ltcai 10.2.0 → 10.3.0

package/README.md

@@ -11,7 +11,7 @@
 [![CI Status](https://github.com/TaeSooPark-PTS/LatticeAI/actions/workflows/ci.yml/badge.svg?branch=main)](https://github.com/TaeSooPark-PTS/LatticeAI/actions/workflows/ci.yml)
 [![License](https://img.shields.io/badge/license-MIT-green)](LICENSE)
 
-![v10.2.0 Living Brain walkthrough](output/release/v10.2.0/gifs/v10.2.0-living-brain-walkthrough.gif)
+![v10.3.0 Living Brain walkthrough](output/release/v10.3.0/gifs/v10.3.0-living-brain-walkthrough.gif)
 
 Chat, files, folders, notes, and web pages all flow into one durable knowledge
 graph on your computer. Any model — local MLX or cloud — can speak with that
@@ -24,9 +24,9 @@ memory. Nothing leaves your machine without explicit consent.
 
 | | |
 | --- | --- |
-| **Chat with a Brain that remembers** — every conversation grows durable, source-linked memory ![Brain Chat](output/release/v10.2.0/screenshots/04-brain-chat-home.png) | **See how knowledge connects** — a real relationship graph, not a file list ![Memory Graph](output/release/v10.2.0/screenshots/05-memory-graph.png) |
-| **Capture anything** — files, whole folders, notes, screenshots, web pages ![Capture](output/release/v10.2.0/screenshots/06-capture.png) | **Automate with review** — agent changes become proposals you approve first ![Review Center](output/release/v10.2.0/screenshots/12-review-center.png) |
-| **Pick a model in one click** — recommended local models for your hardware ![Recommended Models](output/release/v10.2.0/screenshots/02-recommended-models.png) | **Stay in control** — audit, roles, retention in a separate admin surface ![Admin Console](output/release/v10.2.0/screenshots/10-admin-console.png) |
+| **Chat with a Brain that remembers** — every conversation grows durable, source-linked memory ![Brain Chat](output/release/v10.3.0/screenshots/04-brain-chat-home.png) | **See how knowledge connects** — a real relationship graph, not a file list ![Memory Graph](output/release/v10.3.0/screenshots/05-memory-graph.png) |
+| **Capture anything** — files, whole folders, notes, screenshots, web pages ![Capture](output/release/v10.3.0/screenshots/06-capture.png) | **Automate with review** — agent changes become proposals you approve first ![Review Center](output/release/v10.3.0/screenshots/12-review-center.png) |
+| **Pick a model in one click** — recommended local models for your hardware ![Recommended Models](output/release/v10.3.0/screenshots/02-recommended-models.png) | **Stay in control** — audit, roles, retention in a separate admin surface ![Admin Console](output/release/v10.3.0/screenshots/10-admin-console.png) |
 
 ## Why Lattice AI
 
@@ -57,53 +57,47 @@ First-run flow — wake the Brain, pick the owner, load a recommended model:
 
 | | | |
 | --- | --- | --- |
-| ![Login](output/release/v10.2.0/screenshots/01-login.png) | ![Model install](output/release/v10.2.0/screenshots/03-install-load-progress.png) | ![Model library](output/release/v10.2.0/screenshots/07-model-library.png) |
+| ![Login](output/release/v10.3.0/screenshots/01-login.png) | ![Model install](output/release/v10.3.0/screenshots/03-install-load-progress.png) | ![Model library](output/release/v10.3.0/screenshots/07-model-library.png) |
 
 Screenshot index and capture notes:
-[output/release/v10.2.0/SCREENSHOT_INDEX.md](output/release/v10.2.0/SCREENSHOT_INDEX.md)
+[output/release/v10.3.0/SCREENSHOT_INDEX.md](output/release/v10.3.0/SCREENSHOT_INDEX.md)
 
 ## Current Release
 
-The current release is **10.2.0 — Load-Bearing Fixes**:
-
-A full code review of 10.1.1 scored the codebase 71/100 and found two things
-that were true but invisible. This release is that review's response.
-
-- **A database connection leak that hid behind garbage collection.**
-  `with sqlite3.connect(...)` commits but never closes, and 70+ call sites
-  relied on it. Nothing showed until something held a stack frame alive — a
-  profiler, a logged traceback, a coverage tracer — and then descriptors ran
-  out. Every one of those sites now closes.
-- **Coverage is measurable for the first time: 71%.** It could not be run
-  before, because running it *was* the thing that exhausted descriptors. There
-  is now a floor in CI so it cannot silently fall.
-- **"Sensitive memories are never sent" is finally true.** The filter was real,
-  correct, and wired — but nothing in the product could mark a memory, and the
-  blocked-type list was empty, so it could never fire. You can now mark any
-  memory from the boundary panel, files under `.ssh`/`.aws`/`.env` and friends
-  are flagged automatically at ingestion, and credential-shaped node types are
-  blocked outright.
-- **Knowledge that leaves is now redacted and recorded.** Secret-shaped text is
-  stripped from the outbound payload, and every send — and every refusal —
-  writes an audit entry naming what went, how much, and where to.
-- **112 silent `except: pass` handlers now say something.** Behaviour is
-  unchanged; each records the failure at debug level, so a genuine bug in an
-  optional path is no longer indistinguishable from the optional thing being
-  absent.
-- **The lint net was widened to the bug classes that actually bit** — loop
-  variable capture, truncating `zip`, silent handlers — and mypy now runs on
-  the trust-critical modules. CI gained macOS and Python 3.14, so the machine
-  this is developed on and the platform it ships a `.dmg` for are both tested.
+The current release is **10.3.0 — Measured Ground**:
+
+10.2.0 answered a code review. 10.3.0 is about knowing where things actually
+stand: several numbers this project reported about itself turned out to be
+wrong, and those corrections matter more than the features around them.
+
+- **Frontend coverage was never really measured.** Vitest only reports files a
+  test already imports, so every untested module quietly left the denominator
+  and the tool read 54%. With `all: true` the honest figure is **28.5%** — and
+  208 tests now cover pages that had none, including every settings and memory
+  screen.
+- **Python coverage was reported as 80%. It is 71.6%.** The `omit` pattern did
+  not match the paths coverage records, so the suite was counting itself — and
+  test files run start to finish by construction.
+- **mypy went from 13 modules to 193 of 270**, finding three real defects on
+  the way: a log line inside an error handler referenced an attribute that does
+  not exist (turning a recoverable failure into a crash), an annotation used a
+  name that was never imported, and one call could dereference `None`.
+- **The chat-turn writer left the composition root.** 66 lines that decide what
+  a message looks like after redaction, and what the audit log records about
+  it, are now a module with 14 tests instead of a closure nothing could reach.
+- **What is not measured is written down.** `docs/MYPY_BACKLOG.md` lists the 77
+  modules still outside type checking with their error counts, so the boundary
+  is a fact rather than an intention.
 
 Release notes: [RELEASE.md](RELEASE.md) · Full history: [docs/CHANGELOG.md](docs/CHANGELOG.md)
 
-Expected artifacts for 10.2.0 release must use exact filenames:
+Expected artifacts for 10.3.0 release must use exact filenames:
 
-- `dist/ltcai-10.2.0-py3-none-any.whl`
-- `dist/ltcai-10.2.0.tar.gz`
-- `ltcai-10.2.0.tgz`
-- `dist/ltcai-10.2.0.vsix`
-- `src-tauri/target/release/bundle/dmg/Lattice AI_10.2.0_aarch64.dmg`
+- `dist/ltcai-10.3.0-py3-none-any.whl`
+- `dist/ltcai-10.3.0.tar.gz`
+- `ltcai-10.3.0.tgz`
+- `dist/ltcai-10.3.0.vsix`
+- `src-tauri/target/release/bundle/dmg/Lattice AI_10.3.0_aarch64.dmg`
 
 Do not use wildcard artifact uploads. Package registry publishing remains owner-run.
 
@@ -123,7 +117,7 @@ See [ARCHITECTURE.md](ARCHITECTURE.md) for details and
 
 - External package registries are owner-published and can lag behind GitHub.
 - PostgreSQL/pgvector is optional scale/migration tooling. SQLite remains the
-  live local Brain store in 10.2.0.
+  live local Brain store in 10.3.0.
 - Docker, model downloads, cloud model calls, Telegram, Brain Network, and
   update checks require explicit user action.
 - Conversation does not fabricate answers when no model is loaded. Agent and
@@ -132,12 +126,13 @@ See [ARCHITECTURE.md](ARCHITECTURE.md) for details and
   model success.
 - Some backend-generated messages (for example the Postgres DSN notice) are
   produced server-side in English and are shown as-is; server-side i18n is not
-  part of 10.2.0.
+  part of 10.3.0.
 
 ## Release History
 
 | Version | Theme |
 | --- | --- |
+| 10.3.0 | Measured Ground |
 | 10.2.0 | Load-Bearing Fixes |
 | 10.1.1 | Reachable Boundary |
 | 10.1.0 | Hybrid Brain |

package/docs/CHANGELOG.md

@@ -4,6 +4,54 @@ The top entry is either the current unreleased main-branch work or the current
 release line. Older entries are historical and may describe behavior as it
 existed at that release.
 
+## [10.3.0] - 2026-07-29
+
+### Fixed
+- **Frontend coverage was not being measured.** Vitest reports only files a
+  test imports unless `all: true`; untested modules left the denominator
+  instead of counting against it. Reported 54%, actual **28.5%**.
+- **Python coverage was over-reported.** `omit = ["*/tests/*"]` does not match
+  the repo-relative `tests/...` paths coverage records, so the suite counted
+  itself. Reported 80%, actual **71.6%**.
+- `lattice_brain/runtime/hooks.py` referenced `self._path` (does not exist)
+  inside the handler for an unreadable registry, turning a recoverable failure
+  into `AttributeError`.
+- `lattice_brain/graph/_kg_fsutil.py` used `Iterable` in an annotation without
+  importing it.
+- `lattice_brain/runtime/agent_runtime.py` could call `.get` on `None`.
+- `pages/Library.tsx` printed the raw registry coordinate
+  (`mlx-community/gemma-4-…`) when a catalog entry had no display name; it now
+  falls through `humanizeModelId` like every other model surface.
+
+### Added
+- `latticeai/runtime/history_writer.py` — `save_to_history` extracted from the
+  `app_factory._build` closure with its ordering contract documented, plus 14
+  tests (`tests/unit/test_history_writer.py`).
+- `frontend/src/test/renderPage.tsx` — a page-level harness that stubs the
+  whole `latticeApi` surface, making error states, empty states and both
+  languages reachable in unit tests.
+- First unit tests for every page: `System` (11), `Library` (7), `Capture` (6),
+  `Act` (8), `Brain` (8). Frontend suite 154 → 208 tests.
+- Python tests for boundaries that had none: Telegram allowlist (26),
+  `run_command` containment (34), audit log and sensitivity report (22),
+  model-load consent gates (14), connection lifecycle guards. 1,786 → 1,896.
+- `docs/MYPY_BACKLOG.md` — the 77 modules still outside type checking with
+  per-module error counts, smallest first.
+- ARCHITECTURE.md "Verification Surface" diagram: which figures gate CI and
+  which are only reported.
+
+### Changed
+- mypy adopted set: 13 → **193 of 270** modules.
+- `vitest.config.ts` gains a coverage block with `all: true`.
+- `npm run test:frontend:coverage` added.
+
+### Known
+- `app_factory._build` remains ~1,300 lines; only the history writer was
+  extracted this release.
+- Frontend coverage (28.5%) is reported but not gated — flooring it at today's
+  figure would freeze it there.
+- 77 modules remain outside mypy; see the backlog.
+
 ## [10.2.0] - 2026-07-29
 
 Response to a full code review of 10.1.1 (71/100). All twelve findings.

package/docs/COMMUNITY_AND_PLUGINS.md

@@ -1,6 +1,6 @@
 # Community And Plugins
 
-Current release: **10.2.0 — Load-Bearing Fixes**.
+Current release: **10.3.0 — Measured Ground**.
 
 LatticeAI defines the path from a strong local-first framework (8.4.0
 action-aware baseline, 8.5.0 registry+DI hardening, 8.6.0 capture/navigation

package/docs/DEVELOPMENT.md

@@ -3,7 +3,7 @@
 > **Status: canonical** — current contributor guidance, kept in sync with the
 > current release.
 
-Current release: **10.2.0 — Load-Bearing Fixes**.
+Current release: **10.3.0 — Measured Ground**.
 
 This document is for contributors working on the local-first Digital Brain
 codebase. Product positioning and quick start stay in `README.md`; release

package/docs/MYPY_BACKLOG.md

@@ -0,0 +1,98 @@
+# mypy backlog
+
+`[tool.mypy] files` in `pyproject.toml` lists every module that type-checks
+today — **193 of 270** as of 10.3.0, up from 13 in 10.2.0.
+This file is the remainder, smallest first, so the boundary is a measured
+fact rather than an open-ended intention.
+
+Adding a module to the checked set is a decision to fix that module, not its
+dependencies (`follow_imports = silent`). Work from the top: the short ones
+are usually one missing annotation.
+
+Three of these turned out to be real defects when 10.3.0 measured them:
+`hooks.py` referenced a non-existent `self._path` inside the handler for an
+unreadable registry, `_kg_fsutil.py` used `Iterable` without importing it,
+and `agent_runtime.py` called `.get` on a value that could be `None`. Those
+are fixed; the list below is what is left.
+
+| errors | module | dominant codes |
+| ---: | --- | --- |
+| 1 | `lattice_brain/graph/_kg_fsutil.py` | `union-attr` ×1 |
+| 1 | `latticeai/api/admin.py` | `call-overload` ×1 |
+| 1 | `latticeai/api/computer_use.py` | `var-annotated` ×1 |
+| 1 | `latticeai/api/hooks.py` | `unreachable` ×1 |
+| 1 | `latticeai/api/local_files.py` | `arg-type` ×1 |
+| 1 | `latticeai/api/static_routes.py` | `assignment` ×1 |
+| 1 | `latticeai/core/marketplace.py` | `arg-type` ×1 |
+| 1 | `latticeai/core/model_compat.py` | `unreachable` ×1 |
+| 1 | `latticeai/core/plugins.py` | `unreachable` ×1 |
+| 1 | `latticeai/core/project_sessions.py` | `var-annotated` ×1 |
+| 1 | `latticeai/core/workspace_os.py` | `unreachable` ×1 |
+| 1 | `latticeai/core/workspace_os_state.py` | `arg-type` ×1 |
+| 1 | `latticeai/runtime/sso_config_runtime.py` | `arg-type` ×1 |
+| 1 | `latticeai/services/command_center.py` | `assignment` ×1 |
+| 1 | `latticeai/services/search_service.py` | `assignment` ×1 |
+| 1 | `latticeai/services/triggers.py` | `truthy-function` ×1 |
+| 1 | `latticeai/setup/auto_setup.py` | `attr-defined` ×1 |
+| 2 | `lattice_brain/ingestion.py` | `assignment` ×2 |
+| 2 | `latticeai/api/chat_stream.py` | `var-annotated` ×1, `arg-type` ×1 |
+| 2 | `latticeai/api/mcp.py` | `var-annotated` ×2 |
+| 2 | `latticeai/core/mcp_registry.py` | `index` ×1, `return-value` ×1 |
+| 2 | `latticeai/core/run_explain.py` | `union-attr` ×1, `call-overload` ×1 |
+| 2 | `latticeai/core/workspace_snapshots.py` | `var-annotated` ×2 |
+| 2 | `latticeai/runtime/review_wiring.py` | `call-arg` ×2 |
+| 2 | `latticeai/services/brain_intelligence.py` | `operator` ×1, `index` ×1 |
+| 2 | `latticeai/services/memory_service.py` | `misc` ×1, `index` ×1 |
+| 2 | `latticeai/services/model_loading.py` | `arg-type` ×1, `call-overload` ×1 |
+| 2 | `latticeai/services/multimodal_streaming.py` | `attr-defined` ×1, `arg-type` ×1 |
+| 2 | `latticeai/setup/wizard.py` | `attr-defined` ×1, `dict-item` ×1 |
+| 2 | `latticeai/tools/documents.py` | `arg-type` ×2 |
+| 3 | `lattice_brain/quality.py` | `var-annotated` ×2, `return-value` ×1 |
+| 3 | `latticeai/api/models.py` | `call-overload` ×2, `attr-defined` ×1 |
+| 3 | `latticeai/cli/entrypoint.py` | `operator` ×1, `union-attr` ×1, `arg-type` ×1 |
+| 3 | `latticeai/core/audit.py` | `assignment` ×1, `index` ×1, `operator` ×1 |
+| 3 | `latticeai/integrations/telegram_bot.py` | `union-attr` ×2, `arg-type` ×1 |
+| 3 | `latticeai/runtime/stages.py` | `arg-type` ×3 |
+| 3 | `latticeai/services/cloud_streaming.py` | `arg-type` ×2, `attr-defined` ×1 |
+| 3 | `latticeai/services/hybrid_chat.py` | `arg-type` ×3 |
+| 3 | `latticeai/services/tool_dispatch.py` | `arg-type` ×3 |
+| 4 | `lattice_brain/graph/_kg_common.py` | `misc` ×3, `return-value` ×1 |
+| 4 | `latticeai/api/chat_agent_http.py` | `arg-type` ×2, `misc` ×1, `assignment` ×1 |
+| 4 | `latticeai/api/chat_helpers.py` | `call-overload` ×2, `union-attr` ×1, `arg-type` ×1 |
+| 4 | `latticeai/api/security_dashboard.py` | `assignment` ×3, `unreachable` ×1 |
+| 4 | `latticeai/services/evidence_actions.py` | `union-attr` ×4 |
+| 5 | `lattice_brain/context.py` | `arg-type` ×4, `misc` ×1 |
+| 5 | `latticeai/api/permissions.py` | `arg-type` ×5 |
+| 5 | `latticeai/services/model_engines.py` | `attr-defined` ×2, `call-overload` ×2, `unreachable` ×1 |
+| 5 | `latticeai/services/run_executor.py` | `unreachable` ×3, `arg-type` ×1, `return-value` ×1 |
+| 6 | `lattice_brain/runtime/contracts.py` | `union-attr` ×6 |
+| 6 | `latticeai/core/agent.py` | `arg-type` ×4, `return-value` ×2 |
+| 7 | `lattice_brain/graph/proactive.py` | `assignment` ×2, `arg-type` ×2, `index` ×1 |
+| 7 | `latticeai/app_factory.py` | `arg-type` ×3, `assignment` ×2, `attr-defined` ×2 |
+| 7 | `latticeai/core/embedding_providers.py` | `unreachable` ×2, `assignment` ×2, `union-attr` ×2 |
+| 7 | `latticeai/services/openai_compatible_adapter.py` | `arg-type` ×7 |
+| 8 | `lattice_brain/graph/curator.py` | `operator` ×8 |
+| 8 | `lattice_brain/workflow.py` | `arg-type` ×5, `index` ×2, `assignment` ×1 |
+| 8 | `latticeai/api/setup.py` | `index` ×5, `attr-defined` ×3 |
+| 8 | `latticeai/services/local_knowledge.py` | `union-attr` ×3, `misc` ×2, `operator` ×2 |
+| 10 | `latticeai/api/tools.py` | `arg-type` ×10 |
+| 13 | `latticeai/api/search.py` | `return` ×12, `return-value` ×1 |
+| 15 | `lattice_brain/graph/store.py` | `name-defined` ×15 |
+| 16 | `latticeai/api/chat.py` | `arg-type` ×12, `misc` ×3, `call-overload` ×1 |
+| 16 | `latticeai/tools/computer.py` | `union-attr` ×16 |
+| 19 | `lattice_brain/graph/retrieval_docgen.py` | `name-defined` ×12, `attr-defined` ×7 |
+| 35 | `latticeai/services/model_runtime.py` | `index` ×15, `arg-type` ×8, `attr-defined` ×6 |
+| 45 | `lattice_brain/graph/retrieval_reads.py` | `name-defined` ×30, `attr-defined` ×15 |
+| 46 | `latticeai/models/router.py` | `arg-type` ×26, `assignment` ×7, `attr-defined` ×4 |
+| 57 | `lattice_brain/graph/write_master.py` | `name-defined` ×48, `attr-defined` ×9 |
+| 64 | `lattice_brain/graph/documents.py` | `name-defined` ×45, `attr-defined` ×19 |
+| 71 | `lattice_brain/graph/provenance.py` | `name-defined` ×59, `attr-defined` ×12 |
+| 77 | `lattice_brain/graph/retrieval.py` | `name-defined` ×61, `attr-defined` ×16 |
+| 79 | `lattice_brain/graph/discovery.py` | `name-defined` ×72, `attr-defined` ×7 |
+| 107 | `lattice_brain/graph/retrieval_vector.py` | `name-defined` ×68, `attr-defined` ×39 |
+| 108 | `latticeai/api/workspace.py` | `misc` ×105, `arg-type` ×2, `call-overload` ×1 |
+| 127 | `lattice_brain/graph/discovery_index.py` | `name-defined` ×98, `attr-defined` ×29 |
+| 143 | `lattice_brain/graph/projection.py` | `name-defined` ×122, `attr-defined` ×21 |
+| 177 | `lattice_brain/graph/ingest.py` | `name-defined` ×122, `attr-defined` ×55 |
+
+Total outstanding: **1407** errors across **77** modules.

package/docs/ONBOARDING.md

@@ -1,6 +1,6 @@
 # Lattice AI Onboarding
 
-Current release: **10.2.0 — Load-Bearing Fixes**.
+Current release: **10.3.0 — Measured Ground**.
 
 The first-run goal is a five-minute path from "I opened the app" to "my Brain
 has a source, a question, and proof." This page is the product contract behind

package/docs/OPERATIONS.md

@@ -1,4 +1,4 @@
-# Lattice AI — Operations Guide (v10.2.0)
+# Lattice AI — Operations Guide (v10.3.0)
 
 > **Status: canonical** — kept in sync with the current release. Storage layout
 > below reflects the SQLite live Brain store and workspace scoping, not the

package/docs/TRUST_MODEL.md

@@ -1,6 +1,6 @@
 # Lattice AI Trust Model
 
-Current release: **10.2.0 — Load-Bearing Fixes**.
+Current release: **10.3.0 — Measured Ground**.
 
 Lattice AI is local-first, explicit about external communication, and honest
 when a capability is unavailable.

package/docs/WHY_LATTICE.md

@@ -1,6 +1,6 @@
 # Why Lattice AI Exists
 
-Current release: **10.2.0 — Load-Bearing Fixes**.
+Current release: **10.3.0 — Measured Ground**.
 
 **Lattice AI is a local-first Digital Brain that keeps your knowledge durable
 across any AI model.**

package/docs/kg-schema.md

@@ -1,6 +1,6 @@
 # Knowledge Graph Schema
 
-Current release: **10.2.0 — Load-Bearing Fixes**.
+Current release: **10.3.0 — Measured Ground**.
 
 명세 출처: `lattice_ai_full_spec.pptx` 슬라이드 20·21·22
 구현: `lattice_brain/graph/schema.py`

package/lattice_brain/__init__.py

@@ -26,7 +26,7 @@ from .storage import (
     storage_from_env,
 )
 
-__version__ = "10.2.0"
+__version__ = "10.3.0"
 
 __all__ = [
     "AgentRuntime",

package/lattice_brain/graph/_kg_fsutil.py

@@ -18,7 +18,7 @@ import platform
 import re
 from datetime import datetime
 from pathlib import Path
-from typing import Any, Dict, List, Optional, Tuple
+from typing import Any, Dict, Iterable, List, Optional, Tuple
 
 from ..quiet import quiet
 from ..utils import now_iso as _now

package/lattice_brain/runtime/agent_runtime.py

@@ -518,8 +518,13 @@ class AgentRuntime:
             if sentence.strip(" -•\t")
         ]
         facts = [_compact_text(sentence, limit=180) for sentence in sentences[:4]]
-        review = getattr(result, "review", None) if isinstance(getattr(result, "review", None), dict) else {}
-        plan_review = getattr(result, "plan_review", None) if isinstance(getattr(result, "plan_review", None), dict) else {}
+        # `or {}` rather than the isinstance ternary: the ternary could still
+        # yield None when the attribute was a dict-typed None, and the next
+        # line calls .get on both.
+        review = getattr(result, "review", None)
+        review = review if isinstance(review, dict) else {}
+        plan_review = getattr(result, "plan_review", None)
+        plan_review = plan_review if isinstance(plan_review, dict) else {}
         decision_seed = review.get("decision") or review.get("status") or plan_review.get("decision") or getattr(result, "status", "")
         decisions = [
             _compact_text(f"Run finished with {decision_seed}", limit=160),

package/lattice_brain/runtime/hooks.py

@@ -344,7 +344,7 @@ class HooksRegistry:
                     data.setdefault("overrides", {})
                     return data
             except (OSError, json.JSONDecodeError, TypeError, ValueError) as exc:
-                LOGGER.warning("hook registry state is unreadable at %s: %s", self._path, exc)
+                LOGGER.warning("hook registry state is unreadable at %s: %s", self.path, exc)
         return {"custom": [], "overrides": {}}
 
     def _save(self) -> None:

package/lattice_brain/runtime/multi_agent.py

@@ -47,7 +47,7 @@ from typing import Any, Callable, Dict, List, Optional
 from ..utils import now_iso as _now
 from .contracts import multi_agent_contract
 
-MULTI_AGENT_VERSION = "10.2.0"
+MULTI_AGENT_VERSION = "10.3.0"
 
 AGENT_ROLES = ("researcher", "planner", "executor", "reviewer", "release")
 CORE_PIPELINE = ("planner", "executor", "reviewer")

package/latticeai/__init__.py

@@ -1,3 +1,3 @@
 """Lattice AI - modular server package."""
 
-__version__ = "10.2.0"
+__version__ = "10.3.0"

package/latticeai/app_factory.py

@@ -31,6 +31,7 @@ from latticeai.runtime.chat_wiring import (
 from latticeai.runtime.config_runtime import build_config_runtime
 from latticeai.runtime.context_runtime import build_context_runtime
 from latticeai.runtime.history_runtime import build_history_query_runtime
+from latticeai.runtime.history_writer import HistoryWriterDeps, write_chat_turn
 from latticeai.runtime.hooks_runtime import (
     bind_builtin_hook_runners,
     bind_trigger_hook_runner,
@@ -258,7 +259,6 @@ def _build(config: "Optional[Config]" = None) -> Dict[str, Any]:
     except Exception:
         keyring = None
 
-    from datetime import datetime
 
     # ── App-level config — parsed once, in one place (latticeai.core.config) ──────
     # The module-level names below are kept as a compatibility surface for the rest
@@ -409,6 +409,46 @@ def _build(config: "Optional[Config]" = None) -> Dict[str, Any]:
     # free). Legacy chat_history.json is imported once, idempotently, and the
     # file is left untouched on disk as the import source.
     CONVERSATIONS = _brain_runtime["CONVERSATIONS"]
+
+    def save_to_history(
+        role: str,
+        message: str,
+        user_email: Optional[str] = None,
+        user_nickname: Optional[str] = None,
+        source: Optional[str] = None,
+        conversation_id: Optional[str] = None,
+        workspace_id: Optional[str] = None,
+    ) -> None:
+        """Persist one chat turn. Logic lives in runtime/history_writer.py.
+
+        This stays a closure on purpose: `append_audit_event`,
+        `classify_sensitive_message` and `redact_secret_text` are bound further
+        down this composition root, and a closure resolves them at call time.
+        Hoisting the construction instead would reorder the whole function.
+        """
+        write_chat_turn(
+            role,
+            message,
+            user_email=user_email,
+            user_nickname=user_nickname,
+            source=source,
+            conversation_id=conversation_id,
+            workspace_id=workspace_id,
+            deps=HistoryWriterDeps(
+                conversations=CONVERSATIONS,
+                append_audit_event=append_audit_event,
+                classify_sensitive_message=classify_sensitive_message,
+                redact_secret_text=redact_secret_text,
+                normalize_branding=normalize_branding,
+                ingestion_pipeline=INGESTION_PIPELINE,
+                ingestion_item_factory=IngestionItem,
+                enable_graph=ENABLE_GRAPH,
+                knowledge_graph=KNOWLEDGE_GRAPH,
+            ),
+        )
+
+
+
     # Hooks registry is constructed here (ahead of the watcher) so folder-watch
     # reindexes can fire the pre_index/post_index lifecycle hooks. The registry
     # + watcher pair is assembled behind the hooks_runtime seam.
@@ -534,72 +574,7 @@ def _build(config: "Optional[Config]" = None) -> Dict[str, Any]:
 
     # audit build moved after redact_secret_text is defined (see below)
 
-    def save_to_history(
-        role: str,
-        message: str,
-        user_email: Optional[str] = None,
-        user_nickname: Optional[str] = None,
-        source: Optional[str] = None,
-        conversation_id: Optional[str] = None,
-        workspace_id: Optional[str] = None,
-    ):
-        try:
-            message = redact_secret_text(message)
-            if role == "assistant":
-                message = normalize_branding(message)
-            item = {"role": role, "content": message, "timestamp": datetime.now().isoformat()}
-            if user_email:
-                item["user_email"] = user_email
-            if user_nickname:
-                item["user_nickname"] = user_nickname
-            if source:
-                item["source"] = source
-            if conversation_id:
-                item["conversation_id"] = conversation_id
-            if workspace_id:
-                item["workspace_id"] = workspace_id
-            sensitive = classify_sensitive_message(item, -1)
-            append_audit_event(
-                "chat_message",
-                role=role,
-                user_email=user_email,
-                user_nickname=user_nickname,
-                source=source,
-                conversation_id=conversation_id,
-                workspace_id=workspace_id,
-                content_preview=sensitive.get("preview"),
-                content_chars=len(message or ""),
-                sensitivity=sensitive.get("sensitivity"),
-                sensitive_labels=sensitive.get("labels") or [],
-            )
-            # v4: conversations are durable episodic memory — unbounded SQLite
-            # store (the 50-message chat_history.json cap is dead).
-            CONVERSATIONS.append(item)
-            try:
-                if ENABLE_GRAPH and KNOWLEDGE_GRAPH:
-                    # v4: chat messages enter the brain through the unified
-                    # ingestion pipeline (provenance + hook lifecycle), not by
-                    # bypassing it with a direct store call.
-                    INGESTION_PIPELINE.ingest(
-                        IngestionItem(
-                            source_type="chat_message",
-                            text=message,
-                            owner=user_email,
-                            workspace_id=workspace_id,
-                            conversation_id=conversation_id,
-                            metadata={
-                                "role": role,
-                                "user_nickname": user_nickname,
-                                "source": source,
-                                "raw": item,
-                            },
-                        ),
-                        user_email=user_email,
-                    )
-            except Exception as graph_error:
-                logging.warning("knowledge graph message ingest failed: %s", graph_error)
-        except Exception as e:
-            logging.warning("save_to_history failed: %s", e)
+
 
     def redact_secret_text(text: str) -> str:
         return _redact_secret_text(text)
@@ -692,6 +667,7 @@ def _build(config: "Optional[Config]" = None) -> Dict[str, Any]:
     def build_sensitivity_report(history: List[Dict]) -> Dict:
         return _build_sensitivity_report(history)
 
+
     # ── Admin audit report — delegated to latticeai.core.audit ───────────────────
     def build_admin_audit_report(users: Dict, audit_events: Optional[List[Dict]] = None) -> Dict:
         graph_stats = None

package/latticeai/core/legacy_compatibility.py

@@ -13,7 +13,7 @@ from dataclasses import dataclass
 from pathlib import Path
 from typing import Any, Dict, List
 
-LEGACY_COMPATIBILITY_VERSION = "10.2.0"
+LEGACY_COMPATIBILITY_VERSION = "10.3.0"
 
 
 @dataclass(frozen=True)

package/latticeai/core/marketplace.py

@@ -10,7 +10,7 @@ from __future__ import annotations
 from copy import deepcopy
 from typing import Any, Dict, List, Optional
 
-MARKETPLACE_VERSION = "10.2.0"
+MARKETPLACE_VERSION = "10.3.0"
 TEMPLATE_KINDS = ("plugin", "workflow", "agent", "ingestion_bridge")
 
 

package/latticeai/core/workspace_os_constants.py

@@ -10,7 +10,7 @@ from __future__ import annotations
 
 from typing import Dict
 
-WORKSPACE_OS_VERSION = "10.2.0"
+WORKSPACE_OS_VERSION = "10.3.0"
 
 # Workspace types separate single-user Personal workspaces from shared
 # Organization workspaces. Both keep the same local-first JSON store; the type