arcane-os 0.68.0 → 0.69.0

package/CHANGELOG.md

@@ -1,5 +1,21 @@
 # Changelog
 
+## 0.69.0
+
+- Add explicit `textFormat:'plain'` speech input through prepared speech,
+  direct TTS requests and the browser Kokoro provider. Preserve complete input,
+  whitespace and formatting characters, original-part cache identity and
+  cancellation while leaving default narration behavior unchanged. This input
+  option does not change the selected engine's synthesis limits.
+- Add optional `native.window` width, height and resizable configuration.
+  Forward logical client dimensions through native manifests; the matching
+  Windows host applies initial DPI-aware usable-screen fitting while preserving
+  omitted defaults and subsequent application/user sizing. Other platform
+  adapters retain their existing sizing behavior.
+- Preserve selected theme-switcher colors during hover by applying ordinary
+  hover fill only to unselected enabled buttons. Keep complete labels, focus,
+  disabled states, tokens and per-instance configuration unchanged.
+
 ## 0.68.0
 
 - Add per-instance theme-switcher `configure({modes,labels})` and initial

package/README.md

@@ -20,7 +20,7 @@ selected SDK projection or an explicit live SDK source mount. Both profiles
 share the theme, packaging, event, cancellation,
 and browser run contracts while retaining their selected application layout.
 
-This checkout defines the `0.68.0` SDK contract. Development applications declare
+This checkout defines the `0.69.0` SDK contract. Development applications declare
 `arcane-os` as `latest` and retain their lockfile. Exact SDK pins begin when Roshi
 designates a production build. Follow [Consumer updates](docs/consumer-updates.md)
 to refresh and compare the installed SDK and lockfile with the published channel;
@@ -469,11 +469,16 @@ keeping apostrophes, commas, and hyphens that join Unicode letters or numbers
 inside the same segment.
 Mute, stop, provider transition, and cancellation still govern the whole queue.
 
-Every TTS call automatically removes repeated same formatting marks (`*`, `#`,
+TTS narration removes repeated same formatting marks (`*`, `#`,
 `_`, backtick, `~`) from its outbound speech-input copy before synthesis.
 Streaming calls also recognize a run split across chunks. Single marks and
-ordinary repeated punctuation remain literal. No application option is needed;
-an existing `textFormat` extra is ignored and cannot disable cleanup. Original
+ordinary repeated punctuation remain literal. Complete synthesis calls may
+select `textFormat:'plain'` to preserve exact input: supply it in `prepareTTS`
+options or the payload of `fetchTTS`, provider-runtime TTS requests, or direct
+Kokoro requests. The SDK consumes this control before engine/host dispatch;
+omission keeps the default cleanup. Streaming narration and `SpeechPlayback`
+retain their existing formatting behavior. This option does not change the
+selected engine's input capacity or establish complete upstream synthesis. Original
 messages and caller payloads remain unchanged for display, storage, and model
 input. The `arcane-os/speech-text` entrypoint exports the same
 `MarkdownSpeech` streaming class and `stripSpeechFormatting()` one-pass helper

package/browser-runtime/ai/browser-speech-providers.mjs

@@ -906,7 +906,7 @@ function normalizeSynthesisPayload(payload, authority, speechInputPrepared) {
   if (shared) {
     descriptors = genericPayloadDescriptors(
       payload,
-      ["model", "voice", "input", "responseFormat", "speed"],
+      ["model", "voice", "input", "textFormat", "responseFormat", "speed"],
       ["model", "input", "responseFormat"],
       "Shared speech synthesis payload",
       "tts-synthesis",
@@ -927,7 +927,7 @@ function normalizeSynthesisPayload(payload, authority, speechInputPrepared) {
   } else {
     descriptors = genericPayloadDescriptors(
       payload,
-      ["model", "voice", "text", "speed"],
+      ["model", "voice", "text", "textFormat", "speed"],
       ["text"],
       "Browser Kokoro synthesis payload",
       "tts-synthesis",
@@ -936,7 +936,9 @@ function normalizeSynthesisPayload(payload, authority, speechInputPrepared) {
     textValue = descriptors.text.value;
   }
   const suppliedText = is.string(textValue) ? textValue : "";
-  const text = speechInputPrepared === true ? suppliedText : stripSpeechFormatting(suppliedText);
+  const text = speechInputPrepared === true || descriptors.textFormat?.value === "plain"
+    ? suppliedText
+    : stripSpeechFormatting(suppliedText);
   const voiceValue = Object.hasOwn(descriptors, "voice")
     ? descriptors.voice.value
     : authority.defaultVoice;

package/docs/reference/README.md

@@ -49,6 +49,8 @@ alone does not make bare module names resolve in a browser.
 | Import a shipped renderer module | [Runtime module catalog](runtime-modules.md) |
 | Use a shared entity | [Runtime entity modules](runtime-entities.md) and [exact export contracts](core/arcane-entities.md) |
 | Load a reusable HTML component | [Runtime component catalog](runtime-components.md) |
+| Present Light / Dark / System choices with complete labels | [Theme-switcher configuration](runtime-components.md#theme-switcherhtml) |
+| Use optional Core preferences and appearance without masking real failures | [PreferenceStore](runtime-modules.md#preferencestorejs), [SystemAppearance](runtime-modules.md#systemappearancejs), and [Core lookup errors](core-runtime.md#state-and-frames) |
 | Submit complete speech parts immediately and play them in order | [`SpeechPlayback`](runtime-modules.md#speechplaybackjs) and the [basic browser example](ai/browser-speech.md#play-a-complete-array-with-speechplayback) |
 | Call `globalThis.Arcane` | [Arcane Core API](core/arcane-api.md) |
 | Connect a browser to one Core transport | [Core browser client](core-client.md) |

package/docs/reference/ai/browser-speech.md

@@ -805,14 +805,17 @@ does not select another page or speak background work.
 
 ### Preparation inputs and reuse
 
-`ai.prepareTTS({parts,storage,identity,signal,onState})` accepts an ordered array
+`ai.prepareTTS({parts,textFormat,storage,identity,signal,onState})` accepts an ordered array
 of strings or `{input,voice?,speed?,pauseAfterMs?}` records. An omitted voice
 uses the selected model default; omitted speed uses `ai.voiceSpeed`; omitted
 pause is zero. The SDK snapshots the selected speech configuration and current
 punctuation/word-cadence options for that preparation. A part's pause applies
 after its final extracted segment. Complete original input remains available
-for semantic comparison; automatic Markdown cleanup affects only the speech
-copy and occurs once before segmentation.
+for semantic comparison; default Markdown cleanup affects only the speech
+copy and occurs once before segmentation. Set `textFormat:'plain'` to preserve
+each supplied input exactly through that segmentation. The prepared segment
+text participates in semantic reuse, so a changed synthesis input does not
+reuse audio produced from the cleaned version.
 
 `storage` is optional. When supplied, `{db,table,key}` names the caller's ready
 DBOPFS instance and its application-owned table/key. The SDK stores complete
@@ -977,7 +980,7 @@ speech method retain their existing behavior.
 ## Automatic speech-input formatting cleanup
 
 The shared streaming, audio-file, and `SpeechPlayback` paths remove repeated
-same formatting marks from the outbound speech-input copy automatically:
+same formatting marks from the outbound speech-input copy by default:
 
 ```javascript
 ai.streamTTS('## Heading\n**Hello');
@@ -994,10 +997,13 @@ waits for its next character or the final flush.
 
 `end:true`, `finishTTS()`, or cancellation clears pending streaming formatting
 state. `fetchTTS()`, provider-runtime TTS requests, direct Kokoro provider
-requests, and `SpeechPlayback` apply the same cleanup to complete input. An
-existing `textFormat` extra is ignored and cannot disable or select cleanup.
+requests, and `SpeechPlayback` apply the same default cleanup to complete input.
+Complete-input APIs can explicitly select `textFormat:'plain'` as described
+below. The streaming `streamTTS()` options still ignore `textFormat`;
+streaming narration and `SpeechPlayback` keep their existing cleanup.
 SDK-internal delegation carries `{speechInputPrepared:true}` outside the speech
-payload only after one cleanup pass, preventing a second non-idempotent pass.
+payload after its owner selects text treatment, preventing a second
+non-idempotent cleanup pass or cleanup of explicitly plain input.
 Applications omit that internal metadata. Displayed messages, saved history,
 model input, caller payload objects, language, voice, synthesis capacity, and
 playback timing are not changed by the filter.
@@ -1023,6 +1029,39 @@ console.log(speechText.append('## Head', false)); // ' Head'
 console.log(speechText.append('ing', true)); // ing
 ```
 
+### Exact complete synthesis input
+
+Use the public `textFormat:'plain'` selection for already-authored speech or an
+exact generated preview. It belongs in `prepareTTS` options, or alongside the
+`input`/`text` field of a complete synthesis payload:
+
+```javascript
+function preparePreview(ai, preview, signal) {
+  return ai.prepareTTS({parts: [preview], textFormat: 'plain', signal});
+}
+
+function fetchPreview(ai, preview, signal) {
+  return ai.fetchTTS({input: preview, textFormat: 'plain'}, signal);
+}
+```
+
+The same payload field is supported by `AI.prepareTTSPlayback()` for audio-file
+providers, `AIProviderRuntime.request('tts', {operation:'synthesize', payload,
+localOnly, signal})`, its `synthesize(payload, options)` alias, and direct
+Kokoro `request()` calls using either `{text,...}` or `{model,input,...}`.
+The SDK consumes `textFormat` before engine/host dispatch. The original nonblank input,
+including whitespace and repeated formatting marks, remains unchanged; voice,
+speed, selected model, cancellation and audio ordering retain their existing
+owners. Only `'plain'` selects exact input; omission and other values retain
+the existing narration cleanup. Applications never supply the internal
+`speechInputPrepared` argument.
+
+This selection governs SDK text treatment, not the selected engine's input
+capacity or pronunciation. [Kokoro.js 1.2.1](https://github.com/hexgrad/kokoro/blob/664c76a704021239ba59c84dcbaa4d3dece01fe9/kokoro.js/src/kokoro.js)
+still tokenizes with truncation in both `generate()` and `stream()`; plain input
+does not establish complete audio for an oversized engine input. The SDK's existing complete-text forwarding
+fixture does not prove upstream synthesis completeness.
+
 ## Choose a device or reduce memory use
 
 Local Whisper and Kokoro roles accept
@@ -1610,10 +1649,11 @@ const result = await kokoro.request({
 The voice belongs to the caller-selected inventory; omission uses that model's
 default voice. The provider-native result is
 `{audio:Float32Array,sampleRate,voice}`. The provider/2 shared request form accepts
-`{model,input,responseFormat:'wav',voice?,speed?}` and returns
+`{model,input,textFormat?,responseFormat:'wav',voice?,speed?}` and returns
 `{audio:Uint8Array,contentType:'audio/wav'}`. High-level `AI.fetchTTS()` wraps
 that provider result in a WAV `Blob`. Returned provider records remain ordinary
-mutable values.
+mutable values. Both payload forms accept `textFormat:'plain'` to retain exact
+input; omission keeps the default speech-formatting cleanup.
 
 ## Lifecycle and cancellation
 

package/docs/reference/core-native-packaging.md

@@ -372,6 +372,47 @@ observes complete diagnostics and exit. Cancelling that operation closes its
 input, allowing the window and accepted Core service work to drain without a
 forced process termination.
 
+### Initial native window size
+
+An application can select its initial client area and resizing behavior in
+`arcane-app.json`, independently of its page layout:
+
+```json
+{
+  "native": {
+    "type": "app",
+    "icon": "img/icon.png",
+    "order": 100,
+    "bundledApps": [],
+    "window": {"width": 1280, "height": 800, "resizable": true}
+  }
+}
+```
+
+This is the `native` portion of the existing app descriptor. Each `window`
+member is optional. `width` and `height` are positive integral client dimensions
+in logical pixels at 96 DPI; `resizable` is a boolean. Omitting a member retains
+the host's existing choice, and omitting `window` preserves existing startup.
+The native registry projection preserves the record; the browser package
+projection gains no window controls. Portable and Windows assembly copy the
+record to `arcane-native.json` as `window`, without changing page or service
+content.
+
+The matching Windows host applies the dimensions once on initial load, using
+the display DPI and fitting the outer window within the selected monitor's
+usable work area. This fit does not impose a persistent maximum size. Explicit
+`resizable:false` uses a fixed frame and disables the maximize control; `true`
+permits ordinary resizing and maximizing. Later app/user resizing remains
+untouched. A composing launcher's `Load` handler runs after this initial sizing
+and can restore its own saved window state. The SDK adds no saved-bounds store.
+
+Direct Windows host composition uses nullable `ArcaneHostOptions` members
+`InitialClientWidth`, `InitialClientHeight`, and `Resizable` with the same
+semantics. Older precompiled Windows hosts do not read these options; use the
+matching SDK host archive when rebuilding an application. The portable record
+is available to platform adapters; this addition implements its Windows host
+behavior and leaves window sizing on other platforms unchanged.
+
 ### Application icon and window colors
 
 `appDescriptor.native.icon` selects the application's existing app-relative

package/docs/reference/inventory/package-api.json

@@ -1,6 +1,6 @@
 {
   "schemaVersion": 1,
-  "sdkVersion": "0.67.0",
+  "sdkVersion": "0.68.0",
   "environment": {
     "runtime": "Node.js for Node entrypoints; browser for browser-only entrypoints",
     "minimumVersion": "22.23.2 for Node entrypoints",
@@ -1891,7 +1891,7 @@
       "summary": "Default binding for the canonical PreferenceStore runtime class in Node and managed browsers.",
       "availability": "Node with injected adapters, or browser/native WebView storage",
       "protocol": "Node ESM / authenticated managed browser import map",
-      "normalization": "Binding identity and namespace come directly from the canonical runtime module"
+      "normalization": "Canonical runtime binding. Default adapter recognizes only exact absent preferences namespace/matching method or existing Android unsupported capability; single operations retry once through existing app-scoped local storage after disposal/cancellation checks, preserving complete values and context. An advertised rejected batch is never retried serially; its original rejection remains before later local operations. Explicit adapters and partial-service/genuine failures retain their behavior."
     },
     {
       "id": "preference-store:PREFERENCE_STORE_ERROR_CODES",
@@ -4318,7 +4318,7 @@
       "summary": "Creates an app-neutral Core dispatcher with explicit services, request lifetimes, events and graceful drain.",
       "availability": "Node on Windows, Linux and macOS native hosts; Android requires its host adaptation",
       "protocol": "arcane/1 dispatcher and service lifecycle",
-      "normalization": "Starts services independently; runtime.getService(name) and context.getService(name) return the same registered object after only its shared startup, without a renderer or global barrier. Lookup is readiness, not a lifetime lease; new lookups reject during shutdown. Preserves complete results/errors, cancels request-lifetime work and drains accepted service work; runtime.replay publishes current dispatcher/service state without restart and preserves reentrant lifecycle publication order"
+      "normalization": "Starts services independently; runtime.getService(name) and context.getService(name) return the same registered object after only its shared startup, without a renderer or global barrier. Lookup is readiness, not a lifetime lease; new lookups reject during shutdown. Preserves complete results/errors, cancels request-lifetime work and drains accepted service work; runtime.replay publishes current dispatcher/service state without restart and preserves reentrant lifecycle publication order. Missing dispatch retains METHOD_NOT_ALLOWED with exact method/namespace and core-namespace-unavailable or core-method-unavailable; named services, registered methods and built-in namespaces establish presence. Handler/startup/permission errors remain unchanged."
     },
     {
       "id": "core-stdio:encodeCoreFrame",

package/docs/reference/runtime-components.md

@@ -2018,8 +2018,10 @@ Shared dependencies: [`Theme.js`](runtime-entities.md#themejs).
 Selects and refreshes system, light, dark, or custom theme mode. Native buttons
 retain complete readable labels and wrap when their component runs out of room,
 independently of viewport width. Each button has a `2.75rem` minimum target in
-both dimensions. Selected buttons retain `aria-pressed` and an inset outline;
-disabled choices and keyboard focus have distinct presentation.
+both dimensions. Selected buttons retain `aria-pressed`, their selected colors
+and an inset outline while hovered; ordinary hover fill applies only to
+unselected, enabled choices. Disabled choices and keyboard focus have distinct
+presentation.
 
 ### Public surface
 

package/docs/reference/runtime-modules.md

@@ -170,7 +170,7 @@ default `AI`; read-only `providerRuntime`, `speechActivationPending`, `browserSp
 `streamRequest()`, `streamMessage()`, `fetchRequest()`, `fetch()`,
 read-only `ttsSegmentation`, `configureTTSSegmentation()`,
 `streamTTS(text='',end=false,options={})`,
-`prepareTTS({parts,storage,identity,signal,onState})`,
+`prepareTTS({parts,textFormat,storage,identity,signal,onState})`,
 `playPreparedTTS(prepared,{signal,onState})`,
 `finishTTS()`, `prepareTTSPlayback()`, `fetchTTS()`, `fetchSTT()`, `stopAudio()`, `resumeAudio()`,
 `playAudio()`; consumes `user-entity-loaded` and `arcane-ollama-ready`,
@@ -393,14 +393,17 @@ synthesis payload to `Arcane.speech.synthesize(request, {signal})`; Core aborts
 are normalized to `AbortError` with `ARCANE_AI_REQUEST_ABORTED`. Actual engine
 interruption belongs to the registered service. It does not independently
 choose a provider, cloud fallback, model, runtime, or
-voice policy for the application. Every call removes repeated same formatting
-marks from a cloned outbound input before delegation; the caller's payload stays
-unchanged. The third `preparation` argument is reserved for SDK-internal
+voice policy for the application. By default, calls remove repeated same
+formatting marks from a cloned outbound input before delegation; the caller's
+payload stays unchanged. Public payload field `textFormat:'plain'` preserves
+the complete input, including whitespace and repeated marks. The SDK consumes
+that field before provider/host dispatch. Omission and other values retain the
+default cleanup. The third `preparation` argument is reserved for SDK-internal
 delegation, where `{speechInputPrepared:true}` prevents a second cleanup pass;
 applications omit it. `streamTTS(text='',end=false,options={})` and
 `finishTTS()` use the selected playback boundary. The third-argument options below
-are available in SDK `0.5.12`. The `textFormat` compatibility extra added in
-SDK `0.5.16` is ignored beginning in `0.5.17`:
+are available in SDK `0.5.12`. In these streaming options, the `textFormat`
+compatibility extra added in SDK `0.5.16` remains ignored:
 
 | Field | Default | Meaning |
 | --- | --- | --- |
@@ -408,7 +411,7 @@ SDK `0.5.16` is ignored beginning in `0.5.17`:
 | `speed` | Current `ai.voiceSpeed` | A supplied positive speed is captured for those segments and forwarded to `fetchTTS()`. It does not change `ai.voiceSpeed`. |
 | `pauseAfterMs` | `0` | Finite, nonnegative milliseconds placed after the final extracted segment on the existing audio clock. Invalid values throw `RangeError`; no pause is inserted between this call's other segments. |
 | `waitForPlayback` | `false` | Omission retains the preparation promise. With `true`, the promise resolves after every extracted segment reaches a terminal playback state: `true` when all naturally end, or `false` after terminal cancellation or failure. |
-| `textFormat` | Ignored compatibility extra | Repeated same formatting marks are removed automatically from every TTS call. This value no longer selects or disables cleanup. |
+| `textFormat` | Ignored streaming compatibility extra | Streaming narration retains automatic cleanup. The public plain selection belongs to complete synthesis payloads or `prepareTTS` options. |
 
 Audio-file voice and speed use the existing `fetchTTS()` validation and error path.
 The automatic cleanup changes only the outbound speech-input copy; displayed,
@@ -418,7 +421,7 @@ text, single marks, ordinary punctuation, and other characters remain literal.
 A trailing candidate mark waits for the next character so a repeated run split
 across chunks is still omitted. Ordinary prose streams immediately.
 `end:true`, `finishTTS()`, muted terminal calls, and `stopAudio()` clear pending
-formatting state. `textFormat` is not an opt-out.
+formatting state. Streaming `textFormat` is not an opt-out.
 
 Voice, speed, pause, and playback overrides belong to the segments
 extracted in that invocation, including any text buffered by an earlier call.
@@ -458,12 +461,16 @@ last audio buffer ends, without waiting out that pause. Completion describes
 the playback lifecycle, not proof that a listener heard the sound. See the
 [complete-passage example](ai/browser-speech.md#queue-complete-passages-and-wait-for-playback).
 
-`prepareTTS({parts,storage,identity,signal,onState})` returns an immediate
+`prepareTTS({parts,textFormat,storage,identity,signal,onState})` returns an immediate
 `{segments,state,ready,getAudio(index),cancel()}` handle for detached complete
 speech preparation. Parts are strings or `{input,voice?,speed?,pauseAfterMs?}`
 records. It retains the full source for semantic matching, snapshots the
 selected speech configuration and segmentation, and applies automatic
-formatting cleanup once to the speech copy. Generation uses the existing
+formatting cleanup once to the speech copy by default. `textFormat:'plain'`
+preserves each complete input before the same ordered segmentation. Prepared
+segment text participates in reuse, keeping cleaned and exact synthesis inputs
+distinct when they differ. This SDK text-treatment choice does not change the
+selected engine's own input capacity. Generation uses the existing
 bounded provider queue without adding playback. Optional
 `storage:{db,table,key}` saves complete audio files and their MIME metadata in
 the caller's ready DBOPFS instance; the separate JSON-compatible `identity`
@@ -1032,9 +1039,12 @@ records are the closed `{llm,stt,tts}`, `{stt,tts}`, or
 `{providers,routes,expectedProviders}` shapes described below.
 `configureFromTuple()` accepts exactly six provider/model preference entries.
 
-Every direct TTS `request()` or `synthesize()` call removes repeated same
-formatting marks from a cloned outbound payload's `input` or `text` field. The
-caller's payload and request records remain unchanged. The optional
+By default, direct TTS `request()` and `synthesize()` remove repeated same
+formatting marks from a cloned outbound payload's `input` or `text` field.
+Public payload field `textFormat:'plain'` preserves that input exactly. The SDK
+consumes this field before queuing/dispatch; queued requests retain their
+selected text treatment. Omission and other values keep the default cleanup.
+The caller's payload and request records remain unchanged. The optional
 `preparation` argument is reserved for SDK-owned delegation;
 `{speechInputPrepared:true}` prevents a second pass after another SDK speech
 boundary has already cleaned the copy. Applications omit that argument. LLM

package/docs/reference/sdk-api.md

@@ -1906,6 +1906,20 @@ default class PreferenceStore extends EventTarget
 subpath and managed browser key both resolve directly to the canonical runtime
 module. Deep protocol: [Browser runtime delivery](protocols.md#browser-runtime-delivery).
 
+The default adapter recognizes an absent optional preferences namespace only
+from the exact Core lookup tuple `code:'METHOD_NOT_ALLOWED'`,
+`reason:'core-namespace-unavailable'`, `namespace:'preferences'`, and the
+matching `method:'preferences.<operation>'`. Single `get`, `set`, and `delete`
+operations then retry once through the existing app-scoped local adapter after
+checking disposal and cancellation, preserving complete values and operation
+context. The existing Android unsupported-capability route is unchanged.
+An advertised `setMany` batch rejected for that exact absence retains its
+original rejection and performs no serial retry; subsequent operations use the
+selected local adapter.
+Partial-service, permission, persistence, transport and cancellation failures
+remain errors. Explicit adapters retain their own behavior. See the
+[complete PreferenceStore contract](runtime-modules.md#preferencestorejs).
+
 ### Example
 
 ```javascript
@@ -7325,6 +7339,15 @@ without restarting services. Its snapshot preserves complete service errors
 and active request state; see [runtime replay](core-runtime.md#state-and-frames)
 for authoritative readiness and reentrant lifecycle ordering.
 
+An unregistered method returns `METHOD_NOT_ALLOWED` with its exact `method`,
+first dotted `namespace`, and `reason:'core-namespace-unavailable'` when that
+namespace has neither a named service nor any registered method. Otherwise
+the reason is `core-method-unavailable`; built-in `system`, `app` and `version`
+namespaces count as present. This is a lookup result before handler or
+permission decisions. Handler/startup errors and older unmarked errors do not
+establish namespace absence. The dispatcher does not choose a replacement
+service; optional browser adapters own their documented response to absence.
+
 ### Availability and normalization
 
 **Node on Windows, Linux and macOS native hosts; Android requires its native host

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "arcane-os",
-  "version": "0.68.0",
+  "version": "0.69.0",
   "description": "Arcane OS JavaScript SDK, project-local CLI, browser runtime, and repository-portable application packager.",
   "type": "module",
   "main": "./src/index.mjs",

package/runtime/arcane/components/theme-switcher.html

@@ -38,7 +38,7 @@
         overflow-wrap:anywhere;
     }
 
-    button:hover:not(:disabled) {
+    button:hover:not(:disabled):not([aria-pressed="true"]) {
         background:color-mix(in srgb,currentColor 14%,transparent);
     }
 

package/runtime/arcane/modules/AI.js

@@ -6336,7 +6336,7 @@ class AI {
         return result;
     }
 
-    prepareTTS({parts, storage = null, identity = null, signal = null, onState = null} = {}) {
+    prepareTTS({parts, textFormat, storage = null, identity = null, signal = null, onState = null} = {}) {
         if(this.#providerSpeechModel()?.speech?.playback==='native'){
             const error=new Error('Native browser speech has no audio file to prepare or store; use prepareTTSPlayback.');
             error.code='ARCANE_AI_TTS_AUDIO_EXPORT_UNAVAILABLE';
@@ -6384,7 +6384,7 @@ class AI {
             if(!is.finite(pauseAfterMs) || pauseAfterMs < 0) {
                 throw new RangeError('Prepared speech pauses must be nonnegative milliseconds.');
             }
-            const cleaned = stripSpeechFormatting(source.input);
+            const cleaned = textFormat === 'plain' ? source.input : stripSpeechFormatting(source.input);
             const {segments: outputs} = this.#segmentSpeechText(cleaned, true, segmentation);
             for(const [index, input] of outputs.entries()) {
                 if(!input.trim()) continue;
@@ -7175,6 +7175,7 @@ class AI {
                 'model',
                 'voice',
                 'input',
+                'textFormat',
                 'responseFormat',
                 'speed'
             ]);
@@ -7183,7 +7184,7 @@ class AI {
                     ||!acceptedKeys.has(key)
                     ||!Object.hasOwn(descriptors[key],'value')){
                     const error=new TypeError(
-                        'AI.fetchTTS accepts only model, voice, input, responseFormat, and speed data properties.'
+                        'AI.fetchTTS accepts only model, voice, input, textFormat, responseFormat, and speed data properties.'
                     );
                     error.code='ARCANE_AI_TTS_REQUEST_INVALID';
                     throw error;
@@ -7208,7 +7209,7 @@ class AI {
                 error.code='ARCANE_AI_TTS_INPUT_INVALID';
                 throw error;
             }
-            const input=speechInputPrepared===true
+            const input=speechInputPrepared===true||descriptors.textFormat?.value==='plain'
                 ?suppliedInput
                 :stripSpeechFormatting(suppliedInput);
             const selection=this.#providerRuntime.selection('tts');

package/runtime/arcane/modules/AIProviderRuntime.js

@@ -3386,15 +3386,19 @@ export class AIProviderRuntime {
         if (options.signal?.aborted) {
             return Promise.reject(normalizedAbort());
         }
-        if (role === 'tts' && !queued && speechInputPrepared !== true) {
+        if (role === 'tts' && !queued) {
             const payload = options.payload;
             const field = Object.hasOwn(payload ?? {}, 'input') ? 'input' : 'text';
             const text = Object.getOwnPropertyDescriptor(payload ?? {}, field)?.value;
             if (is.string(text)) {
-                const input = stripSpeechFormatting(text);
-                if (input !== text) {
+                const textFormat = Object.getOwnPropertyDescriptor(payload, 'textFormat')?.value;
+                const input = speechInputPrepared === true || textFormat === 'plain'
+                    ? text
+                    : stripSpeechFormatting(text);
+                if (input !== text || Object.hasOwn(payload, 'textFormat')) {
                     const payloadProperties = Object.getOwnPropertyDescriptors(payload);
                     payloadProperties[field] = {...payloadProperties[field], value: input};
+                    delete payloadProperties.textFormat;
                     const requestProperties = Object.getOwnPropertyDescriptors(options);
                     requestProperties.payload = {
                         ...requestProperties.payload,

package/schemas/arcane-app.schema.json

@@ -132,6 +132,16 @@
           }
         },
         "localAI": { "$ref": "#/$defs/localAI" },
+        "window": {
+          "type": "object",
+          "additionalProperties": false,
+          "description": "Initial native client dimensions in logical pixels at 96 DPI, and whether the user can resize the window. Omitted fields retain the host defaults.",
+          "properties": {
+            "width": { "type": "integer", "minimum": 1 },
+            "height": { "type": "integer", "minimum": 1 },
+            "resizable": { "type": "boolean" }
+          }
+        },
         "bundledApps": {
           "type": "array",
           "uniqueItems": true,

package/src/app-descriptor.mjs

@@ -235,8 +235,26 @@ function validateDocumentCatalog(value){
     });
 }
 
+function validateNativeWindow(value){
+    if(value===undefined)return undefined;
+    assertOnlyKeys(value,new Set(['width','height','resizable']),'descriptor.native.window');
+    for(const dimension of ['width','height']){
+        if(value[dimension]!==undefined&&(!is.integer(value[dimension])||value[dimension]<=0)){
+            fail(`descriptor.native.window.${dimension} must be a positive integer.`);
+        }
+    }
+    if(value.resizable!==undefined&&!is.boolean(value.resizable)){
+        fail('descriptor.native.window.resizable must be a boolean.');
+    }
+    return completeValue({
+        ...(value.width===undefined?{}:{width:value.width}),
+        ...(value.height===undefined?{}:{height:value.height}),
+        ...(value.resizable===undefined?{}:{resizable:value.resizable})
+    });
+}
+
 function validateNative(value,appId){
-    assertOnlyKeys(value,new Set(['type','icon','order','bundledApps','documentCatalog','localAI','services']),'descriptor.native');
+    assertOnlyKeys(value,new Set(['type','icon','order','bundledApps','documentCatalog','localAI','services','window']),'descriptor.native');
     if(!NATIVE_TYPES.has(value.type))fail('descriptor.native.type is unsupported.');
     const icon=value.icon===null?null:normalizeRelativePath(value.icon,'descriptor.native.icon');
     if(!is.integer(value.order)||value.order<0){
@@ -246,6 +264,7 @@ function validateNative(value,appId){
         pattern:APP_ID_PATTERN
     });
     const documentCatalog=validateDocumentCatalog(value.documentCatalog);
+    const window=validateNativeWindow(value.window);
     let services;
     if(value.services!==undefined){
         if(!is.array(value.services))fail('descriptor.native.services must be an array.');
@@ -259,6 +278,7 @@ function validateNative(value,appId){
         icon,
         order:value.order,
         bundledApps,
+        ...(window===undefined?{}:{window}),
         ...(services===undefined?{}:{services}),
         ...(value.localAI===undefined?{}:{localAI:normalizeLocalAIConfig(value.localAI)}),
         ...(documentCatalog?{documentCatalog}:{})
@@ -395,6 +415,7 @@ export function projectNativeDescriptor(descriptor,{source}={}){
         ...(value.native.bundledApps.length?{bundledApps:[...value.native.bundledApps]}:{}),
         ...(value.native.documentCatalog?{documentCatalog:value.native.documentCatalog}:{}),
         ...(value.native.services===undefined?{}:{services:value.native.services}),
+        ...(value.native.window===undefined?{}:{window:value.native.window}),
         ...(value.native.localAI===undefined?{}:{localAI:value.native.localAI}),
         include:[...value.package.include]
     };
@@ -440,6 +461,7 @@ function synthesizedDescriptor(packageManifest,nativeDescriptor){
             order:is.integer(native.order)?native.order:100,
             bundledApps:[...(native.bundledApps??[])],
             ...(native.services===undefined?{}:{services:native.services}),
+            ...(native.window===undefined?{}:{window:native.window}),
             ...((packageManifest.localAI??native.localAI)===undefined?{}:{localAI:packageManifest.localAI??native.localAI}),
             ...(native.documentCatalog?{documentCatalog:native.documentCatalog}:{})
         },

package/src/core/hosts/windows/ArcaneHost.cs

@@ -26,6 +26,10 @@ namespace Arcane.Core.Hosts.Windows
         public string CoreExecutable { get; set; }
         public string CoreArguments { get; set; }
         public string CoreWorkingDirectory { get; set; }
+        /// <summary>Optional initial client dimensions in logical pixels at 96 DPI.</summary>
+        public double? InitialClientWidth { get; set; }
+        public double? InitialClientHeight { get; set; }
+        public bool? Resizable { get; set; }
     }
 
     public static class ArcaneHost
@@ -128,6 +132,8 @@ namespace Arcane.Core.Hosts.Windows
         {
             if (options == null) throw new ArgumentNullException("options");
             if (onDiagnostic == null) throw new ArgumentNullException("onDiagnostic");
+            ValidateInitialDimension(options.InitialClientWidth, "InitialClientWidth");
+            ValidateInitialDimension(options.InitialClientHeight, "InitialClientHeight");
             this.options = options;
             this.onDiagnostic = onDiagnostic;
             this.onError = onError;
@@ -135,6 +141,11 @@ namespace Arcane.Core.Hosts.Windows
             completion.Task.ContinueWith(ObserveReportedFailure, TaskContinuationOptions.OnlyOnFaulted);
             Text = options.Title;
             AutoScaleMode = AutoScaleMode.Dpi;
+            if (options.Resizable.HasValue)
+            {
+                FormBorderStyle = options.Resizable.Value ? FormBorderStyle.Sizable : FormBorderStyle.FixedSingle;
+                MaximizeBox = options.Resizable.Value;
+            }
             webView = new WebView2 { Dock = DockStyle.Fill };
             Controls.Add(webView);
         }
@@ -145,6 +156,9 @@ namespace Arcane.Core.Hosts.Windows
 
         protected override void OnLoad(EventArgs args)
         {
+            // Apply the initial choice once. A composing launcher's Load handler
+            // can then restore its own saved state; later user sizing is untouched.
+            if (!started && !closing) ApplyInitialWindowSize();
             base.OnLoad(args);
             if (started || closing) return;
             started = true;
@@ -152,6 +166,38 @@ namespace Arcane.Core.Hosts.Windows
             initialization.ContinueWith(ObserveUnexpectedFailure, TaskContinuationOptions.OnlyOnFaulted);
         }
 
+        private static void ValidateInitialDimension(double? value, string name)
+        {
+            if (value.HasValue && (Double.IsNaN(value.Value) || Double.IsInfinity(value.Value)
+                || value.Value <= 0 || Math.Truncate(value.Value) != value.Value))
+                throw new ArgumentOutOfRangeException(name, "Select a positive integral logical client dimension.");
+        }
+
+        private void ApplyInitialWindowSize()
+        {
+            if ((!options.InitialClientWidth.HasValue && !options.InitialClientHeight.HasValue)
+                || WindowState != FormWindowState.Normal) return;
+
+            Rectangle workArea = Screen.FromControl(this).WorkingArea;
+            int availableWidth = Math.Max(1, workArea.Width - (Width - ClientSize.Width));
+            int availableHeight = Math.Max(1, workArea.Height - (Height - ClientSize.Height));
+            using (Graphics display = CreateGraphics())
+            {
+                double width = options.InitialClientWidth.HasValue
+                    ? options.InitialClientWidth.Value * display.DpiX / 96.0 : ClientSize.Width;
+                double height = options.InitialClientHeight.HasValue
+                    ? options.InitialClientHeight.Value * display.DpiY / 96.0 : ClientSize.Height;
+                // Fit before converting to native integer coordinates. This is
+                // an initial screen fit, not a persistent maximum window size.
+                ClientSize = new Size(
+                    (int)Math.Max(1, Math.Min(availableWidth, Math.Round(width))),
+                    (int)Math.Max(1, Math.Min(availableHeight, Math.Round(height))));
+            }
+            Location = new Point(
+                Math.Max(workArea.Left, Math.Min(Left, workArea.Right - Width)),
+                Math.Max(workArea.Top, Math.Min(Top, workArea.Bottom - Height)));
+        }
+
         private async Task InitializeAsync()
         {
             try

package/src/core/hosts/windows/ArcaneLauncher.cs

@@ -48,6 +48,7 @@ namespace Arcane.Core.Hosts.Windows
                 Dictionary<string, object> manifest = ReadRecord(Path.Combine(directory, "arcane-native.json"));
                 Dictionary<string, object> app = RequiredRecord(manifest, "app");
                 Dictionary<string, object> client = RequiredRecord(manifest, "client");
+                Dictionary<string, object> windowOptions = manifest.ContainsKey("window") ? RequiredRecord(manifest, "window") : null;
                 string appId = RequiredString(app, "id");
                 object title;
                 string name = app.TryGetValue("displayName", out title) && title is string ? (string)title : appId;
@@ -71,6 +72,9 @@ namespace Arcane.Core.Hosts.Windows
                     OriginHost = "arcane.local",
                     ProfileDirectory = Path.Combine(profileParent, "WebView2"),
                     Title = name,
+                    InitialClientWidth = OptionalWindowDimension(windowOptions, "width"),
+                    InitialClientHeight = OptionalWindowDimension(windowOptions, "height"),
+                    Resizable = OptionalWindowResizable(windowOptions),
                     IconPath = String.IsNullOrEmpty(icon) ? null : Path.Combine(directory, icon),
                     ClassicClientSource = File.ReadAllText(Path.Combine(directory, RequiredString(client, "source"))),
                     CoreExecutable = Path.Combine(directory, "runtime", "ArcaneCore.exe"),
@@ -164,6 +168,23 @@ namespace Arcane.Core.Hosts.Windows
             return text;
         }
 
+        private static double? OptionalWindowDimension(Dictionary<string, object> window, string name)
+        {
+            object value;
+            if (window == null || !window.TryGetValue(name, out value)) return null;
+            if (value is int || value is long || value is decimal || value is double)
+                return Convert.ToDouble(value, System.Globalization.CultureInfo.InvariantCulture);
+            throw new FormatException("The native manifest needs a number at window." + name + ".");
+        }
+
+        private static bool? OptionalWindowResizable(Dictionary<string, object> window)
+        {
+            object value;
+            if (window == null || !window.TryGetValue("resizable", out value)) return null;
+            if (value is bool) return (bool)value;
+            throw new FormatException("The native manifest needs a boolean at window.resizable.");
+        }
+
         private static string QuoteArgument(string value)
         {
             // Windows command-line escaping is transport-local. The child

package/src/native/portable-provider.mjs

@@ -196,6 +196,7 @@ export function createPortableNativeProvider({services, packagedWeb = false, web
                     target,
                     webRoot: 'app',
                     start: release.manifest?.app?.start ?? './index.html',
+                    ...(appDescriptor.native?.window === undefined ? {} : {window: {...appDescriptor.native.window}}),
                     core: {
                         entry: 'runtime/arcane-core.mjs', transport: 'stdio', protocol: 'arcane/1', services: selectedServices,
                         ...(localAI === undefined ? {} : {localAIRuntimes: bundled.runtimes})