ima2-gen 3.13.1 → 3.14.0

package/docs/DOCKER.zh-CN.md

@@ -9,7 +9,7 @@ ima2-gen运送多级`Dockerfile`（问题＃114）。该图像构建了
 docker build -t ima2-gen .
 docker run -d --name ima2 \
   -p 3333:3333 \
-  -e IMA2_LAN_TOKEN=change-me \
+  -e IMA2_LAN_TOKEN \
   -v ima2-data:/data \
   ima2-gen
 ```
@@ -17,11 +17,18 @@ docker run -d --name ima2 \
 或者使用 compose：
 
 ```bash
-IMA2_LAN_TOKEN=change-me docker compose up -d
+docker compose up -d
 ```
 
-然后打开`http://localhost:3333/?token=change-me`（或将令牌作为
-`x-ima2-token`标头打开API来电）。
+请先在环境中设置自己生成的强随机 `IMA2_LAN_TOKEN`，不要使用示例令牌。
+然后打开 `http://localhost:3333/`，在工作室登录表单中输入令牌。
+浏览器使用 HttpOnly 会话访问 API、图片、视频和 SSE；令牌不保存在浏览器存储中。
+
+更改发布端口或使用代理时，设置 `IMA2_PUBLIC_ORIGINS` JSON 数组，
+例如 `["http://localhost:8080"]`。TLS 代理必须保留 Host/Origin 并转发 Set-Cookie。
+HTTP 不加密凭据，仅适用于可信网络；不可信网络请使用 TLS/VPN。
+生成文件现需授权且不缓存，但旧缓存和已下载的副本无法撤回。
+重启会使会话失效，不会删除文件。详见 [访问协议](API.md#local-and-lan-access) 和 [CLI 认证](CLI.md#lan-server-authentication)。
 
 ## 为什么`IMA2_LAN_TOKEN`是必须的
 

package/docs/DOCKER.zh-TW.md

@@ -9,7 +9,7 @@ ima2-gen運送多級`Dockerfile`（問題＃114）。該圖像建構了
 docker build -t ima2-gen .
 docker run -d --name ima2 \
   -p 3333:3333 \
-  -e IMA2_LAN_TOKEN=change-me \
+  -e IMA2_LAN_TOKEN \
   -v ima2-data:/data \
   ima2-gen
 ```
@@ -17,11 +17,18 @@ docker run -d --name ima2 \
 或使用 compose：
 
 ```bash
-IMA2_LAN_TOKEN=change-me docker compose up -d
+docker compose up -d
 ```
 
-然後打開`http://localhost:3333/?token=change-me`（或將令牌作為
-`x-ima2-token`標頭打開API來電）。
+請先在環境中設定自行產生的強隨機 `IMA2_LAN_TOKEN`，不要使用範例權杖。
+然後開啟 `http://localhost:3333/`，在工作室登入表單輸入權杖。
+瀏覽器使用 HttpOnly 工作階段存取 API、圖片、影片與 SSE；權杖不會存入瀏覽器儲存空間。
+
+變更發布連接埠或使用代理時，設定 `IMA2_PUBLIC_ORIGINS` JSON 陣列，
+例如 `["http://localhost:8080"]`。TLS 代理須保留 Host/Origin 並轉送 Set-Cookie。
+HTTP 不會加密憑證，僅適用可信網路；不可信網路請使用 TLS/VPN。
+生成檔案現在需要授權且不快取，但無法撤回舊快取或已下載的副本。
+重新啟動會使工作階段失效，不會刪除檔案。詳見 [存取協定](API.md#local-and-lan-access) 與 [CLI 認證](CLI.md#lan-server-authentication)。
 
 ## 為什麼`IMA2_LAN_TOKEN`是必須的
 

package/docs/FAQ.md

@@ -71,6 +71,19 @@ again.
 
 ## Authentication and providers
 
+### Why does LAN access now show a studio sign-in page or return 401 for media?
+
+LAN APIs and generated images/videos now share an authenticated session. Open the
+studio and enter its configured LAN token; CLI users set `IMA2_LAN_TOKEN` and an
+explicit `--server` / `IMA2_SERVER`. This is separate from provider login. Sessions
+expire after eight hours or server restart. Reconnect does not replay generation,
+and sign-out does not cancel accepted work. No generated files are deleted.
+
+If a Docker port or proxy address differs, configure its exact
+`IMA2_PUBLIC_ORIGINS` value. HTTP requires a trusted network; use TLS/VPN otherwise.
+Old downloaded/cached copies cannot be revoked. See the [access contract](API.md#local-and-lan-access)
+and [CLI setup](CLI.md#lan-server-authentication).
+
 ### Do I need an OpenAI API key?
 
 No for the default generation path. The normal path uses your local Codex/ChatGPT OAuth session.

package/docs/NPX_QUICKSTART.md

@@ -1,5 +1,7 @@
 # npx Quickstart
 
+The package engine requirement applies to npx too; source `.ts` files require the normal build before emitted `.js` files are run.
+
 > The recommended install method is `npm install -g ima2-gen`. This page covers
 > the alternative `npx` workflow for one-shot usage without a global install.
 
@@ -11,6 +13,10 @@ npx ima2-gen serve
 
 Then open `http://localhost:3333`.
 
+To check the installed package without starting a server or reading provider
+credentials, run `npx ima2-gen doctor --installation --json`. A failed local
+prerequisite exits1; missing provider credentials are not installation failures.
+
 If ChatGPT OAuth is not logged in yet:
 
 ```bash

package/docs/README.ja.md

@@ -1,5 +1,18 @@
 # ima2-gen
 
+<!-- runtime-install:generated:start -->
+| Contract | Value |
+|---|---|
+| Node engine | `>=22` |
+| npm toolchain | `npm@11.18.0` |
+| Release Node | `24.17.0` |
+| CLI entry | `bin/ima2.js` |
+| OpenAI SDK | `^7.4.0` |
+| Express | `^5.1.0` |
+<!-- runtime-install:generated:end -->
+
+インストーラーはパッケージメタデータから Node.js の最低バージョンを読み、サーバー起動前にオフライン検査を行います。
+
 [![npm version](https://img.shields.io/npm/v/ima2-gen)](https://www.npmjs.com/package/ima2-gen)
 [![Node.js](https://img.shields.io/badge/node-%3E%3D22-brightgreen)](https://nodejs.org/)
 [![License: MIT](https://img.shields.io/badge/License-MIT-blue.svg)](../LICENSE)
@@ -54,7 +67,7 @@ irm https://lidge-jun.github.io/ima2-gen/install-windows.ps1 | iex
 curl -fsSL https://lidge-jun.github.io/ima2-gen/install-linux.sh | bash
 ```
 
-各スクリプトは nvm/fnm/brew/winget を確認し、最適な方法で Node LTS を入れ、古いプロセスのクリーンアップも自動で行います。
+各スクリプトは対応する Node バージョンを確認し、必要に応じて nvm/fnm/brew/winget で Node LTS を入れます。npm のインストールは一度だけ試し、`ima2 doctor --installation --json` が成功してからサーバーを起動します。プロセスの強制終了やグローバルロックの削除は行いません。
 
 ### セットアップ
 
@@ -75,7 +88,7 @@ curl -fsSL https://lidge-jun.github.io/ima2-gen/install-linux.sh | bash
 npm install -g ima2-gen@latest
 ```
 
-Ctrl+C は DB クローズ、子プロセス停止、ファイルロック解放まで行うクリーンシャットダウンです。古いバージョン（< 1.1.22）や Windows で `EBUSY` が出る場合は、インストールスクリプトが stale プロセスを自動クリーンアップします。
+Ctrl+C は DB クローズ、子プロセス停止、ファイルロック解放まで行うクリーンシャットダウンです。インストールに失敗した場合は表示された npm 権限を確認するか、対象の `ima2` プロセスを手動で停止してください。インストーラーは無関係なプロセスやグローバルロックを操作しません。
 
 ## できること
 

package/docs/README.ko.md

@@ -1,5 +1,18 @@
 # ima2-gen
 
+<!-- runtime-install:generated:start -->
+| Contract | Value |
+|---|---|
+| Node engine | `>=22` |
+| npm toolchain | `npm@11.18.0` |
+| Release Node | `24.17.0` |
+| CLI entry | `bin/ima2.js` |
+| OpenAI SDK | `^7.4.0` |
+| Express | `^5.1.0` |
+<!-- runtime-install:generated:end -->
+
+설치 프로그램은 패키지 메타데이터에서 Node.js 최소 버전을 읽고 서버 시작 전에 오프라인 설치 검사를 수행합니다.
+
 [![npm version](https://img.shields.io/npm/v/ima2-gen)](https://www.npmjs.com/package/ima2-gen)
 [![Node.js](https://img.shields.io/badge/node-%3E%3D22-brightgreen)](https://nodejs.org/)
 [![License: MIT](https://img.shields.io/badge/License-MIT-blue.svg)](../LICENSE)
@@ -62,7 +75,7 @@ irm https://lidge-jun.github.io/ima2-gen/install-windows.ps1 | iex
 curl -fsSL https://lidge-jun.github.io/ima2-gen/install-linux.sh | bash
 ```
 
-각 스크립트가 nvm/fnm/brew/winget을 감지하고, 없으면 Node LTS를 자동 설치한 뒤 ima2-gen을 설치합니다. npm 12 승인 옵션과 잔여 프로세스 정리를 자동 처리하고, 마지막에 `ima2 doctor`로 native runtime도 확인합니다.
+각 스크립트는 지원하는 Node 버전을 확인하고, 필요하면 nvm/fnm/brew/winget으로 Node LTS를 설치합니다. npm 설치는 한 번만 시도하며, `ima2 doctor --installation --json`을 통과해야 서버를 시작합니다. 다른 프로세스를 종료하거나 전역 잠금 파일을 지우지는 않습니다.
 
 ### 업데이트
 
@@ -74,7 +87,7 @@ npm install -g ima2-gen@latest
 
 npm 12라면 업데이트 명령에도 `--allow-scripts=ima2-gen,better-sqlite3,sharp`를 붙이세요. 원클릭 설치 스크립트는 npm 버전을 감지해 자동으로 처리합니다.
 
-v1.1.22부터 Ctrl+C가 DB, 소켓, 자식 프로세스를 깨끗하게 정리합니다. 이전 버전이거나 Windows에서 `EBUSY` 에러가 나면 위의 설치 스크립트를 다시 실행하세요 — 잔여 프로세스를 자동으로 정리합니다.
+Ctrl+C로 DB, 소켓, 자식 프로세스를 정리할 수 있습니다. Windows에서 `EBUSY`가 나면 실행 중인 해당 ima2 서버를 직접 종료한 뒤 다시 설치하세요. 설치기는 프로세스를 임의로 종료하거나 관리자 권한으로 재시도하지 않습니다.
 
 ## 최근 주요 변경
 

package/docs/README.zh-CN.md

@@ -1,5 +1,18 @@
 # ima2-gen
 
+<!-- runtime-install:generated:start -->
+| Contract | Value |
+|---|---|
+| Node engine | `>=22` |
+| npm toolchain | `npm@11.18.0` |
+| Release Node | `24.17.0` |
+| CLI entry | `bin/ima2.js` |
+| OpenAI SDK | `^7.4.0` |
+| Express | `^5.1.0` |
+<!-- runtime-install:generated:end -->
+
+安装程序从包元数据读取 Node.js 最低版本，并在启动服务器前执行离线安装检查。
+
 <p align="center">
   <img src="../assets/logo.png" alt="ima2-gen logo" width="240">
 </p>
@@ -75,7 +88,7 @@ irm https://lidge-jun.github.io/ima2-gen/install-windows.ps1 | iex
 curl -fsSL https://lidge-jun.github.io/ima2-gen/install-linux.sh | bash
 ```
 
-每个脚本都会检查 nvm/fnm/brew/winget，通过最佳可用方法安装 Node LTS，并自动处理过时进程清理。
+每个脚本都会检查支持的 Node 版本，必要时使用 nvm/fnm/brew/winget 安装 Node LTS。npm 安装只尝试一次，`ima2 doctor --installation --json` 通过后才启动服务器。脚本不会终止其他进程或删除全局锁文件。
 
 ### 设置
 
@@ -96,7 +109,7 @@ curl -fsSL https://lidge-jun.github.io/ima2-gen/install-linux.sh | bash
 npm install -g ima2-gen@latest
 ```
 
-Ctrl+C 现在执行干净关闭 — 关闭数据库、停止子进程并释放文件锁。在旧版本 (< 1.1.22) 上或者如果您看到`EBUSY`在 Windows 上，使用自动处理过时进程清理的安装脚本。
+Ctrl+C 会关闭数据库、停止子进程并释放文件锁。如果 Windows 报告 `EBUSY`，请先手动停止对应的 ima2 服务再重试安装。安装器不会自动终止进程或提升权限。
 
 ## 它的作用
 

package/docs/README.zh-TW.md

@@ -1,5 +1,18 @@
 # ima2-gen
 
+<!-- runtime-install:generated:start -->
+| Contract | Value |
+|---|---|
+| Node engine | `>=22` |
+| npm toolchain | `npm@11.18.0` |
+| Release Node | `24.17.0` |
+| CLI entry | `bin/ima2.js` |
+| OpenAI SDK | `^7.4.0` |
+| Express | `^5.1.0` |
+<!-- runtime-install:generated:end -->
+
+安裝程式從套件中繼資料讀取 Node.js 最低版本，並在啟動伺服器前執行離線安裝檢查。
+
 <p align="center">
   <img src="../assets/logo.png" alt="ima2-gen logo" width="240">
 </p>
@@ -75,7 +88,7 @@ irm https://lidge-jun.github.io/ima2-gen/install-windows.ps1 | iex
 curl -fsSL https://lidge-jun.github.io/ima2-gen/install-linux.sh | bash
 ```
 
-每個腳本都會檢查 nvm、fnm、Homebrew 或 winget，選擇最適合的方法安裝 Node LTS，並自動清理殘留的舊程序。
+每個腳本都會檢查支援的 Node 版本，必要時使用 nvm、fnm、Homebrew 或 winget 安裝 Node LTS。npm 安裝只嘗試一次，通過 `ima2 doctor --installation --json` 後才啟動伺服器。腳本不會終止其他程序或刪除全域鎖定檔案。
 
 ### 設定
 
@@ -96,7 +109,7 @@ curl -fsSL https://lidge-jun.github.io/ima2-gen/install-linux.sh | bash
 npm install -g ima2-gen@latest
 ```
 
-現在按下 Ctrl+C 會正常關閉程式：關閉資料庫、停止子程序並釋放檔案鎖定。如果使用舊版（< 1.1.22），或在 Windows 上看到 `EBUSY`，請改用會自動清理殘留程序的安裝腳本。
+按下 Ctrl+C 會關閉資料庫、停止子程序並釋放檔案鎖定。如果 Windows 顯示 `EBUSY`，請先手動停止對應的 ima2 服務，再重新安裝。安裝器不會自動終止程序或提高權限。
 
 ## 功能總覽
 

package/docs/migration/runtime-test-inventory.md

@@ -4,7 +4,7 @@ Generated by `npm run test:inventory` (script: `scripts/classify-tests.mjs`).
 
 _Tests considered "runtime-importing" if they import from `../lib/`, `../routes/`, `../bin/`, `../server`, or `../config`._
 
-Total: 416 (runtime: 191, contract: 225)
+Total: 487 (runtime: 224, contract: 263)
 
 ## Runtime-importing tests
 - `tests/agent-image-reference-contract.test.ts`
@@ -19,13 +19,18 @@ Total: 416 (runtime: 191, contract: 225)
 - `tests/agent-queue-store-contract.test.ts`
 - `tests/agent-video-intent.test.ts`
 - `tests/agent-video-reference-contract.test.ts`
+- `tests/agy-artifact-confinement.test.ts`
 - `tests/agy-artifact-fallback.test.ts`
 - `tests/agy-cli.test.ts`
+- `tests/agy-execution-cleanup.test.ts`
+- `tests/agy-execution-process.test.ts`
 - `tests/api-cache-policy.test.ts`
 - `tests/api-provider-parity.test.ts`
+- `tests/api-request-budget.test.ts`
 - `tests/asset-character-bindings.test.ts`
 - `tests/asset-derived-vector-contract.test.ts`
 - `tests/asset-derived.test.ts`
+- `tests/asset-lifecycle-path.test.ts`
 - `tests/asset-ref-contract.test.ts`
 - `tests/assets-routes-contract.test.ts`
 - `tests/assets-store-contract.test.ts`
@@ -34,12 +39,14 @@ Total: 416 (runtime: 191, contract: 225)
 - `tests/backend-input-lan-hardening.test.ts`
 - `tests/background-presets.test.ts`
 - `tests/billing-source.test.ts`
+- `tests/canvas-version-normalization.test.ts`
 - `tests/capabilities-lane-contract.test.ts`
 - `tests/capabilities-video-modes-contract.test.ts`
 - `tests/card-news-contract.test.ts`
 - `tests/card-news-template.test.ts`
 - `tests/classic-generate-async.test.ts`
 - `tests/cli-error-hints.test.ts`
+- `tests/cli-lan-auth.test.ts`
 - `tests/cli-lib.test.ts`
 - `tests/cli-model-resolver.test.ts`
 - `tests/cli-models-command-contract.test.ts`
@@ -54,22 +61,29 @@ Total: 416 (runtime: 191, contract: 225)
 - `tests/contracts-catalog.test.ts`
 - `tests/contracts-discovery.test.ts`
 - `tests/doctor-provider-contract.test.ts`
+- `tests/doctor-report.test.ts`
+- `tests/doctor-runtime.test.ts`
 - `tests/element-compiler.test.ts`
 - `tests/element-metadata.test.ts`
 - `tests/error-class-coverage.test.ts`
 - `tests/error-classify.test.ts`
 - `tests/error-envelope-contract.test.ts`
 - `tests/event-bus.test.ts`
+- `tests/events-backpressure.test.ts`
 - `tests/events-channel-contract.test.ts`
 - `tests/filename.test.ts`
-- `tests/gemini-api-wire-contract.test.ts`
 - `tests/generate-route-validation-error.test.ts`
 - `tests/generated-static-privacy.test.ts`
 - `tests/generation-errors.test.ts`
 - `tests/generation-request-log.test.ts`
+- `tests/google-execution-parity.test.ts`
 - `tests/gpt56-rollout-contract.test.ts`
 - `tests/grok-advertise-liveness-contract.test.ts`
 - `tests/grok-command-login-contract.test.ts`
+- `tests/grok-execution-parity.test.ts`
+- `tests/grok-image-address-policy.test.ts`
+- `tests/grok-image-download-pinning.test.ts`
+- `tests/grok-image-download-policy.test.ts`
 - `tests/grok-planner-adapter.test.ts`
 - `tests/grok-planner-config-route.test.ts`
 - `tests/grok-proxy-launcher.test.ts`
@@ -78,6 +92,7 @@ Total: 416 (runtime: 191, contract: 225)
 - `tests/grok-size-mapper.test.ts`
 - `tests/grok-upstream-retry.test.ts`
 - `tests/grokVideoAdapter.test.ts`
+- `tests/grokVideoDownload.test.ts`
 - `tests/grokVideoPlannerFallback.test.ts`
 - `tests/grokVideoTimeoutBudgets.test.ts`
 - `tests/history-metadata-fallback.test.ts`
@@ -89,11 +104,15 @@ Total: 416 (runtime: 191, contract: 225)
 - `tests/inflight-guard-contract.test.ts`
 - `tests/inflight-persistence.test.ts`
 - `tests/inflight.test.ts`
+- `tests/job-cancellation-terminal.test.ts`
 - `tests/job-envelope-contract.test.ts`
 - `tests/job-envelope-terminal-coverage.test.ts`
 - `tests/job-idempotency.test.ts`
 - `tests/job-terminal-status-contract.test.ts`
+- `tests/lan-media-access.test.ts`
+- `tests/lan-session.test.ts`
 - `tests/local-import-contract.test.ts`
+- `tests/local-lan-policy.test.ts`
 - `tests/logging.test.ts`
 - `tests/mcp-character-route.test.ts`
 - `tests/mcp-connection-manager.test.ts`
@@ -131,6 +150,7 @@ Total: 416 (runtime: 191, contract: 225)
 - `tests/nai-zip-decode.test.ts`
 - `tests/node-parent-source-contract.test.ts`
 - `tests/node-route-refs.test.ts`
+- `tests/node-store-metadata.test.ts`
 - `tests/node-streaming-sse.test.ts`
 - `tests/node-template-contract.test.ts`
 - `tests/node-validation-error-contract.test.ts`
@@ -138,19 +158,30 @@ Total: 416 (runtime: 191, contract: 225)
 - `tests/oauth-normalize.test.ts`
 - `tests/oauth-proxy-error-safety.test.ts`
 - `tests/open-directory.test.ts`
+- `tests/openai-execution-parity.test.ts`
+- `tests/openai-transport-parity.test.ts`
 - `tests/preset-compiler.test.ts`
 - `tests/preset-restore-contract.test.ts`
 - `tests/preset-xmp-roundtrip.test.ts`
 - `tests/prompt-builder-contract.test.ts`
+- `tests/prompt-candidates-normalization.test.ts`
 - `tests/prompt-discovery-contract.test.ts`
 - `tests/prompt-fidelity.test.ts`
 - `tests/prompt-import-folder-contract.test.ts`
 - `tests/prompt-import-github-contract.test.ts`
 - `tests/prompt-index-ranking-contract.test.ts`
 - `tests/provider-adapter-v1-contract.test.ts`
+- `tests/provider-execution-boundary.test.ts`
+- `tests/provider-execution-classic.test.ts`
+- `tests/provider-execution-multimode.test.ts`
+- `tests/provider-execution-node.test.ts`
+- `tests/provider-execution-routes.test.ts`
 - `tests/provider-registry-contract.test.ts`
 - `tests/provider-registry-parity.test.ts`
+- `tests/provider-surface-boundary.test.ts`
+- `tests/provider-surface-support.test.ts`
 - `tests/reference-image-compress.test.ts`
+- `tests/reference-limits-node-recovery.test.mjs`
 - `tests/refs-size.test.ts`
 - `tests/request-logging.test.ts`
 - `tests/responses-adapter-safety.test.ts`
@@ -170,6 +201,7 @@ Total: 416 (runtime: 191, contract: 225)
 - `tests/sprite-atlas-manifest.test.ts`
 - `tests/sprite-curation-store.test.ts`
 - `tests/sprite-gif-export.test.ts`
+- `tests/sprite-job-events.test.ts`
 - `tests/sprite-layout-guide.test.ts`
 - `tests/sprite-recipe-routes.test.ts`
 - `tests/sprite-recipe-store.test.ts`
@@ -186,6 +218,7 @@ Total: 416 (runtime: 191, contract: 225)
 - `tests/vectorize-image-contract.test.ts`
 - `tests/video-chroma-key.test.ts`
 - `tests/video-concat.test.ts`
+- `tests/video-download-cancellation.test.ts`
 - `tests/video-history-item.test.ts`
 - `tests/video-motion-presets.test.ts`
 - `tests/video-ref2v-duration-contract.test.ts`
@@ -210,6 +243,8 @@ Total: 416 (runtime: 191, contract: 225)
 - `tests/agent-mode-streaming-a11y-contract.test.js`
 - `tests/agent-mode-tool-call-rendering-contract.test.js`
 - `tests/agent-mode-tool-folding-contract.test.js`
+- `tests/agy-artifact-check-contract.test.ts`
+- `tests/agy-artifact-read-bounds.test.ts`
 - `tests/api-docs-contract.test.js`
 - `tests/app-weight-splitting-contract.test.js`
 - `tests/asset-element-toggle-contract.test.ts`
@@ -260,6 +295,7 @@ Total: 416 (runtime: 191, contract: 225)
 - `tests/card-news-smoke.test.js`
 - `tests/card-news-visible-text-language-contract.test.ts`
 - `tests/character-binding-ui-contract.test.ts`
+- `tests/ci-windows-candidate.test.ts`
 - `tests/cli-capabilities-contract.test.js`
 - `tests/cli-character-contract.test.js`
 - `tests/cli-commands.test.js`
@@ -274,12 +310,13 @@ Total: 416 (runtime: 191, contract: 225)
 - `tests/cli-prompt-builder-contract.test.js`
 - `tests/cli-prompt-import-contract.test.js`
 - `tests/cli-skill-command-contract.test.js`
+- `tests/cli-unknown-options.test.ts`
 - `tests/cli-upscale-contract.test.js`
 - `tests/cli-video-command-contract.test.js`
 - `tests/color-key.test.ts`
 - `tests/comfy-cli-contract.test.ts`
+- `tests/comfy-display.test.ts`
 - `tests/comfy-export-ui-contract.test.js`
-- `tests/comfy-selection-persistence.test.js`
 - `tests/comfy-ui-contract.test.ts`
 - `tests/comfyui-custom-node-contract.test.js`
 - `tests/composer-feedback-contract.test.js`
@@ -287,14 +324,25 @@ Total: 416 (runtime: 191, contract: 225)
 - `tests/composer-tray-ui-contract.test.js`
 - `tests/config.test.js`
 - `tests/contract-docs-projection.test.ts`
+- `tests/core-generation-mode.test.ts`
+- `tests/core-selection-actions.test.ts`
+- `tests/core-selection-memory.test.ts`
+- `tests/core-selection-reconcile.test.ts`
+- `tests/core-selection-transport.test.mjs`
 - `tests/current-image-actions-readiness-contract.test.js`
 - `tests/direct-mode-visual-contract.test.js`
 - `tests/duration-slider-contract.test.js`
+- `tests/e2e-app-environment.test.ts`
+- `tests/e2e-runtime-build.test.mjs`
+- `tests/e2e-runtime-guards.test.mjs`
 - `tests/edit-mask-api-contract.test.js`
 - `tests/element-mention-ui-contract.test.js`
 - `tests/error-ui-consumption.test.ts`
+- `tests/event-channel-replay-gap.test.ts`
+- `tests/execution-network-isolation.test.ts`
+- `tests/execution-process-isolation.test.ts`
 - `tests/frame-extraction-fallback.test.ts`
-- `tests/frontend-connection-state-contract.test.js`
+- `tests/frontend-connection-state-contract.test.ts`
 - `tests/frontend-sse-risk-contract.test.js`
 - `tests/gallery-hang-regression-contract.test.ts`
 - `tests/gallery-load-older-contract.test.js`
@@ -304,6 +352,8 @@ Total: 416 (runtime: 191, contract: 225)
 - `tests/gallery-shortcuts-behavior.test.js`
 - `tests/gallery-shortcuts-visible-domain-contract.test.js`
 - `tests/gallery-viewer-navigation-contract.test.js`
+- `tests/gemini-api-wire-contract.test.ts`
+- `tests/gemini-transport-parity.test.ts`
 - `tests/gen-output-path-contract.test.js`
 - `tests/generation-controls-ux-contract.test.js`
 - `tests/generation-limit-unlock-contract.test.js`
@@ -311,7 +361,7 @@ Total: 416 (runtime: 191, contract: 225)
 - `tests/health.test.js`
 - `tests/history-index-contract.test.js`
 - `tests/history-permanent-delete.test.js`
-- `tests/history-strip-duplicate-contract.test.js`
+- `tests/history-strip-duplicate-contract.test.ts`
 - `tests/i18n-coverage-contract.test.ts`
 - `tests/i18n-dictionary-contract.test.ts`
 - `tests/image-metadata-ui-contract.test.js`
@@ -319,14 +369,23 @@ Total: 416 (runtime: 191, contract: 225)
 - `tests/inflight-cancel-contract.test.js`
 - `tests/inflight-list-tooltip-contract.test.js`
 - `tests/inflight-popup-polish-contract.test.js`
-- `tests/inflight-reload-race.test.js`
-- `tests/inflight-reload-reconcile-contract.test.js`
+- `tests/inflight-reconciliation-behavior.test.ts`
+- `tests/inflight-reload-race.test.ts`
+- `tests/inflight-reload-reconcile-contract.test.ts`
+- `tests/install-runtime-contract.test.ts`
 - `tests/install-windows-contract.test.js`
 - `tests/issue75-prompt-studio-state-contract.test.js`
 - `tests/issue77-long-prompt-preview-contract.test.js`
+- `tests/j6-isolation-preflight.test.mjs`
+- `tests/job-tracking-ci-contract.test.ts`
+- `tests/job-tracking-timeout-ui.test.ts`
+- `tests/lan-config.test.ts`
+- `tests/lane-catalog.test.ts`
 - `tests/mcp-media-kind-behavior.test.ts`
 - `tests/mcp-provider-smoke.test.ts`
 - `tests/mcp-provider-ui-contract.test.js`
+- `tests/mcp-readiness-observation.test.ts`
+- `tests/mcp-readiness.test.ts`
 - `tests/mcp-schema-spike-contract.test.ts`
 - `tests/mcp-selection-helpers.test.ts`
 - `tests/mcp-settings-states-contract.test.ts`
@@ -367,8 +426,11 @@ Total: 416 (runtime: 191, contract: 225)
 - `tests/oauth-proxy-edit-mask-contract.test.js`
 - `tests/package-global-update-smoke-contract.test.ts`
 - `tests/package-smoke.test.js`
+- `tests/pages-publication-contract.test.ts`
+- `tests/platform-open-url.test.ts`
 - `tests/png-info-contract.test.js`
 - `tests/portal-dropdown-scroll-dismiss-contract.test.ts`
+- `tests/pr-fast-history.test.mjs`
 - `tests/prompt-curated-search-contract.test.js`
 - `tests/prompt-discovery-ui-contract.test.js`
 - `tests/prompt-import-dialog-ui-contract.test.js`
@@ -380,10 +442,15 @@ Total: 416 (runtime: 191, contract: 225)
 - `tests/provenance-chip-contract.test.ts`
 - `tests/provider-canary-live-contract.test.ts`
 - `tests/provider-canary-parity.test.ts`
+- `tests/provider-execution-edit.test.ts`
+- `tests/provider-execution-harness.test.ts`
+- `tests/provider-execution-imports.test.ts`
 - `tests/provider-ui-polish-contract.test.js`
 - `tests/reference-limits.test.ts`
 - `tests/reference-tray-model.test.ts`
 - `tests/release-pipeline-contract.test.ts`
+- `tests/runtime-install-projection.test.ts`
+- `tests/selector-comfy-admission.test.ts`
 - `tests/server-fallback-contract.test.js`
 - `tests/server.test.js`
 - `tests/session-conflict.test.js`
@@ -403,11 +470,15 @@ Total: 416 (runtime: 191, contract: 225)
 - `tests/studio-surface-docs-contract.test.ts`
 - `tests/style-feature-removal-contract.test.js`
 - `tests/subprocess-deadline-contract.test.ts`
+- `tests/test-runner-invocation.test.ts`
 - `tests/toast-stack-contract.test.js`
 - `tests/tools-cli-contract.test.ts`
 - `tests/transparent-background-ui-contract.test.js`
+- `tests/ui-build-receipt-inventory.test.mjs`
+- `tests/ui-build-receipt-transaction.test.mjs`
+- `tests/ui-build-receipt.test.mjs`
 - `tests/ui-color-token-contract.test.ts`
-- `tests/ui-error-code-contract.test.js`
+- `tests/ui-error-code-contract.test.ts`
 - `tests/ui-glyph-policy.test.ts`
 - `tests/ui-gradient-manifest-contract.test.ts`
 - `tests/ui-radius-scale-contract.test.ts`

package/lib/agyArtifact.js

@@ -0,0 +1,82 @@
+import { readdir, stat } from "node:fs/promises";
+import { extname, join } from "node:path";
+import { homedir } from "node:os";
+import { agyError } from "./agyProcess.js";
+export function parseAgyOutput(stdout) {
+    const lines = stdout.replace(/\r/g, "").trim().split("\n").filter((l) => l.trim().length > 0);
+    const resultLine = lines.find((l) => l.startsWith("RESULT|"));
+    if (resultLine) {
+        const parts = resultLine.split("|");
+        const artifactPath = parts[1];
+        const ext = parts[2];
+        if (parts.length >= 3 && artifactPath && ext) {
+            return { artifactPath: artifactPath.trim(), ext: ext.trim() };
+        }
+        throw agyError(`Malformed RESULT line: ${resultLine}`, 502, "AGY_MALFORMED_RESULT");
+    }
+    const errorLine = lines.find((l) => l.startsWith("ERROR|"));
+    if (errorLine) {
+        const msg = errorLine.slice("ERROR|".length).trim() || "Unknown agy error";
+        const lower = msg.toLowerCase();
+        if (lower.includes("resource exhausted") || lower.includes("exhausted your capacity") || lower.includes("quota will reset")) {
+            throw agyError(`Agy generation failed: ${msg}`, 429, "AGY_QUOTA_EXHAUSTED");
+        }
+        throw agyError(`Agy generation failed: ${msg}`, 502, "AGY_GENERATION_FAILED");
+    }
+    const fullLower = stdout.toLowerCase();
+    if (fullLower.includes("resource exhausted") || fullLower.includes("exhausted your capacity")) {
+        throw agyError(`Agy quota exhausted: ${stdout.trim().slice(0, 200)}`, 429, "AGY_QUOTA_EXHAUSTED");
+    }
+    const savedPathLine = lines.find((l) => l.startsWith("SAVED_PATH="));
+    if (savedPathLine) {
+        const p = savedPathLine.slice("SAVED_PATH=".length).trim();
+        const ext = p.split(".").pop() || "png";
+        return { artifactPath: p, ext };
+    }
+    const normalizedStdout = stdout.replace(/\r/g, "").replace(/\\/g, "/");
+    const pathMatch = normalizedStdout.match(/(?:[A-Za-z]:)?\/[^\s"']+\/(brain|artifacts|\.gemini)\/[^\s"']+\.(png|jpg|jpeg|webp)/i);
+    if (pathMatch) {
+        const matched = pathMatch[0];
+        const artifactPath = process.platform === "win32" ? matched.replace(/\//g, "\\") : matched;
+        const ext = extname(artifactPath).slice(1) || "png";
+        return { artifactPath, ext };
+    }
+    throw agyError(`Could not parse artifact path from agy output (${stdout.length} chars): ${stdout.slice(0, 200)}`, 502, "AGY_PARSE_FAILED");
+}
+export async function findRecentAgyArtifact(sinceMs, rootOverrides) {
+    const roots = rootOverrides ?? [
+        join(homedir(), ".gemini", "antigravity-cli", "brain"),
+        join(homedir(), ".gemini"),
+    ];
+    const candidates = [];
+    const seen = new Set();
+    async function walk(dir, depth) {
+        if (depth > 5 || seen.has(dir))
+            return;
+        seen.add(dir);
+        const entries = await readdir(dir, { withFileTypes: true }).catch(() => []);
+        for (const entry of entries) {
+            if (entry.isSymbolicLink())
+                continue;
+            const p = join(dir, entry.name);
+            if (entry.isDirectory()) {
+                await walk(p, depth + 1);
+                continue;
+            }
+            if (!entry.isFile() || !/^ima2_generated.*\.(png|jpg|jpeg|webp)$/i.test(entry.name)) {
+                continue;
+            }
+            const s = await stat(p).catch(() => null);
+            if (!s?.isFile())
+                continue;
+            if (s.mtimeMs >= sinceMs - 5_000) {
+                candidates.push({ path: p, mtimeMs: s.mtimeMs });
+            }
+        }
+    }
+    for (const root of roots) {
+        await walk(root, 0);
+    }
+    candidates.sort((a, b) => b.mtimeMs - a.mtimeMs);
+    return candidates[0]?.path ?? null;
+}