arcane-os 0.88.1 → 0.89.0

package/docs/reference/mcp-stdio.md

@@ -75,7 +75,8 @@ Save this in the consuming application and configure the MCP client's subprocess
 command as `node` with that application's script path. Client configuration
 file formats and process launch policy remain client-owned. Change `menu` to
 change the complete result; no model, repository, or native host is needed for
-this example.
+this example. A native package can instead use its
+[existing bundled runtime](#launch-from-a-native-package).
 
 The application explicitly converts its domain record into an MCP result.
 The SDK does not guess from `content`, `message`, or other domain field names.
@@ -255,6 +256,80 @@ The adapter uses `-32700` for malformed JSON, `-32600` for invalid requests,
 `-32603` for internal failures, and `-32002` for a missing resource. Its
 `-32000` lifecycle error requests initialization before ordinary operations.
 
+## Launch from a native package
+
+The generated `runtime/arcane-core.mjs` accepts
+`--arcane-app-entry <app-relative-module>` to import an application-owned entry
+instead of starting ordinary Core. Include the entry and its complete local
+source closure in the application's `package.nativeResources`, for example:
+
+```json
+{
+  "package": {
+    "nativeResources": {
+      "include": ["native", "src", "package.json"]
+    }
+  }
+}
+```
+
+Save the complete example above as `native/moon-mcp.mjs`. Native packaging copies
+the selected files beneath the artifact's `app/` directory. It does not discover
+entry dependencies from this runtime argument or execute the entry during
+packaging. Public imports such as `arcane-os/mcp/stdio` use the artifact's
+existing SDK package and Node's ordinary package resolution.
+
+Configure the MCP client's command and argument array for the selected artifact:
+
+| Artifact | Command | Arguments |
+| --- | --- | --- |
+| Windows | `<artifact-root>/runtime/ArcaneCore.exe` | `["--arcane-app-entry", "native/moon-mcp.mjs"]` |
+| macOS | `<artifact-root>/runtime/node` | `["<artifact-root>/runtime/arcane-core.mjs", "--arcane-app-entry", "native/moon-mcp.mjs"]` |
+| Portable | The host's supported Node executable | `["<artifact-root>/runtime/arcane-core.mjs", "--arcane-app-entry", "native/moon-mcp.mjs"]` |
+
+These are placeholders for the actual native paths. For macOS, `artifact-root`
+is `<app-id>.app/Contents/Resources`. The portable provider supplies no Node
+executable. Windows uses its existing SEA executable and filesystem loader;
+do not pass `arcane-core.mjs` as a script argument to that executable. These
+commands select the runtime directly, not the GUI launcher, and create no
+window or second Core host.
+
+The module path resolves from the artifact's `app/`, independently of the
+client's working directory. Native path separators, spaces, Unicode, `#` and
+`%` retain their filesystem meaning through file-URL conversion. The original
+`process.argv` remains complete and unchanged, including this flag, its path,
+and every app argument. The flag is read from user arguments starting at index
+2 for both normal Node and SEA. A missing or empty value throws `TypeError`;
+module-loading failures remain actual errors and never start ordinary Core.
+
+This is a dynamic import: the entry runs its top-level code and observes its
+own session lifetime, as the example's `server.start()` and `await server.closed`
+do. Do not put its only startup behind `if (import.meta.main)`; the imported
+module is not Node's main entry. The SDK calls no default export or factory.
+
+App-entry mode skips ordinary Core launch-context loading, manifest service
+composition, state-directory creation, local-AI startup, shared-host startup,
+and Core signal handlers. If the application wants the existing explicit launch
+JSON or host state-root arguments, append them to the same argument array and
+read them deliberately in its entry:
+
+```javascript
+import {readCoreLaunchContext} from 'arcane-os/core/host';
+
+const context = await readCoreLaunchContext();
+```
+
+For example, append `"--arcane-launch-config", "<selected-launch.json>"`.
+Relative launch JSON paths retain their caller-working-directory meaning. The
+application chooses defaults, services and any connection to an existing Core;
+the entry selector neither reads nor applies the manifest's launch defaults.
+
+The application owns process signals, graceful MCP drain, and its underlying
+service shutdown. Keep stdout exclusively for MCP JSON-RPC and diagnostics on
+stderr; the ordinary Core `arcane/1` transport must not share those MCP pipes.
+When the flag is absent, ordinary Core startup and service lifecycle are
+unchanged. See [native entry composition](core-native-packaging.md#app-owned-runtime-entry).
+
 ## Evidence boundary
 
 `test/mcp-stdio-server.test.mjs` contains focused in-memory stream fixtures for

package/docs/reference/native-app-control.md

@@ -73,11 +73,11 @@ connection or other business result.
 | Member | Contract |
 | --- | --- |
 | `connectAppControl({endpoint, signal?, onError?})` | Connect once to the explicit running host. It never launches an app, creates Core, changes a profile or reconnects automatically. |
-| `status(options?)` | Returns app identity, platform/host, current URL, document generation, readiness, window title/state/client dimensions and available operations. Readiness describes the document, not models or application services. |
+| `status(options?)` | Returns app identity, platform/host, current URL, document generation, readiness, window title/state/client dimensions and available operations. Window state is `Normal`, `Maximized`, `Minimized`, or `Fullscreen`. Readiness describes the document, not models or application services. |
 | `inspect(parameters={}, options?)` | Optional `shadowPath` selects an open shadow root. Optional CSS `selector` selects zero or more elements within the selected root; omission selects the whole root. Optional `documentGeneration` selects the expected document. Returns complete HTML/text, live control state and DOM-derived role/name hints. |
 | `capture(parameters={}, options?)` | Returns `{mimeType:'image/png', data, documentGeneration, url}`. `data` contains the complete base64 PNG. Optional `documentGeneration` selects the expected document. |
 | `act(parameters, options?)` | Requires `documentGeneration`, one unambiguous CSS `selector` within the root selected by optional `shadowPath`, and the action fields below. |
-| `key(parameters, options?)` | Requires `documentGeneration` and `key:'Tab'`, `'Enter'`, or `'Space'`. Optional `shiftKey:true` is supported only for Tab. Sends one ordered press/release pair to the selected WebView's current focus. |
+| `key(parameters, options?)` | Requires `documentGeneration` and `key:'Tab'`, `'Enter'`, `'Space'`, or `'Escape'`. Optional `shiftKey:true` is supported only for Tab. Sends one ordered press/release pair to the selected WebView's current focus. |
 | `resize(parameters, options?)` | Requires positive integral native client `width` and `height` supported by WinForms. Optional `documentGeneration` selects the expected document. Resizes only a Normal window and returns immediate previous/actual client dimensions plus the subsequently observed CSS viewport. |
 | `close()` | Closes this caller's connection and cancels its pending requests. It never closes the app or Core. Returns the connection's completion promise. |
 | `closed` | Connection lifetime promise; actual transport failures remain observable. |
@@ -207,6 +207,8 @@ const moved = await app.key({documentGeneration: page.documentGeneration, key: '
 console.log(moved.previous.focusPath, moved.actual.focusPath);
 await app.key({documentGeneration: moved.documentGeneration, key: 'Tab', shiftKey: true});
 await app.key({documentGeneration: moved.documentGeneration, key: 'Enter'});
+const current = await app.inspect();
+await app.key({documentGeneration: current.documentGeneration, key: 'Escape'});
 ```
 
 Keys use the selected WebView's current focus. No selector, shadow path, frame
@@ -214,7 +216,10 @@ selection, focus assignment or desktop activation is performed. Tab and
 Shift+Tab use a fixed Tab `rawKeyDown`/`keyUp` pair, with the Shift modifier on
 both events for Shift+Tab. Enter and Space use `keyDown` with their corresponding
 text, followed by `keyUp`, preserving browser default actions and application
-`preventDefault` handling. Shift+Tab does not send a separate Shift key pair.
+`preventDefault` handling. Escape uses `key:'Escape'`, `code:'Escape'` and native
+virtual key 27 in a `rawKeyDown`/`keyUp` pair, without text fields. It follows the
+selected WebView's normal Escape handling; it does not promise that a particular
+dialog closes. Shift+Tab does not send a separate Shift key pair.
 The API exposes these fixed keys, not an arbitrary protocol method or script.
 
 The result contains `key`, `shiftKey`, `previous` and `actual` document views,
@@ -264,7 +269,7 @@ origin. Read `viewport` for the resulting CSS dimensions instead of assuming a
 particular DPI or zoom conversion.
 
 Immediately before the UI-thread mutation, the host checks the actual
-`WindowState` and records `previous:{title,state,width,height}`. It records
+window state and records `previous:{title,state,width,height}`. It records
 `actual` in the same shape immediately after the native setter, then observes
 the CSS `viewport` asynchronously. The result also contains `requested`,
 `resizeAttempted`, `resizeCompleted`, `documentGeneration` and `url`.
@@ -274,13 +279,20 @@ native snapshot and the document observation; these records are not an atomic
 native/CSS snapshot. Completion does not establish that asynchronous application
 resize handlers have settled.
 
-Maximized or minimized windows return `ARCANE_APP_CONTROL_FAILED` before any
+Maximized, minimized or fullscreen windows return `ARCANE_APP_CONTROL_FAILED` before any
 size mutation, with `reason:'unsupported-window-state'`,
 `supportedWindowState:'Normal'` and the complete current `window` in the error's
 `data` entries. The host never automatically restores, maximizes or minimizes a
 window to satisfy this request. Invalid dimensions return `INVALID_ARGUMENT`.
 The same state rule applies to explicit restoration.
 
+Native fullscreen reports `Fullscreen`, including while its underlying WinForms
+state is Normal. A minimized fullscreen window reports `Minimized`. The
+requesting document can select its state through
+[`Arcane.window.setState({state})`](core-client.md#current-window-state); app-control
+does not add a separate state-setting operation. That facade uses lowercase
+state values, while app-control preserves its existing capitalized values.
+
 Restore using the actual `previous.width` and `previous.height` from the
 operation being reversed, never a historical status snapshot or CSS viewport
 dimensions. Restoration is an explicit second request; cancellation does not

package/docs/reference/protocols.md

@@ -475,6 +475,20 @@ the selected runtime content. The lock document describes the selected
 installation and projected roots; it is not a content-identity or admission
 record.
 
+Both runtime materializers accept explicit `browserDecisions: true` to acquire
+the upstream bundled Transformers.js 4.3.0 entry, matching ONNX Runtime
+1.31.0-dev.20260914-8d85527a0 asyncify module/WASM, and license files into
+`arcane/sdk/ai/decisions-runtime/` before replacement. Default `false` performs
+no optional acquisition. The complete selected files remain unchanged;
+`workspace.decisions.started`/`workspace.decisions.progress` count completed
+files. Cancellation, HTTP failures and observer failures join acquisition
+cleanup and preserve the previous projection. Retain the option on each refresh
+that needs the closure. The optional `browserDecisions` result describes its
+directory, versions and filenames; installed materialization nests it under
+`workspaceRuntime`. Model/tokenizer data remain upstream and cache-owned.
+See [extension-local decisions](ai/browser-decisions.md#extension-local-executables-manifest-v3)
+for the separate `runtime.local: true` browser selection.
+
 `upgradeApplication()` and `arcane upgrade` run the application's ordinary
 `npm upgrade` command. They do not independently reconcile the installed SDK
 projection, semantic Arcane lock, or managed import map.

package/docs/reference/runtime-modules.md

@@ -128,7 +128,7 @@ own asynchronous work, cancellation, and backpressure.
 | [`RecordLinkIndex.js`](#recordlinkindexjs) | esm | Parses record links and builds their normalized index. | Cross-host | Fully normalized. |
 | [`RecordPassageIndex.js`](#recordpassageindexjs) | esm | Indexes text lines, page markers, dates, rules, and excerpts for record review. | Cross-host | Fully normalized. |
 | [`RecordReviewStore.js`](#recordreviewstorejs) | esm | Stores normalized record-review decisions through native storage or app-scoped local fallback. | Browser/native hybrid | Complete records preserved; unreadable stored content fails observably. |
-| [`RiskSignalAnalyzer.js`](#risksignalanalyzerjs) | esm | Matches configured risk signals and levels against complete text. | Cross-host | Fully normalized. |
+| [`RiskSignalAnalyzer.js`](#risksignalanalyzerjs) | esm | Matches configured risk signals and levels against complete text. | Cross-host | Complete literal text; existing non-string conversion only. |
 | [`ScamRiskPolicy.js`](#scamriskpolicyjs) | esm | Combines deterministic scam signals with optional Arcane blocked-domain evidence and safety guidance. | Cross-host | Complete mutable results; blocked-domain policy requires `secure:true`. |
 | [`ScopedOPFSCache.js`](#scopedopfscachejs) | esm | Provides a narrow exact-key JSON cache inside one app-owned OPFS namespace. | Browser / native WebView | Filename-safe keys, complete JSON values, and malformed-cache cleanup normalized; storage errors mixed. |
 | [`ScreenCapture.js`](#screencapturejs) | esm | Captures a display surface as image, video, or GIF with explicit lifecycle events. | Browser / native WebView | State/events normalized; permission and codec errors mixed. |
@@ -1386,7 +1386,11 @@ transcription-model load.
 **Cross-host state contract.** States are `unavailable`, `unloaded`, `loading`,
 `recovering`, `ready`, `unloading`, `error`, and `disposed`. Recovery remains
 `loaded: false`; `recovering` and `error` may retain `busy: true` with an actual
-`operationId` until the pending request settles. Revisions increase monotonically.
+`operationId` until the pending request settles. During `unloading`, an already
+loaded role may retain `busy: true` with its actual `operationId` while captured
+requests settle. That observation grants no readiness or permission for a new
+request and is not a `continuesAIRuntimeOperation` recovery state.
+Revisions increase monotonically.
 The events `arcane-ai-runtime-state`, `arcane-ai-runtime-intent`, and
 `arcane-ai-runtime-startup-settled` normalize observation only: receiving one
 does not grant a native capability, prove browser support, or load a provider.
@@ -4010,9 +4014,11 @@ Matches configured risk signals and levels against complete text.
 
 Exact exports: `DEFAULT_LEVELS`, `analyzeRiskSignals`.
 
+`analyzeRiskSignals(input, {signals, levels})` scans the complete `String(input ?? '')` without Unicode normalization or whitespace changes. Fullwidth characters and decomposed characters remain as supplied. Each signal's `RegExp.lastIndex` resets before testing; signal order, weights and selected levels determine the mutable `{level, matches, score, textLength}` result. `textLength` is the JavaScript string length after the existing non-string conversion; `null` and `undefined` become an empty string. Ordinary `ScamRiskPolicy.assessScamRisk()` uses this same literal-text path.
+
 ### Availability and normalization
 
-**Cross-host.** Fully normalized. Transport: In-process only. [Deep protocol details](protocols.md).
+**Cross-host.** Complete literal text; existing non-string conversion only. Transport: In-process only. [Deep protocol details](protocols.md).
 
 ### Example
 

package/docs/reference/sdk-api.md

@@ -1857,7 +1857,7 @@ create `arcane.lock.json` before serving, refreshing app import maps, or packagi
 ### Signature and result
 
 ```text
-async materializeInstalledSdkRuntime({workspaceRoot,sdkPackageSource,workspaceOperationLease,signal,onEvent}={})
+async materializeInstalledSdkRuntime({workspaceRoot,sdkPackageSource,browserDecisions=false,workspaceOperationLease,signal,onEvent}={})
 ```
 
 Import it through the exact dependency key declared by the workspace: normally
@@ -1868,6 +1868,16 @@ whole-tree replacement. The mutable result includes the installed-package
 location, materialized workspace runtime paths, and `workspaceLock` path and
 document. It does not install dependencies or merge application source.
 
+Explicit `browserDecisions: true` also acquires the bundled Transformers.js
+4.3.0 entry and matching ONNX Runtime 1.31.0-dev.20260914-8d85527a0 asyncify
+module/WASM and license files from their upstream distributions into
+`arcane/sdk/ai/decisions-runtime/`. It returns their `directory`,
+`transformersVersion`, `onnxRuntimeVersion` and `files` under
+`workspaceRuntime.browserDecisions`. The default `false` performs no optional
+acquisition. Select this option on each refresh that should retain those files.
+The [extension-local decision guide](ai/browser-decisions.md#extension-local-executables-manifest-v3)
+describes `runtime.local: true`, complete resource ownership and MV3 usage.
+
 Ordinary acquisition automatically recovers a workspace-operation lock when
 the recorded owner process is confirmed absent, without waiting solely for its
 six-hour expiry. Retry this public operation normally; `workspaceOperationLease`
@@ -1910,13 +1920,24 @@ the installed-package lock document owned by `materializeInstalledSdkRuntime()`.
 ### Signature and result
 
 ```text
-async materializeWorkspaceRuntimeContent({workspaceRoot,runtimeRoot=path.join(getSdkRoot(), 'runtime'),browserRuntimeRoot=getSdkBrowserRuntimeRoot(),signal,onEvent}={})
+async materializeWorkspaceRuntimeContent({workspaceRoot,runtimeRoot=path.join(getSdkRoot(), 'runtime'),browserRuntimeRoot=getSdkBrowserRuntimeRoot(),sdkVersion=SDK_VERSION,browserDecisions=false,signal,onEvent}={})
 ```
 
 The operation stages the complete projection, replaces the prior tree at the
 commit boundary, restores it if commit fails, and removes paths absent from the
 selected sources.
 
+`browserDecisions: true` acquires the same upstream executable closure described
+by `materializeInstalledSdkRuntime()` before replacement. Its result is at
+`result.browserDecisions` because this lower-level operation returns the
+workspace runtime directly. Full downloaded content remains unchanged; model
+and tokenizer data are not materialized. `workspace.decisions.started` and
+`workspace.decisions.progress` report completed files and the fixed total.
+Cancellation, HTTP failures and throwing/rejecting observers abort and join
+pending acquisitions before returning; the prior runtime remains in place.
+An HTTP failure retains its complete response in `error.response`, or in the
+corresponding member of `AggregateError.errors` when several operations fail.
+
 ### Availability and normalization
 
 **Node.** Complete workspace runtime content and a mutable materialization result. Deep protocol: [Installed SDK runtime materialization](protocols.md#installed-sdk-runtime-materialization).
@@ -7122,6 +7143,21 @@ no engine. The native routes of `AI.fetchTTS(payload, signal)` and
 `AI.fetchSTT(audio, signal)` forward their signals through these calls and
 normalize cancellation to `AbortError` with `ARCANE_AI_REQUEST_ABORTED`.
 
+`facade.window.state({signal}?)` reads the calling document's native window;
+`facade.window.setState({state}, {signal}?)` selects `normal`, `maximized` or
+`fullscreen` for that same window. The matching Windows host returns
+`{platform:'windows', supported:true, state}`, with observed `state` also able
+to be `minimized`. Fullscreen removes the frame and fills the selected monitor;
+leaving it restores the preceding normal bounds and frame controls before any
+requested maximization. Visible state transitions prevent activation/focus
+assignment to the requesting window without changing TopMost, Core, origin or
+profile. Optional `native.window.state` selects startup state after initial
+sizing; omission preserves host behavior. Saved Settings remain application-owned.
+Cancellation does not undo an already-applied change. Other hosts retain their
+actual unavailable-method/transport errors; the facade provides no fallback.
+See [current-window state](core-client.md#current-window-state) for complete
+native errors, partial-state evidence, navigation and cleanup ownership.
+
 `facade.window.setTheme(presentation, {signal}?)` forwards the complete
 presentation to the current native window, independently of OS-user appearance.
 Optional `backgroundColor` and `textColor` accept `{red,green,blue,alpha}` or
@@ -7777,6 +7813,17 @@ published SDK/runtime dependencies and the canonical Core entry/client into a
 fresh output directory. Service factories are imported only when a real native
 host later launches the generated Core entry, never during packaging.
 
+The generated `runtime/arcane-core.mjs` also accepts
+`--arcane-app-entry <app-relative-module>` through the host's supported Node
+executable; the portable provider supplies no executable. Include that module
+and its complete source closure through `package.nativeResources`. The flag
+imports it from the packaged `app/` directory, preserves complete `process.argv`,
+and runs its top-level work rather than invoking an export or making it
+`import.meta.main`. The entry owns explicit launch-context reads, services,
+signals and shutdown; ordinary Core startup is skipped only in this mode.
+See [app-owned runtime entry](core-native-packaging.md#app-owned-runtime-entry)
+and [packaged MCP commands and lifetime](mcp-stdio.md#launch-from-a-native-package).
+
 Explicit `native.launchContext.coreListener:{endpoint}` also composes one passive
 model observation service after `startCoreHost()` and before listener binding,
 using that runtime and existing services exposing `localai.status`, `image.status`
@@ -7784,11 +7831,13 @@ and `decisions.status`. Missing owners remain `null`; renderer attachment stays
 application-owned. Ordinary stdio and shared/headless branches gain no model
 startup or readiness barrier. See [native observation composition](core-native-packaging.md#launch-time-locations).
 
-An optional `appDescriptor.native.window` record carries `width`, `height` and
-`resizable` into `manifest.window`. Dimensions are positive integral logical
-client units; `resizable` is an optional boolean. Omitted fields remain omitted.
-The portable payload records the selection; the selected platform host owns
-its window behavior. See [initial native window size](core-native-packaging.md#initial-native-window-size).
+An optional `appDescriptor.native.window` record carries `width`, `height`,
+`resizable` and `state` into `manifest.window`. Dimensions are positive integral
+logical client units; `resizable` is an optional boolean, and `state` selects
+`normal`, `maximized` or `fullscreen`. Omitted fields remain omitted. The portable
+payload records the selection; the matching Windows host applies it, while
+current other-platform hosts retain their existing window behavior. See
+[initial native window size and state](core-native-packaging.md#initial-native-window-size).
 
 ### Availability and normalization
 
@@ -7905,11 +7954,25 @@ The matching Windows host consumes `appDescriptor.native.window` through
 `manifest.window`. Optional `width` and `height` select initial client dimensions
 in 96-DPI logical units; the host scales them for its actual DPI and fits the
 outer window within the current screen's usable area. Optional `resizable:false`
-selects a fixed-size border and disables maximizing. Omitted fields preserve
-the existing host defaults. Initial sizing preserves a window already restored
-to a non-normal state and does not add saved-bounds storage. The initial-fit
-logic is not reapplied during later user resizing. See [initial native window size](core-native-packaging.md#initial-native-window-size)
-for a complete descriptor example and the other-platform boundary.
+selects a fixed-size border and disables the maximize control. Optional `state`
+selects `normal`, `maximized` or `fullscreen`; the host applies an explicit state
+after its initial sizing pass and before the composing launcher's `Load` handler.
+Initial sizing runs only for a Normal window. Omitted fields preserve existing
+host choices, including the current state when `state` is omitted. Fullscreen
+retains normal bounds and frame controls for restoration. No saved-bounds store
+is added, and initial-fit logic is not reapplied during later user resizing.
+See [initial native window size and state](core-native-packaging.md#initial-native-window-size)
+for the complete descriptor and unchanged other-platform behavior.
+
+The packaged `runtime/ArcaneCore.exe` also accepts
+`--arcane-app-entry <app-relative-module>` directly, without a script argument
+or the GUI launcher. Include the entry and complete source closure through
+`package.nativeResources`. It imports the selected packaged `app/` module with
+complete `process.argv` unchanged, running top-level work without invoking an
+export or making it `import.meta.main`. The entry owns explicit launch-context
+reads, services, signals and shutdown; this mode skips ordinary Core startup,
+while omission retains it. See [app-owned runtime entry](core-native-packaging.md#app-owned-runtime-entry)
+and [packaged MCP commands and lifetime](mcp-stdio.md#launch-from-a-native-package).
 
 The returned `arcane-native-builder/1` provider exposes `describe`, `doctor`,
 `prepare`, `build`, `verify` and `run`. Build returns `{app,target,manifest}`
@@ -8285,7 +8348,7 @@ explicit existing path. The application owns the remote, branch and Core API.
 ### Signature and result
 
 ```text
-createRepositoryWorkspace({name,directory,dataRoot,remote,branch,longPaths,gitIdentity,onEvent,run=runProcess}={})
+createRepositoryWorkspace({name,directory,dataRoot,remote,branch,longPaths,cloneIdentity,gitIdentity,onEvent,run=runProcess}={})
 ```
 
 Returns `{directory,open,status,configuration,pull,push,write,close,drain,dispose}`. Construction does
@@ -8304,6 +8367,16 @@ unchanged; no global setting or data migration is performed. Git's ordinary
 configuration precedence, hooks and single-clone lifecycle remain in effect.
 See [Windows long paths](core-repositories.md#windows-long-paths-for-a-new-checkout).
 
+Optional `cloneIdentity:{name?,email?}` captures exact author strings and saves
+only supplied fields in a newly created checkout through Git's `clone --config`
+before its first checkout, on every supported platform. Empty strings are
+explicit values; omitted or `undefined` fields preserve inherited and template
+configuration. Existing repositories are never reconfigured. Unrepresentable
+process arguments fail without changing the supplied text. This option changes
+no global configuration, credentials, remote or branch, and does not identify
+the authenticated account. Command-local `gitIdentity` remains independent.
+See [clone-local author selection](core-repositories.md#clone-local-author-selection).
+
 Optional `gitIdentity:{name?,email?,username?}` captures explicit non-secret
 settings for child Git operations without writing global/local configuration.
 Selected author fields override inherited child author/committer fields;
@@ -8396,15 +8469,16 @@ Construction selects no model and installs no runtime or transport.
 ### Signature and result
 
 ```text
-createCoreLocalAIProvider({client,id='llama.cpp'}={})
+createCoreLocalAIProvider({client,id='llama.cpp',prepareModel}={})
 ```
 
 Import it from `arcane-os/ai/core-local`. The provider implements
 `arcane-ai-provider/2` and exposes `catalog`, `status`, `inspect`, `load`,
 `request`, `unload` and `dispose`. Register it with the shared AI provider runtime,
 select the exact provider/model with `localOnly:true`, and load that selection.
-Requests wait for the requested model's actual readiness, preserve complete
-payloads and parsed streaming chunks, and cancel on observed readiness loss.
+`load()` waits for the selected model's actual readiness; inference requests
+require that load to have completed successfully. Requests preserve complete
+payloads and parsed streaming chunks and cancel on observed readiness loss.
 Missing Core reports unavailability; it does not choose a browser or cloud route.
 Dispose/unregister at the caller's owning lifecycle boundary.
 
@@ -8418,6 +8492,17 @@ client, so never-loaded and already-unloaded providers send no native unload.
 The provider/2 runtime reconciles status at its operation boundaries; this
 does not add an idle role-state subscription.
 
+Optional `prepareModel({selection,signal,progress})` runs at actual load and
+returns `{assetProjectionId,resourcePaths,executionTarget,release?}`. Direct
+`load` fields with those names override preparation when defined; an explicit
+`executionTarget:null` requests the runtime default. Preparation release is
+awaited after native load settles, including failure, cancellation and late
+preparation results. The current successfully completed load owns readiness
+and inference; a failed replacement cannot reuse an older model's ready state.
+Native cleanup owns the last dispatched selection, while preparation alone
+creates no native unload obligation. `status().execution` forwards native
+execution diagnostics, including configured and observed targets separately.
+
 ```javascript
 import {createCoreLocalAIProvider} from 'arcane-os/ai/core-local';
 import {getAIProviderRuntime} from 'arcane-os/ai-provider-runtime';
@@ -8440,7 +8525,7 @@ separate states; prompts, models and application policy remain caller-owned.
 ### Signature and result
 
 ```text
-createLocalAIService(configuration,{appRoot,runtimes=[],signal,onEvent,prepare}={})
+createLocalAIService(configuration,{appRoot,runtimes=[],signal,onEvent,prepare,executionDevices}={})
 ```
 
 Import it from `arcane-os/core/local-ai`. `configuration` is the authored local-AI
@@ -8473,6 +8558,19 @@ Explicit load retains startup and exact catalog-membership checks.
 carry original parsed chunks with `streamId`; terminal responses remain complete.
 There is no background health polling or implicit model choice.
 
+For managed llama.cpp loading, `llama.load` also accepts `assetProjectionId`,
+`resourcePaths:{model}` and `executionTarget`. The existing model-assets owner
+retains the exact projected GGUF through actual server exit. An omitted target
+retains the same model's selection or configured default; `null` requests the
+runtime default. `{deviceId}` uses this computer's execution-device catalog.
+Windows NVIDIA selection resolves that physical device to its CUDA identity;
+unsupported or unavailable targets report their actual failure. Runtime
+`execution` reports requested, resolved and configured targets with
+`observedTarget:null`; configuration does not establish physical execution.
+An optional `executionDevices` catalog is borrowed by ONNX and llama.cpp; its
+supplying owner retains disposal responsibility. Existing external listeners
+retain their own model/device selection and reject managed reconfiguration.
+
 ```javascript
 import {createLocalAIService} from 'arcane-os/core/local-ai';
 
@@ -9156,7 +9254,8 @@ portable Node local IPC; other native host adapters do not yet implement these
 document operations. No application is launched, no desktop window is activated,
 and no automatic reconnect or action retry occurs.
 
-`status(options)` reports current app/window/document readiness.
+`status(options)` reports current app/window/document readiness, including
+observed window state `Normal`, `Maximized`, `Minimized` or `Fullscreen`.
 `inspect(parameters={},options)` returns complete selected DOM HTML/text
 and live control state. Inspection and actions accept optional `shadowPath`, an
 ordered array of unique CSS host selectors through open shadow roots; their
@@ -9171,7 +9270,8 @@ of the rendered viewport. `act(parameters,options)` requires a returned
 fields.
 
 `key(parameters,options)` requires the observed `documentGeneration` and
-`key:'Tab'`, `'Enter'` or `'Space'`; `shiftKey:true` is supported only for Tab.
+`key:'Tab'`, `'Enter'`, `'Space'` or `'Escape'`; `shiftKey:true` is supported only
+for Tab.
 It sends a fixed ordered press/release pair to the selected WebView's current
 focus, without selecting an element or activating the desktop window. Accepted
 pairs share one keyboard owner. Once a press is attempted, its matching release
@@ -9183,9 +9283,9 @@ or navigation can change between phases.
 
 `resize(parameters,options)` accepts positive integral native client `width`
 and `height` supported by WinForms, plus optional `documentGeneration`. It changes
-only `ClientSize` while the actual window is `Normal`; maximized or minimized
-windows fail before size mutation. Results retain immediate `previous`/`actual`
-native dimensions, requested dimensions, attempted/completed flags and a later
+only `ClientSize` while the actual window is `Normal`; maximized, minimized or
+fullscreen windows fail before size mutation. Results retain immediate
+`previous`/`actual` native dimensions, requested dimensions, attempted/completed flags and a later
 observed CSS `viewport`. Platform constraints can change actual dimensions;
 native and CSS observations are not an atomic snapshot. Restore explicitly with
 the same operation's `previous.width` and `previous.height`, not CSS dimensions
@@ -9990,9 +10090,21 @@ selections report its failure without precision fallback. For Laya FP32, pass
 Cancellation terminates that client's Worker and rejects its in-flight work.
 No decisions are inserted into chat history or durable storage.
 
+For explicitly selected extension-local execution, supply `runtime: {local:
+true}` after materializing with `browserDecisions: true`. The SDK directly
+imports its deployment-local `decisions-runtime/transformers.min.js` and
+matched asyncify module/WASM. Explicit `runtime.moduleUrl` and
+`runtime.wasmPaths: {mjs, wasm}` may select other compatible files in that same
+deployment; a directory string is also accepted for `wasmPaths`. This mode
+disables executable Blob preparation and upstream WASM cache/proxy creation,
+selects one WASM thread, and preserves the caller's model, precision and
+inference backend. With `store`, only the exact selected executable URLs bypass
+it; model, tokenizer, configuration and external-data resources retain that
+store. Local mode is opt-in; default browser behavior remains unchanged.
+
 Optional `store` is an existing SDK DBOPFS model or speech store exposing
 `fetchResource(input, options)`. It remains outside cloned Worker configuration.
-Explicit activation first stores the complete selected `runtime.moduleUrl`
+Without `runtime.local`, explicit activation first stores the complete selected `runtime.moduleUrl`
 entry and materializes it as a JavaScript object URL without rewriting source.
 The configured original URL remains the resource selection for later loads.
 The selected loader also routes its actual model/configuration/tokenizer

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "arcane-os",
-  "version": "0.88.1",
+  "version": "0.89.0",
   "description": "Arcane OS JavaScript SDK, project-local CLI, browser runtime, and repository-portable application packager.",
   "type": "module",
   "main": "./src/index.mjs",
@@ -129,7 +129,7 @@
   "scripts": {
     "test": "npm run test:unit && npm run test:functional && npm run test:integration && npm run test:regression",
     "test:release": "node ./bin/arcane-test.mjs test/npm-release.test.mjs",
-    "test:unit": "node ./bin/arcane-test.mjs test/app-descriptor.test.mjs test/app-schema.test.mjs test/app-selection.test.mjs test/contracts.test.mjs test/conversation-closing-report.test.mjs test/doctor.test.mjs test/mail-credentials.test.mjs test/mail-outbox.test.mjs test/mail-public-api.test.mjs test/mail-send.test.mjs test/mail-transport.test.mjs test/native-windows-icon.test.mjs test/targets.test.mjs test/workspace-operation-lock.test.mjs",
+    "test:unit": "node ./bin/arcane-test.mjs test/app-descriptor.test.mjs test/app-schema.test.mjs test/app-selection.test.mjs test/contracts.test.mjs test/conversation-closing-report.test.mjs test/doctor.test.mjs test/mail-credentials.test.mjs test/mail-outbox.test.mjs test/mail-public-api.test.mjs test/mail-send.test.mjs test/mail-transport.test.mjs test/native-windows-icon.test.mjs test/risk-signal-analyzer.test.mjs test/targets.test.mjs test/workspace-operation-lock.test.mjs",
     "test:functional": "node ./bin/arcane-test.mjs test/ai-ollama-readiness.test.mjs test/core-ollama-lifecycle.test.mjs test/ai-request-model.test.mjs test/ai-request-retry.test.mjs test/ai-stream-cancellation.test.mjs test/browser-decisions.test.mjs test/browser-kokoro-complete-input.test.mjs test/browser-speech-providers.test.mjs test/browser-speech-artifacts.test.mjs test/browser-speech-resource-bridge.test.mjs test/browser-wasm-gpu-notice.test.mjs test/browser-wasm-download-resume.test.mjs test/chat-input.test.mjs test/chat-stream-speech.test.mjs test/chat-transcript-scroll.test.mjs test/chat-transient-retention.test.mjs test/cli.test.mjs test/continuous-voice-capture.test.mjs test/codex-app-server.test.mjs test/mcp-stdio-server.test.mjs test/core-classic-source.test.mjs test/core-client.test.mjs test/core-client-installation.test.mjs test/core-ai-installation.test.mjs test/core-llama-lifecycle.test.mjs test/core-development.test.mjs test/core-host.test.mjs test/core-shared-host.test.mjs test/core-model-assets.test.mjs test/core-native-services.test.mjs test/core-packaged-web.test.mjs test/core-runtime.test.mjs test/core-stdio.test.mjs test/dbopfs-committed-events.test.mjs test/dbopfs-document-library.test.mjs test/dbopfs-model-resources.test.mjs test/dbopfs-png.test.mjs test/dbopfs.test.mjs test/dev-server.test.mjs test/dev-pwa.test.mjs test/document-acquisition.test.mjs test/dom-event-instrumentation.test.mjs test/event-manager.test.mjs test/events.test.mjs test/execution-devices.test.mjs test/file-preview.test.mjs test/import-map.test.mjs test/local-image-editing.test.mjs test/mail-cli.test.mjs test/mail-runtime.test.mjs test/mail-server.test.mjs test/markdown-editor.test.mjs test/markdown-media.test.mjs test/markdown-source-map.test.mjs test/modal.test.mjs test/model-resource-bridge.test.mjs test/native-decisions.test.mjs test/native-onnx.test.mjs test/native-module-packaging.test.mjs test/native-module-resource-references.test.mjs test/packaging.test.mjs test/pwa-packaging.test.mjs test/pwa-client.test.mjs test/pwa-install.test.mjs test/pwa-worker.test.mjs test/persistent-ai-chat-session.test.mjs test/reference-completeness.test.mjs test/rendered-print.test.mjs test/runtime-api-behavior.test.mjs test/runtime.test.mjs test/scaffold.test.mjs test/speech-playback.test.mjs test/site.test.mjs test/theme-manager.test.mjs test/twin-cloud-images.test.mjs test/twin-cloud.test.mjs test/websocket-client-import-map.test.mjs test/websocket.test.mjs test/update-check.test.mjs test/user-explicit-updates.test.mjs",
     "test:integration": "node ./bin/arcane-test.mjs test/installed-package-runtime.test.mjs test/root-app-layout.test.mjs test/integrated-shared.test.mjs test/integrated-workspace.test.mjs test/mail-browser.test.mjs test/native-macos-provider.test.mjs test/native-plan.test.mjs test/native-portable-provider.test.mjs test/native-provider-loader.test.mjs test/npm-release.test.mjs test/release-bundle.test.mjs test/release-capability-smoke.test.mjs test/shared-payload-batch.test.mjs test/tarball.test.mjs test/browser-wasm-cpu.test.mjs test/wllama-webgpu-runtime.test.mjs",
     "test:regression": "node ./bin/arcane-test.mjs test/channel-workflows.test.mjs test/html-import-registration.test.mjs test/html-import-packaged-script.test.mjs test/logging-regression.test.mjs test/markdown-speech.test.mjs test/prepared-speech.test.mjs test/ai-audio-output.test.mjs test/native-provider-generation.test.mjs test/speech-queue-regression.test.mjs test/testing.test.mjs test/test-sets.test.mjs",

package/runtime/arcane/modules/RiskSignalAnalyzer.js

@@ -8,12 +8,8 @@ const DEFAULT_LEVELS=[
     {minimum:0,id:'low'},
 ];
 
-function normalizeText(value){
-    return String(value??'').normalize('NFKC');
-}
-
 export function analyzeRiskSignals(input,{signals=[],levels=DEFAULT_LEVELS}={}){
-    const text=normalizeText(input);
+    const text=String(input??'');
     const matches=[];
     let score=0;
 

package/schemas/arcane-app.schema.json

@@ -139,11 +139,12 @@
         "window": {
           "type": "object",
           "additionalProperties": false,
-          "description": "Initial native client dimensions in logical pixels at 96 DPI, and whether the user can resize the window. Omitted fields retain the host defaults.",
+          "description": "Initial normal client dimensions in logical pixels at 96 DPI, resizing behavior, and optional native window state. Omitted fields retain the host defaults.",
           "properties": {
             "width": { "type": "integer", "minimum": 1 },
             "height": { "type": "integer", "minimum": 1 },
-            "resizable": { "type": "boolean" }
+            "resizable": { "type": "boolean" },
+            "state": { "enum": ["normal", "maximized", "fullscreen"] }
           }
         },
         "bundledApps": {
@@ -283,7 +284,9 @@
                 "properties": {
                   "id": { "enum": ["llama.cpp", "ollama", "onnx", "stable-diffusion.cpp"] },
                   "version": { "type": "string" },
-                  "url": { "type": "string" }
+                  "url": { "type": "string" },
+                  "backend": { "type": "string", "description": "llama.cpp: auto, cpu or cuda. Image runtimes: auto, metal or cpu." },
+                  "companionUrl": { "type": "string", "description": "Explicit CUDA runtime companion archive for a custom llama.cpp CUDA URL." }
                 }
               },
               { "$ref": "#/$defs/whisperRuntime" }
@@ -295,6 +298,13 @@
           "properties": {
             "url": { "type": "string" },
             "model": { "type": "string" },
+            "alias": { "type": "string" },
+            "executionTarget": {
+              "oneOf": [
+                { "type": "null" },
+                { "type": "object", "required": ["deviceId"], "properties": { "deviceId": { "type": "string" } } }
+              ]
+            },
             "modelsDirectory": { "type": "string" },
             "args": { "type": "array", "items": { "type": "string" } }
           }

package/schemas/arcane-package.schema.json

@@ -163,7 +163,9 @@
                 "properties": {
                   "id": { "enum": ["llama.cpp", "ollama", "onnx", "stable-diffusion.cpp"] },
                   "version": { "type": "string" },
-                  "url": { "type": "string" }
+                  "url": { "type": "string" },
+                  "backend": { "type": "string", "description": "llama.cpp: auto, cpu or cuda. Image runtimes: auto, metal or cpu." },
+                  "companionUrl": { "type": "string", "description": "Explicit CUDA runtime companion archive for a custom llama.cpp CUDA URL." }
                 }
               },
               { "$ref": "#/$defs/whisperRuntime" }
@@ -175,6 +177,13 @@
           "properties": {
             "url": { "type": "string" },
             "model": { "type": "string" },
+            "alias": { "type": "string" },
+            "executionTarget": {
+              "oneOf": [
+                { "type": "null" },
+                { "type": "object", "required": ["deviceId"], "properties": { "deviceId": { "type": "string" } } }
+              ]
+            },
             "modelsDirectory": { "type": "string" },
             "args": { "type": "array", "items": { "type": "string" } }
           }