arcane-os 0.68.0 → 0.70.0

package/docs/reference/runtime-modules.md

@@ -170,7 +170,7 @@ default `AI`; read-only `providerRuntime`, `speechActivationPending`, `browserSp
 `streamRequest()`, `streamMessage()`, `fetchRequest()`, `fetch()`,
 read-only `ttsSegmentation`, `configureTTSSegmentation()`,
 `streamTTS(text='',end=false,options={})`,
-`prepareTTS({parts,storage,identity,signal,onState})`,
+`prepareTTS({parts,textFormat,storage,identity,signal,onState})`,
 `playPreparedTTS(prepared,{signal,onState})`,
 `finishTTS()`, `prepareTTSPlayback()`, `fetchTTS()`, `fetchSTT()`, `stopAudio()`, `resumeAudio()`,
 `playAudio()`; consumes `user-entity-loaded` and `arcane-ollama-ready`,
@@ -393,14 +393,17 @@ synthesis payload to `Arcane.speech.synthesize(request, {signal})`; Core aborts
 are normalized to `AbortError` with `ARCANE_AI_REQUEST_ABORTED`. Actual engine
 interruption belongs to the registered service. It does not independently
 choose a provider, cloud fallback, model, runtime, or
-voice policy for the application. Every call removes repeated same formatting
-marks from a cloned outbound input before delegation; the caller's payload stays
-unchanged. The third `preparation` argument is reserved for SDK-internal
+voice policy for the application. By default, calls remove repeated same
+formatting marks from a cloned outbound input before delegation; the caller's
+payload stays unchanged. Public payload field `textFormat:'plain'` preserves
+the complete input, including whitespace and repeated marks. The SDK consumes
+that field before provider/host dispatch. Omission and other values retain the
+default cleanup. The third `preparation` argument is reserved for SDK-internal
 delegation, where `{speechInputPrepared:true}` prevents a second cleanup pass;
 applications omit it. `streamTTS(text='',end=false,options={})` and
 `finishTTS()` use the selected playback boundary. The third-argument options below
-are available in SDK `0.5.12`. The `textFormat` compatibility extra added in
-SDK `0.5.16` is ignored beginning in `0.5.17`:
+are available in SDK `0.5.12`. In these streaming options, the `textFormat`
+compatibility extra added in SDK `0.5.16` remains ignored:
 
 | Field | Default | Meaning |
 | --- | --- | --- |
@@ -408,7 +411,7 @@ SDK `0.5.16` is ignored beginning in `0.5.17`:
 | `speed` | Current `ai.voiceSpeed` | A supplied positive speed is captured for those segments and forwarded to `fetchTTS()`. It does not change `ai.voiceSpeed`. |
 | `pauseAfterMs` | `0` | Finite, nonnegative milliseconds placed after the final extracted segment on the existing audio clock. Invalid values throw `RangeError`; no pause is inserted between this call's other segments. |
 | `waitForPlayback` | `false` | Omission retains the preparation promise. With `true`, the promise resolves after every extracted segment reaches a terminal playback state: `true` when all naturally end, or `false` after terminal cancellation or failure. |
-| `textFormat` | Ignored compatibility extra | Repeated same formatting marks are removed automatically from every TTS call. This value no longer selects or disables cleanup. |
+| `textFormat` | Ignored streaming compatibility extra | Streaming narration retains automatic cleanup. The public plain selection belongs to complete synthesis payloads or `prepareTTS` options. |
 
 Audio-file voice and speed use the existing `fetchTTS()` validation and error path.
 The automatic cleanup changes only the outbound speech-input copy; displayed,
@@ -418,7 +421,7 @@ text, single marks, ordinary punctuation, and other characters remain literal.
 A trailing candidate mark waits for the next character so a repeated run split
 across chunks is still omitted. Ordinary prose streams immediately.
 `end:true`, `finishTTS()`, muted terminal calls, and `stopAudio()` clear pending
-formatting state. `textFormat` is not an opt-out.
+formatting state. Streaming `textFormat` is not an opt-out.
 
 Voice, speed, pause, and playback overrides belong to the segments
 extracted in that invocation, including any text buffered by an earlier call.
@@ -458,18 +461,29 @@ last audio buffer ends, without waiting out that pause. Completion describes
 the playback lifecycle, not proof that a listener heard the sound. See the
 [complete-passage example](ai/browser-speech.md#queue-complete-passages-and-wait-for-playback).
 
-`prepareTTS({parts,storage,identity,signal,onState})` returns an immediate
+`prepareTTS({parts,textFormat,storage,identity,signal,onState})` returns an immediate
 `{segments,state,ready,getAudio(index),cancel()}` handle for detached complete
 speech preparation. Parts are strings or `{input,voice?,speed?,pauseAfterMs?}`
 records. It retains the full source for semantic matching, snapshots the
 selected speech configuration and segmentation, and applies automatic
-formatting cleanup once to the speech copy. Generation uses the existing
+formatting cleanup once to the speech copy by default. `textFormat:'plain'`
+preserves each complete input before the same ordered segmentation. Prepared
+segment text participates in reuse, keeping cleaned and exact synthesis inputs
+distinct when they differ. This SDK text-treatment choice does not change the
+selected engine's own input capacity. Generation uses the existing
 bounded provider queue without adding playback. Optional
 `storage:{db,table,key}` saves complete audio files and their MIME metadata in
 the caller's ready DBOPFS instance; the separate JSON-compatible `identity`
 adds application-owned semantic context. Reuse compares complete inputs rather
 than an SDK version alone.
 
+Only missing audio joins TTS activation. Each preparation supplies its own
+cancellation lifetime to the existing provider runtime. The last pending
+activation interest cancels the owned load; other preparation/playback or
+joining direct-load interests preserve it. Cache-only preparation never loads
+the model, and cancelling after activation does not unload an already-ready
+model. Provider work owns actual cancellation and cleanup completion.
+
 `state` is `queued`, `preparing`, `ready`, `error`, or `cancelled`.
 `onState({state,completed,total,segments,error})` synchronously observes
 preparation progress. `ready` resolves the complete record after every segment
@@ -479,8 +493,8 @@ the retained MIME type. Preparation failure rejects; cancellation rejects as
 `AbortError` and preserves successfully stored segments. Matching pending
 requests share synthesis only on the same AI instance and storage group;
 cancelling one handle does not cancel another active matching caller.
-Preparation cancellation prevents later synthesis, but an already-started
-shared provider load/unmute has no per-preparation signal and may finish.
+Preparation cancellation prevents later synthesis and releases its activation
+interest. The provider's operation remains responsible for actual cleanup.
 
 `playPreparedTTS(prepared,{signal,onState})` can attach immediately. Its returned
 `{state,error,finished,pause(),resume(),stop()}` handle schedules segments in
@@ -1017,9 +1031,20 @@ The singleton exposes read-only `protocol`, `configured`, and `speechMuted`;
 `supportsTranscriptionCapture(providerId=null)`;
 `createTranscriptionCapture(options={})`;
 `synthesize(payload,options={},preparation={})`; and
-`setSpeechMuted(muted)`. Provider payloads must be data-only; callbacks,
+`setSpeechMuted(muted,{signal}={})`. Provider payloads must be data-only; callbacks,
 accessors, symbols, and cycles are rejected at the provider boundary.
 
+`setSpeechMuted(false,{signal})` shares pending activation while retaining an
+independent interest for each caller. Aborting one signal rejects only that
+caller's wait. When no pending interests remain, abort reaches the owned load.
+No-signal callers and direct `load('tts',...)` calls joining that activation
+also retain it. A rejected load preserves its complete error for the remaining
+callers. An already-aborted signal rejects before changing mute intent.
+Explicit `setSpeechMuted(true)` still cancels shared activation and unloads TTS;
+once accepted, that mute cleanup runs to completion rather than being undone
+by cancellation of its caller's signal. Completed activation is not unloaded
+merely because a former observer later aborts.
+
 Selection options admit `localOnly=false`; inspection admits
 `{localOnly=false,signal=null}`; startup admits
 `{startLanguageModel=true,startMuted=true,startTranscription=false,signal=null}` (including an omitted
@@ -1032,9 +1057,12 @@ records are the closed `{llm,stt,tts}`, `{stt,tts}`, or
 `{providers,routes,expectedProviders}` shapes described below.
 `configureFromTuple()` accepts exactly six provider/model preference entries.
 
-Every direct TTS `request()` or `synthesize()` call removes repeated same
-formatting marks from a cloned outbound payload's `input` or `text` field. The
-caller's payload and request records remain unchanged. The optional
+By default, direct TTS `request()` and `synthesize()` remove repeated same
+formatting marks from a cloned outbound payload's `input` or `text` field.
+Public payload field `textFormat:'plain'` preserves that input exactly. The SDK
+consumes this field before queuing/dispatch; queued requests retain their
+selected text treatment. Omission and other values keep the default cleanup.
+The caller's payload and request records remain unchanged. The optional
 `preparation` argument is reserved for SDK-owned delegation;
 `{speechInputPrepared:true}` prevents a second pass after another SDK speech
 boundary has already cleaned the copy. Applications omit that argument. LLM
@@ -2193,6 +2221,59 @@ default `DBOPFS`; installs `window.dbopfs`, emits `dbopfs-ready`; table/file/bac
 
 Exact exports: `DBOPFS_EVENT_TYPES`, `DBOPFS_REASONS`, `default`.
 
+`subscribeChanges(listener, {signal, once})` observes
+`DBOPFS_EVENT_TYPES.change` (`dbopfs-change`) through the existing canonical
+`arcane-os/event-manager` source. It returns an idempotent unsubscribe function
+with `.dispose()`; aborting the supplied signal also removes the subscription.
+Each listener receives an event whose `detail` contains:
+
+| Field | Meaning |
+| --- | --- |
+| `applicationId`, `storagePath` | Existing application identity and `apps/<application-id>` OPFS scope. |
+| `tableName`, `directoryName` | Logical table and physical directory; `memories` / `memory` retain their existing alias. |
+| `fileName` | Complete record filename, or `null` for a removed table. |
+| `action` | `write`, `append`, `delete`, or `table-delete`. A write does not claim whether a record was newly created. |
+| `originId`, `sequence`, `changeId` | Per-document origin and incrementing committed occurrence, shared by local and remote notifications for that occurrence. These are correlation fields, separate from realm-local canonical event-source IDs. |
+| `remote` | `false` at the writing DBOPFS source, `true` when received from another live document. |
+
+A write is published after writable-stream `close()` succeeds, or after the
+existing OPFS worker acknowledges its completed write/flush/close. A removal
+is published after OPFS removes the record or table. The affected cached record
+or table, including alias keys and removed-table handles, is invalidated before
+listeners run. A read already in progress may still resolve its earlier
+snapshot; it cannot repopulate the cache after an intervening delivered change.
+Notification metadata does not contain, rewrite, or reread record bodies.
+
+`set()` and raw `writeFile()` publish one occurrence per completed write;
+`setMany()`, `deleteMany()`, clear operations, and restore retain their existing
+per-record results and publish only their actual successful mutations. A
+partial batch is not a transaction: successful records are announced even when
+siblings fail. Missing records, absent/non-empty empty-table removal, failed
+writes/removals, and reads emit no committed-change event. `deleteTable()` keeps
+its existing return/error-reporting behavior; its returned `true` alone does
+not imply that a committed-change event was emitted.
+
+Within one document, subscribe through this source or the canonical event
+manager, rather than consuming both as separate changes. Across documents,
+DBOPFS owns one native `BroadcastChannel` named from the application storage
+path. Native storage-partition matching plus that path selects the receiving
+documents. A remote receiver invalidates its affected cache before publishing
+locally and never rebroadcasts the occurrence. There is no echo back to the
+writing DBOPFS source. Ordinary storage success remains success if a transport
+notification fails; the notification error is reported separately.
+
+Subscriptions are live-only: subscribe before the application's initial read,
+then let the application map the table/file/action to its own records and UI.
+DBOPFS performs no polling, initial full-table read, automatic picker refresh,
+or event-history replay. The channel lasts for the owning page, independent of
+individual listener lifetimes, so a document that only writes still announces
+its commits. `pagehide` closes the channel; `pageshow` after suspension reopens
+it and clears only that document's in-memory caches. Resuming a page does not
+fabricate a storage mutation. Applications own any resume-time view refresh.
+Missed events during suspension, process termination, or realm loss are not
+replayed; the stored records remain the authority. Direct OPFS writes made
+outside DBOPFS are not observed by this contract.
+
 `createCompressedPNG({tableNames, additionalTables, signal})` returns an
 `image/png` Blob without downloading or writing records. Omitted `tableNames`
 selects all discovered saved tables; `[]` selects none. Named absent tables
@@ -2234,16 +2315,35 @@ unreadable row remains in its original string form so the owning application
 can display, diagnose, or recover it without silent data loss. DOM and storage
 errors remain observable. The logical `memories` table continues to map to the
 physical `memory` directory, and successful or already-absent empty-table
-removal invalidates both alias and cached-handle state. Transport: OPFS,
-DBOPFSWorker, Compression Streams.
+removal invalidates both alias and cached-handle state. Cross-document change
+delivery requires native `BroadcastChannel` in the same origin and storage
+partition, with the same application scope; separate WebView profiles do not
+share this transport. If it is unavailable, local change subscriptions and
+ordinary DBOPFS storage continue, without cross-document notification or a
+polling replacement. Transport: OPFS, DBOPFSWorker, Compression Streams, native
+BroadcastChannel, and the existing event-pubsub-backed canonical event owner.
 [Deep protocol details](protocols.md).
 
 ### Example
 
 ```javascript
-import * as module from '/arcane/modules/DBOPFS.js';
+import '/arcane/modules/DBOPFS.js';
+
+await dbopfs.readyPromise;
+const lifetime = new AbortController();
+const stop = dbopfs.subscribeChanges(function showCommittedParade(event) {
+  const change = event.detail;
+  if (change.tableName === 'moon_bus') {
+    console.log(change.action, change.fileName, change.remote);
+  }
+}, {signal: lifetime.signal});
 
-console.log(Object.keys(module));
+await dbopfs.set('moon_bus', 'squid-parade.json', {
+  destination: 'The moon', passengers: ['Captain Squid', 'One confused lobster']
+});
+// Another live page using this app/storage scope receives the same occurrence.
+// The application can read that one record when its view needs the body.
+stop(); // lifetime.abort() is the equivalent subscription cleanup.
 ```
 
 ## DBOPFSDocumentLibrary.js

package/docs/reference/sdk-api.md

@@ -1906,6 +1906,20 @@ default class PreferenceStore extends EventTarget
 subpath and managed browser key both resolve directly to the canonical runtime
 module. Deep protocol: [Browser runtime delivery](protocols.md#browser-runtime-delivery).
 
+The default adapter recognizes an absent optional preferences namespace only
+from the exact Core lookup tuple `code:'METHOD_NOT_ALLOWED'`,
+`reason:'core-namespace-unavailable'`, `namespace:'preferences'`, and the
+matching `method:'preferences.<operation>'`. Single `get`, `set`, and `delete`
+operations then retry once through the existing app-scoped local adapter after
+checking disposal and cancellation, preserving complete values and operation
+context. The existing Android unsupported-capability route is unchanged.
+An advertised `setMany` batch rejected for that exact absence retains its
+original rejection and performs no serial retry; subsequent operations use the
+selected local adapter.
+Partial-service, permission, persistence, transport and cancellation failures
+remain errors. Explicit adapters retain their own behavior. See the
+[complete PreferenceStore contract](runtime-modules.md#preferencestorejs).
+
 ### Example
 
 ```javascript
@@ -7325,6 +7339,15 @@ without restarting services. Its snapshot preserves complete service errors
 and active request state; see [runtime replay](core-runtime.md#state-and-frames)
 for authoritative readiness and reentrant lifecycle ordering.
 
+An unregistered method returns `METHOD_NOT_ALLOWED` with its exact `method`,
+first dotted `namespace`, and `reason:'core-namespace-unavailable'` when that
+namespace has neither a named service nor any registered method. Otherwise
+the reason is `core-method-unavailable`; built-in `system`, `app` and `version`
+namespaces count as present. This is a lookup result before handler or
+permission decisions. Handler/startup errors and older unmarked errors do not
+establish namespace absence. The dispatcher does not choose a replacement
+service; optional browser adapters own their documented response to absence.
+
 ### Availability and normalization
 
 **Node on Windows, Linux and macOS native hosts; Android requires its native host
@@ -8821,13 +8844,14 @@ occurrences use source `ai-model-controller`; every load or unload owns one
 non-null operation ID shared by its state and progress occurrences. Public
 progress retains the exact selected `modelId`, `phase`, state, and nested
 file-progress field names. Browser-WASM download progress preserves
-`completed`, `total`, and `unit:'files'` and adds `loadedBytes`, `totalBytes`,
-`remainingBytes`, `bytesPerSecond`, `etaSeconds`, `activeTransfers`,
-`transferLimit`, and `transferMode`. Unknown totals, rates, remaining values,
-and ETAs are `null`; applications format the raw byte and second measures for
-display. Chunk-driven transfer changes are coalesced on a 250 ms cadence, while
-plan, active-worker, and completion boundaries publish immediately and the existing five-second
-heartbeat repeats the latest record.
+`completed`, `total`, and `unit:'files'`, with complete per-file `members`
+reporting stored shards. A member's `total` remains `null` until its complete
+response is stored, unless the HTTP range plan already establishes its shard
+total. `activeTransfers`, `transferLimit`, and `transferMode` describe the
+active download work. Closed shards, active-worker changes, and completion
+boundaries publish semantic progress; the existing heartbeat repeats the latest
+record. These fields describe files and shards, without byte-based display
+requirements or estimated transfer rates.
 Accessor-bearing provider status
 and malformed progress reject with `ARCANE_AI_PROVIDER_STATUS_INVALID` and
 `ARCANE_AI_PROVIDER_PROGRESS_INVALID`. After disposal, lifecycle operations fail with
@@ -9420,8 +9444,8 @@ console.log(provider.status().state); // unloaded
 ### Overview
 
 Adapts an existing DBOPFS instance into a complete multi-model, ordered
-multi-file cache without renaming its public methods. Each completed whole
-member or Range part is committed independently. An interrupted set
+multi-file cache without renaming its public methods. Every new full response
+or Range transfer is committed in ordered parts. An interrupted set
 is not a cache hit, but its completed members remain available to the next
 install so only missing work is fetched.
 
@@ -9439,25 +9463,26 @@ workers
 when the probe returns a usable total from exposed `Content-Range` or optional
 descriptor `bytes`. The mutable
 result contains `kind`, `tableName`, `downloadConcurrency`, the original
-`adapter`, and `ready`, `install`, `ensure`, and `remove`. `ensure()` returns
+`adapter`, and `ready`, `install`, `ensure`, `remove`, and `fetchResource`. `ensure()` returns
 `files` and `cache:'cached'|'installed'`. It preserves the complete model content.
 `offline:true` never downloads and rejects a miss with
 `ARCANE_AI_MODEL_OFFLINE_MISS`.
 
-When supplied, `onProgress` receives existing ordered file progress plus
-`loadedBytes`, `totalBytes`, `remainingBytes`, `bytesPerSecond`, `etaSeconds`,
-`activeTransfers`, `transferLimit`, and `transferMode`. `activeTransfers` is the
-current transfer-worker count. Transfer mode is
-`probing`, `files`, `ranges`, or `single`. Unknown aggregate totals, remaining
-values, rates, and ETAs are `null`. Chunk-driven changes are coalesced on a
-250 ms cadence, with immediate records at download start, plan or total
-discovery, active-worker changes, and completion. `loadedBytes` includes current staged writes and
-restored completed members or Range parts; bytes from a failed partial write
-are removed from the total when that entry is discarded. A complete set of
-declared member `bytes` values
-makes split-model total and remaining progress available from the start;
-otherwise aggregate-dependent fields remain `null` until they are honestly
-known.
+When supplied, `onProgress` receives ordered file progress and `members`
+records with each file's `name`, committed `completed` parts, `total`, and
+`unit:'shards'`. Streaming totals remain `null` until the response finishes;
+previously complete files identify `state:'cached'`. `activeTransfers` is the
+current transfer-worker count, `transferLimit` is selected concurrency, and
+`transferMode` is `probing`, `files`, `ranges`, or `single`. Closed-part and
+lifecycle changes publish promptly, with an existing 250 ms heartbeat. No
+byte progress, transfer rate, or estimated completion time is produced.
+
+`fetchResource(input,{signal,onProgress,...requestOptions})` returns
+`{file,status,statusText,headers,url,redirected}` for a complete stored Fetch
+response. SDK browser model loaders use this shared owner for configuration,
+tokenizer, graph, external-data, and other fetched resources. Successful
+complete GET resources may be reused; supported HTTP ranges resume closed
+parts after interruption. Request framing stays at the transport boundary.
 
 ### Availability and normalization
 
@@ -9468,9 +9493,9 @@ resumable Range parts. For any source member, a followed redirect that
 turns the first `bytes=0-0` probe into `200` triggers one direct probe of the
 final URL. Confirmed support cancels the original body and starts the Range
 pool; refusal keeps the original response as the ordinary single-fetch path,
-with readable `Content-Length` used for progress. A missing `Content-Range` can
+without requiring a readable `Content-Length`. A missing `Content-Range` can
 use optional descriptor `bytes` for Range planning; without either total, the
-store falls back to one full fetch. A confirmed source member is divided into
+store uses one full fetch streamed into ordered persistent parts. A confirmed source member is divided into
 deterministic OPFS Range parts of roughly 4 MB each, up to 4,096 parts. A
 monolithic source may use at most
 `downloadConcurrency` Range workers; split sources keep one Range worker per
@@ -9479,7 +9504,7 @@ in order as one logical Blob. A later non-206, contradictory exposed Range
 response, or incorrectly framed body fails rather than assembling partial
 content. On failure or cancellation, peers settle while completed shards and
 Range parts remain available for retry; an unfinished active part restarts after
-refresh. A persisted Range part whose length does not match its requested HTTP
+refresh. Existing whole-file caches remain readable without migration. A persisted Range part whose length does not match its requested HTTP
 frame is discarded and fetched again. A complete whole member supersedes its
 redundant current Range fragments. Cleanup failure is warned without
 hiding the usable model. Wllama requires every selected model Blob or File to
@@ -9761,7 +9786,7 @@ retains the complete list of deletions already completed.
 
 Adapts an existing DBOPFS instance into a complete caller-selected speech
 runtime/model store. It serializes each selected model with an exclusive Web
-Lock, removes partial state after failure, stores ordinary mutable selection
+Lock, preserves complete peer files and closed parts after failure, stores ordinary mutable selection
 metadata before content, and treats a changed file inventory or source mapping
 as a cache miss that is downloaded again.
 
@@ -9771,7 +9796,7 @@ as a cache miss that is downloaded again.
 createDbopfsSpeechArtifactStore({ dbopfs, tableName='arcane_ai_browser_speech', fetchImpl=null, objectUrlFactory=null }={})
 ```
 
-The mutable result is `{protocol,tableName,prepare,remove}`.
+The mutable result is `{protocol,tableName,prepare,remove,fetchResource}`.
 `prepare(authority,{signal,onProgress,offline=false,security})` uses a complete
 compatible cache or downloads every declared file, preserves complete content
 and materializes object URLs, then returns
@@ -9781,9 +9806,18 @@ needs those URLs. `offline:true` never fetches and rejects a miss with
 authority's files and selection metadata. Optional `onProgress` receives
 preparation and download records with `phase`, `stage`, `message`, and the
 current `file` when available. File operations report actual `completed` and
-`total` inventory counts with `unit:'files'`; module preparation uses
+`total` inventory counts with `unit:'files'`, and `resource` carries the current
+closed-part progress with `unit:'shards'`; module preparation uses
 `total:null`. Cancellation stops progress along with the owning operation.
 
+New files stream into ordered DBOPFS parts with no required response length.
+Existing complete whole files stay readable without migration.
+`fetchResource(input,{signal,onProgress,...requestOptions})` returns
+`{file,status,statusText,headers,url,redirected}` and gives the dedicated
+speech Worker the same complete resource storage owner for runtime fetches.
+Native ESM imports and unmapped classic Worker internals retain their platform
+loader; they are not claimed as intercepted HTTP fetches.
+
 ### Availability and normalization
 
 **Browser with a ready DBOPFS instance, OPFS, Web Locks, Fetch or an injected

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "arcane-os",
-  "version": "0.68.0",
+  "version": "0.70.0",
   "description": "Arcane OS JavaScript SDK, project-local CLI, browser runtime, and repository-portable application packager.",
   "type": "module",
   "main": "./src/index.mjs",
@@ -123,7 +123,7 @@
     "test": "npm run test:unit && npm run test:functional && npm run test:integration && npm run test:regression",
     "test:release": "node ./bin/arcane-test.mjs test/npm-release.test.mjs",
     "test:unit": "node ./bin/arcane-test.mjs test/app-descriptor.test.mjs test/app-schema.test.mjs test/app-selection.test.mjs test/contracts.test.mjs test/conversation-closing-report.test.mjs test/doctor.test.mjs test/mail-credentials.test.mjs test/mail-outbox.test.mjs test/mail-public-api.test.mjs test/mail-send.test.mjs test/mail-transport.test.mjs test/native-windows-icon.test.mjs test/targets.test.mjs test/workspace-operation-lock.test.mjs",
-    "test:functional": "node ./bin/arcane-test.mjs test/ai-ollama-readiness.test.mjs test/core-ollama-lifecycle.test.mjs test/ai-request-model.test.mjs test/ai-request-retry.test.mjs test/ai-stream-cancellation.test.mjs test/browser-decisions.test.mjs test/browser-speech-providers.test.mjs test/browser-wasm-gpu-notice.test.mjs test/browser-wasm-download-resume.test.mjs test/chat-input.test.mjs test/chat-stream-speech.test.mjs test/chat-transcript-scroll.test.mjs test/chat-transient-retention.test.mjs test/cli.test.mjs test/continuous-voice-capture.test.mjs test/codex-app-server.test.mjs test/mcp-stdio-server.test.mjs test/core-classic-source.test.mjs test/core-client.test.mjs test/core-client-installation.test.mjs test/core-ai-installation.test.mjs test/core-llama-lifecycle.test.mjs test/core-development.test.mjs test/core-host.test.mjs test/core-model-assets.test.mjs test/core-native-services.test.mjs test/core-packaged-web.test.mjs test/core-runtime.test.mjs test/core-stdio.test.mjs test/dbopfs-document-library.test.mjs test/dbopfs-png.test.mjs test/dbopfs.test.mjs test/dev-server.test.mjs test/dev-pwa.test.mjs test/dom-event-instrumentation.test.mjs test/event-manager.test.mjs test/events.test.mjs test/file-preview.test.mjs test/import-map.test.mjs test/local-image-editing.test.mjs test/mail-cli.test.mjs test/mail-runtime.test.mjs test/mail-server.test.mjs test/markdown-editor.test.mjs test/markdown-media.test.mjs test/markdown-source-map.test.mjs test/modal.test.mjs test/native-decisions.test.mjs test/native-onnx.test.mjs test/native-module-packaging.test.mjs test/native-module-resource-references.test.mjs test/packaging.test.mjs test/pwa-packaging.test.mjs test/pwa-client.test.mjs test/pwa-install.test.mjs test/pwa-worker.test.mjs test/persistent-ai-chat-session.test.mjs test/reference-completeness.test.mjs test/rendered-print.test.mjs test/runtime-api-behavior.test.mjs test/runtime.test.mjs test/scaffold.test.mjs test/speech-playback.test.mjs test/site.test.mjs test/theme-manager.test.mjs test/twin-cloud-images.test.mjs test/twin-cloud.test.mjs test/websocket-client-import-map.test.mjs test/websocket.test.mjs test/update-check.test.mjs test/user-explicit-updates.test.mjs",
+    "test:functional": "node ./bin/arcane-test.mjs test/ai-ollama-readiness.test.mjs test/core-ollama-lifecycle.test.mjs test/ai-request-model.test.mjs test/ai-request-retry.test.mjs test/ai-stream-cancellation.test.mjs test/browser-decisions.test.mjs test/browser-speech-providers.test.mjs test/browser-speech-artifacts.test.mjs test/browser-speech-resource-bridge.test.mjs test/browser-wasm-gpu-notice.test.mjs test/browser-wasm-download-resume.test.mjs test/chat-input.test.mjs test/chat-stream-speech.test.mjs test/chat-transcript-scroll.test.mjs test/chat-transient-retention.test.mjs test/cli.test.mjs test/continuous-voice-capture.test.mjs test/codex-app-server.test.mjs test/mcp-stdio-server.test.mjs test/core-classic-source.test.mjs test/core-client.test.mjs test/core-client-installation.test.mjs test/core-ai-installation.test.mjs test/core-llama-lifecycle.test.mjs test/core-development.test.mjs test/core-host.test.mjs test/core-shared-host.test.mjs test/core-model-assets.test.mjs test/core-native-services.test.mjs test/core-packaged-web.test.mjs test/core-runtime.test.mjs test/core-stdio.test.mjs test/dbopfs-committed-events.test.mjs test/dbopfs-document-library.test.mjs test/dbopfs-model-resources.test.mjs test/dbopfs-png.test.mjs test/dbopfs.test.mjs test/dev-server.test.mjs test/dev-pwa.test.mjs test/dom-event-instrumentation.test.mjs test/event-manager.test.mjs test/events.test.mjs test/file-preview.test.mjs test/import-map.test.mjs test/local-image-editing.test.mjs test/mail-cli.test.mjs test/mail-runtime.test.mjs test/mail-server.test.mjs test/markdown-editor.test.mjs test/markdown-media.test.mjs test/markdown-source-map.test.mjs test/modal.test.mjs test/model-resource-bridge.test.mjs test/native-decisions.test.mjs test/native-onnx.test.mjs test/native-module-packaging.test.mjs test/native-module-resource-references.test.mjs test/packaging.test.mjs test/pwa-packaging.test.mjs test/pwa-client.test.mjs test/pwa-install.test.mjs test/pwa-worker.test.mjs test/persistent-ai-chat-session.test.mjs test/reference-completeness.test.mjs test/rendered-print.test.mjs test/runtime-api-behavior.test.mjs test/runtime.test.mjs test/scaffold.test.mjs test/speech-playback.test.mjs test/site.test.mjs test/theme-manager.test.mjs test/twin-cloud-images.test.mjs test/twin-cloud.test.mjs test/websocket-client-import-map.test.mjs test/websocket.test.mjs test/update-check.test.mjs test/user-explicit-updates.test.mjs",
     "test:integration": "node ./bin/arcane-test.mjs test/installed-package-runtime.test.mjs test/root-app-layout.test.mjs test/integrated-shared.test.mjs test/integrated-workspace.test.mjs test/mail-browser.test.mjs test/native-macos-provider.test.mjs test/native-plan.test.mjs test/native-portable-provider.test.mjs test/native-provider-loader.test.mjs test/npm-release.test.mjs test/release-bundle.test.mjs test/release-capability-smoke.test.mjs test/shared-payload-batch.test.mjs test/tarball.test.mjs test/browser-wasm-cpu.test.mjs test/wllama-webgpu-runtime.test.mjs",
     "test:regression": "node ./bin/arcane-test.mjs test/channel-workflows.test.mjs test/html-import-registration.test.mjs test/html-import-packaged-script.test.mjs test/logging-regression.test.mjs test/markdown-speech.test.mjs test/prepared-speech.test.mjs test/native-provider-generation.test.mjs test/speech-queue-regression.test.mjs test/testing.test.mjs test/test-sets.test.mjs",
     "check": "node tools/check-source.mjs && npm test",

package/runtime/arcane/components/theme-switcher.html

@@ -38,7 +38,7 @@
         overflow-wrap:anywhere;
     }
 
-    button:hover:not(:disabled) {
+    button:hover:not(:disabled):not([aria-pressed="true"]) {
         background:color-mix(in srgb,currentColor 14%,transparent);
     }
 

package/runtime/arcane/modules/AI.js

@@ -1182,7 +1182,6 @@ class AI {
     #speechJobSequence=0;
     #stopOllamaReady=null;
     #ttsSegmentation={...DEFAULT_TTS_SEGMENTATION};
-    #preparedSpeechReadiness = null;
     #preparedSpeechPlaybacks = new Set();
     #nativeSpeechPlaybacks = new Set();
     #speechUnlockContext = null;
@@ -4394,7 +4393,7 @@ class AI {
                     runtime.#browserSpeechTransition,activation.controller.signal
                 );
                 activation.controller.signal.throwIfAborted();
-                await runtime.#providerRuntime.setSpeechMuted(false);
+                await runtime.#providerRuntime.setSpeechMuted(false, {signal: activation.controller.signal});
                 if(runtime.#speechActivation!==activation)return false;
                 const status=runtime.#providerRuntime.status('tts');
                 runtime.muted=status.state!=='ready'||status.loaded!==true;
@@ -6336,7 +6335,7 @@ class AI {
         return result;
     }
 
-    prepareTTS({parts, storage = null, identity = null, signal = null, onState = null} = {}) {
+    prepareTTS({parts, textFormat, storage = null, identity = null, signal = null, onState = null} = {}) {
         if(this.#providerSpeechModel()?.speech?.playback==='native'){
             const error=new Error('Native browser speech has no audio file to prepare or store; use prepareTTSPlayback.');
             error.code='ARCANE_AI_TTS_AUDIO_EXPORT_UNAVAILABLE';
@@ -6384,7 +6383,7 @@ class AI {
             if(!is.finite(pauseAfterMs) || pauseAfterMs < 0) {
                 throw new RangeError('Prepared speech pauses must be nonnegative milliseconds.');
             }
-            const cleaned = stripSpeechFormatting(source.input);
+            const cleaned = textFormat === 'plain' ? source.input : stripSpeechFormatting(source.input);
             const {segments: outputs} = this.#segmentSpeechText(cleaned, true, segmentation);
             for(const [index, input] of outputs.entries()) {
                 if(!input.trim()) continue;
@@ -6409,22 +6408,7 @@ class AI {
             if(selected) {
                 const status = runtime.#providerRuntime.status('tts');
                 if(status.state !== 'ready' || status.loaded !== true) {
-                    if(!runtime.#preparedSpeechReadiness) {
-                        const readiness = runtime.#providerRuntime.setSpeechMuted(false);
-                        runtime.#preparedSpeechReadiness = readiness;
-                        readiness.finally(
-                            function releasePreparedSpeechReadiness() {
-                                if(runtime.#preparedSpeechReadiness === readiness) {
-                                    runtime.#preparedSpeechReadiness = null;
-                                }
-                            }
-                        ).catch(
-                            function reportPreparedSpeechReadinessFailure(error) {
-                                runtime.#traceSpeech('prepareTTS.readiness.error', {error});
-                            }
-                        );
-                    }
-                    await runtime.#preparedSpeechReadiness;
+                    await runtime.#providerRuntime.setSpeechMuted(false, {signal: requestSignal});
                     assertPreparedSpeechSelection();
                 }
             }
@@ -7175,6 +7159,7 @@ class AI {
                 'model',
                 'voice',
                 'input',
+                'textFormat',
                 'responseFormat',
                 'speed'
             ]);
@@ -7183,7 +7168,7 @@ class AI {
                     ||!acceptedKeys.has(key)
                     ||!Object.hasOwn(descriptors[key],'value')){
                     const error=new TypeError(
-                        'AI.fetchTTS accepts only model, voice, input, responseFormat, and speed data properties.'
+                        'AI.fetchTTS accepts only model, voice, input, textFormat, responseFormat, and speed data properties.'
                     );
                     error.code='ARCANE_AI_TTS_REQUEST_INVALID';
                     throw error;
@@ -7208,7 +7193,7 @@ class AI {
                 error.code='ARCANE_AI_TTS_INPUT_INVALID';
                 throw error;
             }
-            const input=speechInputPrepared===true
+            const input=speechInputPrepared===true||descriptors.textFormat?.value==='plain'
                 ?suppliedInput
                 :stripSpeechFormatting(suppliedInput);
             const selection=this.#providerRuntime.selection('tts');