script.test.mjs test/logging-regression.test.mjs test/markdown-speech.test.mjs test/prepared-speech.test.mjs test/native-provider-generation.test.mjs test/speech-queue-regression.test.mjs test/testing.test.mjs test/test-sets.test.mjs",
     "check": "node tools/check-source.mjs && npm test",
@@ -158,6 +160,7 @@
     "tag": "latest"
   },
   "dependencies": {
+    "@huggingface/tokenizers": "0.2.0",
     "event-pubsub": "6.1.1",
     "js-queue": "3.1.1",
     "node-http-server": "10.0.0",

package/runtime/arcane/components/theme-switcher.html

@@ -1,11 +1,62 @@
 <style>
-    :host{display:inline-block;color:inherit}
-    .switcher{align-items:center;display:flex;gap:.15rem;padding:.2rem;border:1px solid var(--app-bar-border,var(--border-color,rgba(255,255,255,.25)));border-radius:999px;background:color-mix(in srgb,currentColor 8%,transparent)}
-    button{appearance:none;border:0;border-radius:999px;background:transparent;color:inherit;cursor:pointer;font:700 .68rem/1 system-ui,sans-serif;min-height:1.85rem;padding:.42rem .58rem}
-    button:hover{background:color-mix(in srgb,currentColor 14%,transparent)}
-    button[aria-pressed="true"]{background:var(--app-bar-accent,var(--secondary-color,#c49a52));color:var(--app-bar-active-text,var(--primary-color,#172238))}
-    button:focus-visible{outline:.18rem solid var(--focus-color,currentColor);outline-offset:.12rem}
-    @media(max-width:32rem){button{font-size:0;padding-inline:.5rem}button::first-letter{font-size:.72rem}}
+    :host {
+        display:inline-block;
+        min-inline-size:0;
+        max-inline-size:100%;
+        color:inherit;
+    }
+
+    .switcher {
+        display:flex;
+        flex-wrap:wrap;
+        align-items:center;
+        gap:.15rem;
+        box-sizing:border-box;
+        max-inline-size:100%;
+        padding:.2rem;
+        border:1px solid var(--app-bar-border,var(--border-color,rgba(255,255,255,.25)));
+        border-radius:1.6rem;
+        background:color-mix(in srgb,currentColor 8%,transparent);
+    }
+
+    button {
+        appearance:none;
+        flex:1 0 auto;
+        box-sizing:border-box;
+        min-inline-size:2.75rem;
+        max-inline-size:100%;
+        min-block-size:2.75rem;
+        padding:.5rem .75rem;
+        border:0;
+        border-radius:1.4rem;
+        background:transparent;
+        color:inherit;
+        cursor:pointer;
+        font:700 .875rem/1.25 system-ui,sans-serif;
+        text-align:center;
+        white-space:normal;
+        overflow-wrap:anywhere;
+    }
+
+    button:hover:not(:disabled) {
+        background:color-mix(in srgb,currentColor 14%,transparent);
+    }
+
+    button[aria-pressed="true"] {
+        background:var(--app-bar-accent,var(--secondary-color,rgb(196,154,82)));
+        color:var(--app-bar-active-text,var(--primary-color,rgb(23,34,56)));
+        box-shadow:inset 0 0 0 .1rem currentColor;
+    }
+
+    button:disabled {
+        cursor:not-allowed;
+        opacity:.55;
+    }
+
+    button:focus-visible {
+        outline:.18rem solid var(--focus-color,currentColor);
+        outline-offset:.12rem;
+    }
 </style>
 <div class="switcher" role="group" aria-label="Color scheme">
     <button type="button" data-scheme="system" aria-pressed="false" title="Use device theme">Auto</button>
@@ -16,31 +67,79 @@
 <script type="module">
     const host=this;
     const root=host.shadowRoot;
+    const group=root.querySelector('.switcher');
     const buttons=Array.from(root.querySelectorAll('[data-scheme]'));
+    let modes=buttons.map(function scheme(button){return button.dataset.scheme;});
+    let labels=Object.fromEntries(buttons.map(function label(button){
+        return [button.dataset.scheme,button.textContent];
+    }));
+    let busy=false;
+
+    host.configure=configure;
+    configure({
+        modes:host.dataset.modes===undefined?modes:host.dataset.modes.split(/\s+/u).filter(Boolean),
+        labels:host.dataset.systemLabel===undefined?{}:{system:host.dataset.systemLabel}
+    });
+
     const {default:ThemeManager}=await import('../modules/ThemeManager.js');
     const manager=new ThemeManager();
 
     host.setMode=setMode;
     host.refresh=refresh;
-    root.querySelector('.switcher').addEventListener('click',async event=>{
+    group.addEventListener('click',async function selectScheme(event){
         const button=event.target.closest('[data-scheme]');
-        if(!button) return;
+        if(!button||button.disabled) return;
         setBusy(true);
         try{
             const state=button.dataset.scheme==='custom'?await manager.activateCustom():await manager.setScheme(button.dataset.scheme);
             setMode(state.mode);setCustomAvailable(Boolean(state.theme));
         }finally{setBusy(false);setCustomAvailable(Boolean(manager.customTheme));}
     });
-    globalThis.addEventListener('arcane-theme-change',()=>refresh().catch(()=>{}));
+    globalThis.addEventListener('arcane-theme-change',function themeChanged(){
+        refresh().catch(function refreshRejected(){});
+    });
+
+    function configure(options={}){
+        const nextModes=options.modes===undefined?modes:[...options.modes];
+        const nextLabels={...labels,...options.labels};
+        const visible=[];
+        for(const mode of nextModes){
+            const button=buttons.find(function matchingScheme(candidate){return candidate.dataset.scheme===mode;});
+            if(!button) throw new TypeError(`Unknown theme-switcher mode: ${mode}`);
+            if(visible.includes(button)) throw new TypeError(`Repeated theme-switcher mode: ${mode}`);
+            visible.push(button);
+        }
+        for(const button of buttons){
+            const label=nextLabels[button.dataset.scheme];
+            if(typeof label!=='string') throw new TypeError('Theme-switcher labels must be strings.');
+        }
+        modes=nextModes;
+        labels=nextLabels;
+        for(const button of buttons) button.textContent=labels[button.dataset.scheme];
+        const reordered=group.children.length!==visible.length||visible.some(function moved(button,index){
+            return group.children[index]!==button;
+        });
+        if(reordered){
+            const focused=root.activeElement;
+            group.replaceChildren(...visible);
+            if(visible.includes(focused)&&!focused.disabled) focused.focus({preventScroll:true});
+        }
+        return {modes:[...modes],labels:{...labels}};
+    }
 
     function setMode(mode='system'){
         for(const button of buttons) button.setAttribute('aria-pressed',String(button.dataset.scheme===mode));
         host.dataset.mode=mode;
         return mode;
     }
-    function setBusy(value){for(const button of buttons) button.disabled=Boolean(value);}
-    function setCustomAvailable(value){root.querySelector('[data-scheme="custom"]').disabled=!value;}
+    function setBusy(value){
+        busy=Boolean(value);
+        for(const button of buttons) button.disabled=busy;
+    }
+    function setCustomAvailable(value){
+        buttons.find(function customScheme(button){return button.dataset.scheme==='custom';}).disabled=busy||!value;
+    }
     async function refresh(){const state=await manager.load();setMode(state.mode);setCustomAvailable(Boolean(state.theme));return state;}
 
-    refresh().catch(()=>setMode('system'));
+    refresh().catch(function refreshRejected(){setMode('system');});
 </script>