ltcai 4.3.0 → 4.3.3

package/docs/V4_3_2_INDEPENDENT_AUDIT_PACKAGE.md

@@ -0,0 +1,209 @@
+# Lattice AI v4.3.2 Independent Audit Package
+
+Date: 2026-06-13
+
+This package is for a separate AI or human reviewer. It summarizes what to
+inspect and how to reproduce validation. It is not itself an independent audit.
+
+## Current Architecture Summary
+
+- Desktop: Tauri 2 primary shell in `src-tauri/`; Electron fallback in
+  `desktop/electron/`.
+- Frontend: React + TypeScript + Vite SPA in `frontend/`, shipped from
+  `static/app/`.
+- API: FastAPI localhost backend; frontend uses generated OpenAPI types and
+  does not call Python directly.
+- Brain Core: independent Python package `lattice_brain`.
+- Storage: `StorageEngine` abstraction with SQLite default and optional
+  PostgreSQL/pgvector scale mode.
+- Portability: encrypted `.latticebrain` archives, backup/restore, inspect,
+  verify, import dry-run, and restore dry-run/restore APIs.
+- Privacy: default startup is local-only; external integrations and downloads
+  require explicit opt-in paths.
+
+## README Claims To Verify
+
+- Desktop startup and sidecar shutdown.
+- Brain graph search, grouping, focus, filtering, and graph persistence.
+- Ask no-model honesty and graph context.
+- Capture document ingestion.
+- Act workflow create/run surfaces and honest agent runtime status.
+- Library model/runtime availability.
+- System storage, backup, archive, Brain Network, and device identity status.
+- Backup/restore and `.latticebrain` portability flows.
+- Exact v4.3.2 artifact readiness.
+
+## Self-Audit Evidence Paths
+
+- Root evidence folder: `output/audits/v4.3.2-rc/`
+- Screenshots: `output/audits/v4.3.2-rc/screenshots/`
+- GIF: `output/audits/v4.3.2-rc/gifs/graph-product-walkthrough.gif`
+- Runtime logs: `output/audits/v4.3.2-rc/logs/`
+- Video: `output/audits/v4.3.2-rc/videos/graph-product-walkthrough.webm`
+
+## Key Screenshots / GIFs
+
+- Desktop startup:
+  `output/audits/v4.3.2-rc/screenshots/13-desktop-sidecar-startup.png`
+- Brain graph:
+  `output/audits/v4.3.2-rc/screenshots/02-graph-explorer-before.png`
+- Graph walkthrough:
+  `output/audits/v4.3.2-rc/gifs/graph-product-walkthrough.gif`
+- Ask:
+  `output/audits/v4.3.2-rc/screenshots/14-ask-context.png`
+- Capture:
+  `output/audits/v4.3.2-rc/screenshots/15-capture-ingestion.png`
+- Act:
+  `output/audits/v4.3.2-rc/screenshots/09-workflow-create-run.png`
+- Library:
+  `output/audits/v4.3.2-rc/screenshots/12-library-model-status.png`
+- System:
+  `output/audits/v4.3.2-rc/screenshots/08-system-storage-status.png`
+- Backup/restore:
+  `output/audits/v4.3.2-rc/screenshots/06-brain-portability-backup.png`
+- `.latticebrain`:
+  `output/audits/v4.3.2-rc/screenshots/07-system-archive-flows.png`
+
+## Validation Results
+
+See `docs/V4_3_2_VALIDATION_REPORT.md`.
+
+Expected green checks:
+
+- Python compile
+- Ruff
+- unit tests
+- live integration tests
+- frontend lint
+- TypeScript typecheck
+- Playwright visual tests
+- Tauri check/build
+- release artifact validation
+- wheel smoke
+- npm pack dry-run
+- README-linked Markdown link check
+- Vercel static build
+
+## Commands To Reproduce
+
+```bash
+npm install
+npm run check:python
+node scripts/run_python.mjs -m ruff check .
+npm run lint
+npm run typecheck
+npm run test:unit
+LTCAI_TEST_BASE_URL=http://127.0.0.1:4932 npm run test:integration
+npm run test:visual
+npm run desktop:tauri:check
+npm run release:artifacts
+npm run release:validate
+node scripts/run_python.mjs scripts/wheel_smoke.py --wheel dist/ltcai-4.3.2-py3-none-any.whl
+npm pack --dry-run
+npm run docs:check-links
+npm run vercel:build
+```
+
+For live integration tests, start a local backend first or set
+`LTCAI_TEST_BASE_URL` to an already running test backend.
+
+## Known Limitations
+
+- v4.3.2 is not tagged or released by this preparation work.
+- External registries are not published by this preparation work.
+- Ask needs a loaded model for generated answers; no-model state is expected to
+  be honest rather than successful.
+- PostgreSQL/pgvector and Docker flows are optional and consent-gated.
+- Live Postgres migration validation is not part of this release-prep pass
+  without fresh explicit Docker consent.
+- Vercel is documentation-only and intentionally does not host the product
+  runtime.
+
+## Changed Files Since v4.3.1
+
+Exact manifest prepared for review:
+
+```text
+.gitignore
+ARCHITECTURE.md
+FEATURE_STATUS.md
+README.md
+RELEASE.md
+RELEASE_NOTES.md
+RELEASE_NOTES_v4.3.2.md
+SECURITY.md
+docs/CHANGELOG.md
+docs/V4_3_2_DOCUMENTATION_CLEANUP_REPORT.md
+docs/V4_3_2_GITHUB_VERCEL_CHECK_REPORT.md
+docs/V4_3_2_GRAPH_UX_REPORT.md
+docs/V4_3_2_INDEPENDENT_AUDIT_PACKAGE.md
+docs/V4_3_2_PRODUCT_POLISH_REPORT.md
+docs/V4_3_2_SELF_AUDIT_REPORT.md
+docs/V4_3_2_VALIDATION_REPORT.md
+docs/V4_DIGITAL_BRAIN_RECOVERY.md
+frontend/openapi.json
+frontend/src/components/primitives.tsx
+frontend/src/pages/Act.tsx
+frontend/src/pages/Ask.tsx
+frontend/src/pages/Brain.tsx
+frontend/src/pages/Capture.tsx
+frontend/src/pages/Library.tsx
+frontend/src/pages/System.tsx
+lattice_brain/__init__.py
+latticeai/__init__.py
+latticeai/core/marketplace.py
+latticeai/core/multi_agent.py
+latticeai/core/workspace_os.py
+output/audits/v4.3.2-rc/gifs/graph-product-walkthrough.gif
+output/audits/v4.3.2-rc/logs/archive-create.json
+output/audits/v4.3.2-rc/logs/archive-import-dry-run.json
+output/audits/v4.3.2-rc/logs/archive-verify.json
+output/audits/v4.3.2-rc/logs/backup-health-after-ui.json
+output/audits/v4.3.2-rc/logs/desktop-shutdown-after-fix.txt
+output/audits/v4.3.2-rc/logs/desktop-sidecar-health-after-shutdown-fix.json
+output/audits/v4.3.2-rc/logs/desktop-sidecar-health.json
+output/audits/v4.3.2-rc/logs/graph-after-upload.json
+output/audits/v4.3.2-rc/logs/readme-upload-note.json
+output/audits/v4.3.2-rc/logs/self-audit-browser-results.json
+output/audits/v4.3.2-rc/logs/storage.json
+output/audits/v4.3.2-rc/logs/upload-note.json
+output/audits/v4.3.2-rc/logs/workflow-create.json
+output/audits/v4.3.2-rc/screenshots/01-first-startup.png
+output/audits/v4.3.2-rc/screenshots/02-graph-explorer-before.png
+output/audits/v4.3.2-rc/screenshots/03-graph-search.png
+output/audits/v4.3.2-rc/screenshots/04-graph-collapse-group.png
+output/audits/v4.3.2-rc/screenshots/05-graph-focus-neighborhood.png
+output/audits/v4.3.2-rc/screenshots/06-brain-portability-backup.png
+output/audits/v4.3.2-rc/screenshots/07-system-archive-flows.png
+output/audits/v4.3.2-rc/screenshots/08-system-storage-status.png
+output/audits/v4.3.2-rc/screenshots/09-workflow-create-run.png
+output/audits/v4.3.2-rc/screenshots/10-agent-runtime-status.png
+output/audits/v4.3.2-rc/screenshots/11-brain-network-device-identity.png
+output/audits/v4.3.2-rc/screenshots/12-library-model-status.png
+output/audits/v4.3.2-rc/screenshots/13-desktop-sidecar-startup.png
+output/audits/v4.3.2-rc/screenshots/14-ask-context.png
+output/audits/v4.3.2-rc/screenshots/15-capture-ingestion.png
+output/audits/v4.3.2-rc/videos/graph-product-walkthrough.webm
+package-lock.json
+package.json
+pyproject.toml
+scripts/build_vercel_static.mjs
+scripts/check_markdown_links.mjs
+src-tauri/Cargo.lock
+src-tauri/Cargo.toml
+src-tauri/src/main.rs
+src-tauri/tauri.conf.json
+static/app/asset-manifest.json
+static/app/assets/index-BhPuj8rT.js
+static/app/assets/index-BhPuj8rT.js.map
+static/app/assets/index-CHHal8Zl.css
+static/app/assets/index-pdzil9ac.js
+static/app/assets/index-pdzil9ac.js.map
+static/app/assets/index-yZswHE3d.css
+static/app/index.html
+tests/visual/mock_server.cjs
+tests/visual/v3.spec.js
+vercel.json
+vscode-extension/package-lock.json
+vscode-extension/package.json
+```

package/docs/V4_3_2_PRODUCT_POLISH_REPORT.md

@@ -0,0 +1,57 @@
+# Lattice AI v4.3.2 Product Polish Report
+
+Date: 2026-06-13
+
+## Scope
+
+v4.3.2 removes end-user polish debt from the React/Vite desktop SPA while
+preserving the v4.3.1 architecture and backend API contracts.
+
+## Implemented
+
+- Added structured render primitives for nested runtime data, operation
+  results, entity lists, and value previews.
+- Replaced normal product JSON dumps in Brain, Ask, Capture, Act, Library, and
+  System with readable status panels and result cards.
+- Kept technical identifiers visible when they matter, especially for agents,
+  storage, archive, and device identity records.
+- Added System archive import dry-run and confirmed import controls backed by
+  existing `.latticebrain` archive APIs.
+- Improved System status for health, storage mode, backup health, device
+  identity, Brain Network, hardening, security, admin, account, SSO, snapshots,
+  activity, and settings.
+- Preserved honest unavailable states for optional models, Postgres, Docker,
+  sqlite-vec, external integrations, and unavailable runtime actions.
+- Added app-level Tauri exit cleanup so the FastAPI sidecar is shut down on
+  normal macOS quit.
+
+## Files Touched
+
+- `frontend/src/components/primitives.tsx`
+- `frontend/src/pages/Brain.tsx`
+- `frontend/src/pages/Ask.tsx`
+- `frontend/src/pages/Capture.tsx`
+- `frontend/src/pages/Act.tsx`
+- `frontend/src/pages/Library.tsx`
+- `frontend/src/pages/System.tsx`
+- `src-tauri/src/main.rs`
+- `tests/visual/mock_server.cjs`
+- `tests/visual/v3.spec.js`
+
+## Evidence
+
+- First startup: `output/audits/v4.3.2-rc/screenshots/01-first-startup.png`
+- Brain portability and backup: `output/audits/v4.3.2-rc/screenshots/06-brain-portability-backup.png`
+- System archive flows: `output/audits/v4.3.2-rc/screenshots/07-system-archive-flows.png`
+- System storage status: `output/audits/v4.3.2-rc/screenshots/08-system-storage-status.png`
+- Workflow create/run: `output/audits/v4.3.2-rc/screenshots/09-workflow-create-run.png`
+- Agent runtime status: `output/audits/v4.3.2-rc/screenshots/10-agent-runtime-status.png`
+- Brain Network and device identity: `output/audits/v4.3.2-rc/screenshots/11-brain-network-device-identity.png`
+- Library model status: `output/audits/v4.3.2-rc/screenshots/12-library-model-status.png`
+- Desktop sidecar startup: `output/audits/v4.3.2-rc/screenshots/13-desktop-sidecar-startup.png`
+
+## Result
+
+PASS. The visible product surfaces are now readable, API-backed, and explicit
+about unavailable optional capabilities. No fake controls or demo-only screens
+were added.

package/docs/V4_3_2_SELF_AUDIT_REPORT.md

@@ -0,0 +1,63 @@
+# Lattice AI v4.3.2 Self-Audit Report
+
+Date: 2026-06-13
+
+## Method
+
+The audit used the built v4.3.2 product, not source-code claims. It started a
+local FastAPI backend with an isolated data directory, seeded a real document
+through the upload API, opened the React SPA, exercised product flows, captured
+screenshots/GIF evidence, launched the rebuilt Tauri app, and verified desktop
+sidecar startup/shutdown.
+
+## Runtime Inputs
+
+- API base: `http://127.0.0.1:4932`
+- Audit data dir: `/tmp/lattice-v432-audit`
+- Desktop data dir: `/tmp/lattice-v432-desktop3`
+- Uploaded note: `/tmp/lattice-v432-files/v432-audit-note.md`
+- Archive path: `/tmp/lattice-v432-audit/self-audit.latticebrain`
+
+## Observed Results
+
+| Scenario | Result | Evidence |
+| --- | --- | --- |
+| First startup | PASS | `output/audits/v4.3.2-rc/screenshots/01-first-startup.png` |
+| Graph exploration baseline | PASS | `output/audits/v4.3.2-rc/screenshots/02-graph-explorer-before.png` |
+| Graph search/collapse/focus | PASS | `output/audits/v4.3.2-rc/screenshots/03-graph-search.png`, `04-graph-collapse-group.png`, `05-graph-focus-neighborhood.png` |
+| Ask no-model honesty and graph context | PASS | `output/audits/v4.3.2-rc/screenshots/14-ask-context.png` |
+| Capture document ingestion | PASS | `output/audits/v4.3.2-rc/screenshots/15-capture-ingestion.png` |
+| Brain backup and graph portability | PASS | `output/audits/v4.3.2-rc/screenshots/06-brain-portability-backup.png` |
+| System archive export/inspect/verify/import/restore dry-run | PASS | `output/audits/v4.3.2-rc/screenshots/07-system-archive-flows.png` |
+| Storage and Postgres optional status | PASS | `output/audits/v4.3.2-rc/screenshots/08-system-storage-status.png` |
+| Workflow create/run surfaces | PASS | `output/audits/v4.3.2-rc/screenshots/09-workflow-create-run.png` |
+| Agent runtime availability | PASS | `output/audits/v4.3.2-rc/screenshots/10-agent-runtime-status.png` |
+| Brain Network and device identity | PASS | `output/audits/v4.3.2-rc/screenshots/11-brain-network-device-identity.png` |
+| Library model unavailable honesty | PASS | `output/audits/v4.3.2-rc/screenshots/12-library-model-status.png` |
+| Desktop sidecar startup | PASS | `output/audits/v4.3.2-rc/screenshots/13-desktop-sidecar-startup.png` |
+| Desktop sidecar shutdown | PASS | `output/audits/v4.3.2-rc/logs/desktop-shutdown-after-fix.txt` |
+
+## Runtime Logs
+
+- Upload result: `output/audits/v4.3.2-rc/logs/upload-note.json`
+- README evidence upload: `output/audits/v4.3.2-rc/logs/readme-upload-note.json`
+- Graph after upload: `output/audits/v4.3.2-rc/logs/graph-after-upload.json`
+- Archive create: `output/audits/v4.3.2-rc/logs/archive-create.json`
+- Archive verify: `output/audits/v4.3.2-rc/logs/archive-verify.json`
+- Archive import dry-run: `output/audits/v4.3.2-rc/logs/archive-import-dry-run.json`
+- Storage: `output/audits/v4.3.2-rc/logs/storage.json`
+- Backup health: `output/audits/v4.3.2-rc/logs/backup-health-after-ui.json`
+- Workflow create: `output/audits/v4.3.2-rc/logs/workflow-create.json`
+- Browser automation results: `output/audits/v4.3.2-rc/logs/self-audit-browser-results.json`
+- Desktop health: `output/audits/v4.3.2-rc/logs/desktop-sidecar-health-after-shutdown-fix.json`
+
+## Media
+
+- Graph walkthrough GIF: `output/audits/v4.3.2-rc/gifs/graph-product-walkthrough.gif`
+- Graph walkthrough video: `output/audits/v4.3.2-rc/videos/graph-product-walkthrough.webm`
+
+## Result
+
+PASS. The observed product behavior supports the v4.3.2 RC claims. No placeholder
+or fake functionality was accepted as complete. Optional capabilities remain
+honestly unavailable unless their runtime dependencies and user consent exist.

package/docs/V4_3_2_VALIDATION_REPORT.md

@@ -0,0 +1,97 @@
+# Lattice AI v4.3.2 Validation Report
+
+Date: 2026-06-13
+
+## Summary
+
+v4.3.2 validation is green for the implemented product polish, graph UX, desktop
+shutdown, exact-version release artifacts, and the release-prep documentation /
+Vercel static-build fixes.
+
+## Release-Prep Fix Validation
+
+These checks were rerun after the README badge restore, diagram-first
+`ARCHITECTURE.md` rewrite, Vercel static-only configuration fix, and linked-doc
+cleanup.
+
+| Check | Result |
+| --- | --- |
+| `node -e "JSON.parse(require('fs').readFileSync('vercel.json','utf8'))"` | PASS |
+| `npm run vercel:build` | PASS, generated `vercel-static/index.html` |
+| `npm run docs:check-links` | PASS, README plus 15 README-linked Markdown files |
+| Mermaid structural sanity check for `ARCHITECTURE.md` | PASS, 13 Mermaid blocks; `mmdc` was not installed locally |
+| README badge link validation | PASS for PyPI, VS Code Marketplace, Open VSX, CI, license, and badge images; npm package page returned a CLI-only Cloudflare 403, so package identity was validated through `npm view ltcai` and `https://registry.npmjs.org/ltcai` |
+| Registry version check | PASS, PyPI/npm/VS Code Marketplace/Open VSX currently report `4.3.1`; README does not claim v4.3.2 external registry publication |
+| `node scripts/run_python.mjs -m pytest tests/unit/test_server_app_v14_decomposition.py::test_markdown_current_release_references_match_release tests/unit/test_truth_floor_t1_static.py::test_readme_does_not_overclaim_llm_driven_agents -v` | PASS, 2 passed |
+| `npm run lint` | PASS |
+| `npm pack --dry-run` | PASS, `ltcai-4.3.2.tgz`, 305 files, 2.9 MB |
+| `npx --yes vercel@54.12.2 build` | BLOCKED by local Vercel linkage only: `project_settings_required`; no `.vercel` project settings or credentials are present in this checkout. Static build/config validation above passed. |
+
+No product runtime code changed in this release-prep fix, and release artifacts
+were not rebuilt.
+
+## Commands
+
+| Check | Result |
+| --- | --- |
+| `npm run check:python` | PASS, compiled 691 modules |
+| `node scripts/run_python.mjs -m ruff check .` | PASS |
+| `npm run lint` | PASS |
+| `npm run typecheck` | PASS |
+| `npm run test:unit` | PASS, 602 passed, 2 warnings |
+| `LTCAI_TEST_BASE_URL=http://127.0.0.1:4932 npm run test:integration` | PASS, 9 passed, 1 skipped |
+| `npm run test:visual` | PASS, 12 Playwright tests |
+| `npm run desktop:tauri:check` | PASS |
+| `npm run release:artifacts` | PASS |
+| `npm run release:validate` | PASS |
+| `node scripts/run_python.mjs scripts/wheel_smoke.py --wheel dist/ltcai-4.3.2-py3-none-any.whl` | PASS |
+| `npm pack --dry-run` | PASS |
+| Rebuilt desktop app startup/shutdown verification | PASS |
+| `npm run vercel:build` | PASS |
+| Markdown link check for README-linked docs | PASS |
+
+## Artifact Validation
+
+Exact v4.3.2 artifacts were found:
+
+- `dist/ltcai-4.3.2-py3-none-any.whl`
+- `dist/ltcai-4.3.2.tar.gz`
+- `dist/ltcai-4.3.2.vsix`
+- `ltcai-4.3.2.tgz`
+- `src-tauri/target/release/bundle/dmg/Lattice AI_4.3.2_aarch64.dmg`
+
+The release validator warned that `dist/` also contains older historical
+artifacts. This is not a v4.3.2 artifact failure, but release uploads must use
+only the exact filenames above and never a wildcard over the `dist/` directory.
+
+## Desktop Verification
+
+- The rebuilt Tauri app launched from
+  `src-tauri/target/release/bundle/macos/Lattice AI.app/Contents/MacOS/lattice-ai-desktop`.
+- `/health` responded on `127.0.0.1:8765` with version `4.3.2`, local mode, and
+  the isolated data dir `/tmp/lattice-v432-desktop3`.
+- Normal macOS quit released port 8765.
+- Evidence:
+  - `output/audits/v4.3.2-rc/logs/desktop-sidecar-health-after-shutdown-fix.json`
+  - `output/audits/v4.3.2-rc/logs/desktop-shutdown-after-fix.txt`
+  - `output/audits/v4.3.2-rc/screenshots/13-desktop-sidecar-startup.png`
+
+## Notes
+
+- The live Postgres migration test remained skipped because v4.3.2 did not
+  request fresh Docker consent. Postgres remains optional and was not changed by
+  this RC.
+- Wheel smoke emitted optional MLX warnings inside the isolated venv, then
+  passed imports and `/health`.
+- Rust reported a future-incompatibility warning from transitive crate
+  `block v0.1.6`; `cargo check` passed.
+- GitHub Actions for the v4.3.2 RC commit were green before release-prep doc
+  cleanup: `CI` and `Visual Smoke` both completed successfully for
+  `8f3d182ee81bb395722ebab792dfd70f35e19e96`.
+- Vercel config is intentionally documentation-only: it builds
+  `vercel-static/index.html`, pins the Framework Preset to "Other", and does
+  not attempt to auto-detect or host `server.py` / the desktop runtime.
+
+## Result
+
+PASS. v4.3.2 RC artifacts and runtime behavior are validated.

package/docs/V4_3_3_VALIDATION_REPORT.md

@@ -0,0 +1,46 @@
+# Lattice AI v4.3.3 Validation Report
+
+Date: 2026-06-13
+
+v4.3.3 validation is green for the post-cleanup release tree. The release
+rebuilds exact-current-main artifacts after the independent dead-code,
+architecture, and runtime audit cleanup; v4.3.2 artifacts are intentionally not
+reused.
+
+## Validation Results
+
+| Check | Result |
+| --- | --- |
+| `npm run check:python` | PASS, compiled 689 modules |
+| `node scripts/run_python.mjs -m ruff check .` | PASS |
+| `npm run lint` | PASS |
+| `npm run typecheck` | PASS, frontend TypeScript and VS Code extension build |
+| `npm run test:unit` | PASS, 602 tests |
+| `LTCAI_TEST_BASE_URL=http://127.0.0.1:4932 npm run test:integration` | PASS, 9 tests and 1 consent-gated Postgres migration test skipped |
+| `npm run test:visual` | PASS, 12 Playwright tests |
+| `npm run desktop:tauri:check` | PASS |
+| `npm run release:artifacts` | PASS |
+| `npm run release:validate` | PASS for exact v4.3.3 wheel, sdist, npm tgz, VSIX, and DMG |
+| `node scripts/run_python.mjs scripts/wheel_smoke.py --wheel dist/ltcai-4.3.3-py3-none-any.whl` | PASS, `/health` reported 4.3.3 |
+| `npm pack --dry-run` | PASS, `ltcai-4.3.3.tgz`, 292 files, 2.9 MB |
+| `node scripts/run_python.mjs -m twine check dist/ltcai-4.3.3-py3-none-any.whl dist/ltcai-4.3.3.tar.gz` | PASS |
+| `npm run docs:check-links` | PASS, README and 16 README-linked Markdown files |
+| `npm run vercel:build` | PASS, static placeholder generated for 4.3.3 |
+
+## Artifacts
+
+| Artifact | SHA-256 |
+| --- | --- |
+| `dist/ltcai-4.3.3-py3-none-any.whl` | `716d0029a6053edacde13cad978f38e41a9c67b458eba37421ae5594e7b99948` |
+| `dist/ltcai-4.3.3.tar.gz` | `77c19e9ad3e0cea757265b707b6414aef53a9d132f0456b7f0c36bcf09ece6b4` |
+| `ltcai-4.3.3.tgz` | `fb29c81152fe13854e6c3ba07f5ba8b8b14f25eedbb1920600d05ef768bec044` |
+| `dist/ltcai-4.3.3.vsix` | `28f243dbea1d0c49f78eb09176ae5c1f95d0d8530e49a103664dd338e53eac88` |
+| `src-tauri/target/release/bundle/dmg/Lattice AI_4.3.3_aarch64.dmg` | `e717a53f83762799a32e2fa1e23c9a6fd5b2b2221bb503d12e7940e57a3455a2` |
+
+## Notes
+
+- `npm run release:validate` warned that historical artifacts remain in
+  `dist/`; uploads must use only the exact v4.3.3 filenames above.
+- The live Postgres migration test remains skipped unless the owner explicitly
+  sets Docker/Postgres consent for that destructive external dependency path.
+- External registry publishing was not attempted.

package/docs/V4_DIGITAL_BRAIN_RECOVERY.md

@@ -5,28 +5,21 @@
 > completed analysis. **Update this file before ending any phase and before any
 > likely session/context/usage limit.**
 >
-> Last updated: 2026-06-12 — v4.3.0 Portability/Product Hardening RC; Remaining Gaps remain empty
+> Last updated: 2026-06-13 — v4.3.3 Dead-Code Cleanup Release; Remaining Gaps remain empty
 
 ---
 
-## 0. RELEASE STATUS (v4.3.0 RC)
-
-**v4.3.0 hardens the v4.2 Brain Core/storage architecture into a portable,
-user-safe desktop release candidate; implementation gaps remain empty.**
-Latest implementation milestone: `.latticebrain` archive format v2 is the
-primary portable brain format and carries encrypted graph DB, blobs, portable
-JSON state, signed bundles, storage metadata, provenance, public device identity
-metadata, manifest hashes, inspect, verify, import, restore, and dry-run restore.
-Restore/import requires explicit confirmation unless dry-run. Live
-SQLite-to-Postgres migration now creates and verifies a pre-migration backup
-before copying data. Tauri exposes backend status/restart/shutdown and starts
-the sidecar with loopback/default-off guards. Admin product hardening status
-reports local-only startup posture, storage, backup health, device identity,
-permissions, and opt-in external integration state.
-The v4.3.0 RC process builds validated artifacts only. It does not tag, create a
-GitHub Release, publish to PyPI, npm Registry, VS Code Marketplace, Open VSX, or
-deploy to production targets.
-v4.3.0 validation report: `docs/V4_3_VALIDATION_REPORT.md`.
+## 0. RELEASE STATUS (v4.3.3)
+
+**v4.3.3 promotes the post-cleanup main tree after the independent dead-code,
+architecture, and runtime audit without redesigning the Digital Brain frontend,
+Brain Core, storage, or agent/workflow architecture.** Latest implementation
+milestone: v4.3.2 product polish plus post-audit cleanup, architecture
+documentation correction, Vercel/static-docs readiness, README badge
+restoration, and exact-current-main release artifacts.
+The v4.3.3 process creates a GitHub Release from locally validated artifacts.
+PyPI, npm Registry, VS Code Marketplace, Open VSX, and production deployments
+remain owner-only external publishing steps.
 Remaining implementation gaps: **none**.
 Owner-only blockers: pptx history rewrite (requires force-push/owner decision)
 and consent-gated production embedder provisioning (silent default download is
@@ -34,12 +27,12 @@ not permitted).
 
 ## Remaining Gaps
 
-None. v4.3.0 preserves the already-empty v4.2.0 gap list and closes the
-portability/product-hardening work: `.latticebrain` archives are verified,
-inspectable, dry-runnable, and confirmation-gated; default startup is local-only
-and token-inert; backup health and product hardening are admin-visible; release
-artifact validation includes the exact Tauri DMG. Owner-only blockers above are
-intentionally not implementation gaps.
+None. v4.3.3 preserves the already-empty v4.3.2 gap list and promotes the
+post-cleanup tree: Brain graph exploration remains real and API-backed, raw
+product JSON dumps remain replaced with readable state, archive import/restore
+flows remain exposed through existing APIs, desktop sidecar behavior remains
+validated, and exact v4.3.3 release artifacts are the release target.
+Owner-only blockers above are intentionally not implementation gaps.
 
 ## 1. Program Charter (from the user's v4.0.0 directive)
 

package/frontend/openapi.json

@@ -1349,6 +1349,11 @@
             ],
             "title": "Adapter Path"
           },
+          "allow_download": {
+            "default": false,
+            "title": "Allow Download",
+            "type": "boolean"
+          },
           "draft_model_id": {
             "anyOf": [
               {
@@ -1820,6 +1825,11 @@
       },
       "PrepareModelRequest": {
         "properties": {
+          "allow_download": {
+            "default": false,
+            "title": "Allow Download",
+            "type": "boolean"
+          },
           "engine": {
             "anyOf": [
               {
@@ -3543,7 +3553,7 @@
   },
   "info": {
     "title": "Lattice AI Server (local)",
-    "version": "4.3.0"
+    "version": "4.3.3"
   },
   "openapi": "3.1.0",
   "paths": {

package/frontend/src/App.tsx

@@ -82,6 +82,12 @@ export default function App() {
   const [drawer, setDrawer] = React.useState(false);
   const [palette, setPalette] = React.useState(false);
   const health = useQuery({ queryKey: ["health"], queryFn: latticeApi.health });
+  const desktop = useQuery({
+    queryKey: ["desktopBackendStatus"],
+    queryFn: latticeApi.desktopBackendStatus,
+    enabled: Boolean(window.__TAURI_INTERNALS__),
+    refetchInterval: 5000,
+  });
   const workspace = useQuery({ queryKey: ["workspaceOs"], queryFn: latticeApi.workspaceOs });
 
   React.useEffect(() => {
@@ -98,6 +104,11 @@ export default function App() {
     return () => window.removeEventListener("keydown", onKey);
   }, []);
 
+  const healthData = (health.data?.data || {}) as Record<string, unknown>;
+  const appVersion = typeof healthData.version === "string" ? healthData.version : null;
+  const desktopData = (desktop.data?.data || {}) as Record<string, unknown>;
+  const desktopError = typeof desktopData.last_error === "string" ? desktopData.last_error : desktop.data?.error;
+
   const rail = (
     <aside className="flex h-full w-64 shrink-0 flex-col border-r border-border bg-card">
       <div className="flex h-16 items-center gap-3 border-b border-border px-4">
@@ -134,6 +145,9 @@ export default function App() {
       </nav>
       <div className="border-t border-border p-3 text-xs text-muted-foreground">
         <div>Server: {health.data?.ok ? "online" : "unavailable"}</div>
+        {window.__TAURI_INTERNALS__ ? (
+          <div>Sidecar: {desktopData.running ? "running" : desktopError ? `unavailable (${desktopError})` : "starting"}</div>
+        ) : null}
         <div>Workspace: {String((workspace.data?.data as Record<string, unknown>)?.active_workspace || "local")}</div>
       </div>
     </aside>
@@ -154,7 +168,7 @@ export default function App() {
           <div className="flex min-w-0 items-center gap-2">
             <Button variant="ghost" size="icon" className="lg:hidden" onClick={() => setDrawer(true)}><Menu className="h-5 w-5" /></Button>
             <div className="min-w-0">
-              <div className="truncate text-sm text-muted-foreground">v4.1.0 Release Candidate</div>
+              <div className="truncate text-sm text-muted-foreground">{appVersion ? `v${appVersion}` : "Version unavailable"}</div>
               <div className="truncate font-medium">{primaryRoutes.find((item) => item.id === route.primary)?.label}</div>
             </div>
           </div>

package/frontend/src/api/client.ts

@@ -38,6 +38,16 @@ async function tauriBackendOrigin(): Promise<string | null> {
   return desktopBase;
 }
 
+async function tauriInvoke<T>(command: string): Promise<T | null> {
+  if (!window.__TAURI_INTERNALS__) return null;
+  try {
+    const { invoke } = await import("@tauri-apps/api/core");
+    return await invoke<T>(command);
+  } catch {
+    return null;
+  }
+}
+
 async function apiBase() {
   const stateBase = useAppStore.getState().apiBase;
   if (stateBase) return stateBase;
@@ -203,6 +213,11 @@ async function streamChat(body: Record<string, unknown>, handlers: ChatEventHand
 
 export const latticeApi = {
   raw: get,
+  desktopBackendStatus: async (): Promise<ApiResult<Record<string, unknown>>> => {
+    const status = await tauriInvoke<Record<string, unknown>>("backend_status");
+    if (status) return { ok: true, status: 200, data: status, source: "live" };
+    return { ok: false, status: 0, data: {}, source: "unavailable", error: "Desktop backend status is available only inside the Tauri shell." };
+  },
   health: () => get("/health", {}),
   workspaceOs: () => get("/workspace/os", { counts: {}, models: {}, workspace_registry: { workspaces: [] } }),
   indexStatus: () => get("/api/index/status", {}),
@@ -248,7 +263,7 @@ export const latticeApi = {
   connectFolder: (path: string) => post("/knowledge-graph/local/index", { path, approved: true, watch_enabled: true, consent: { approved: true, source: "desktop-spa" } }, {}),
   localWatchStop: (source_id: string) => post("/knowledge-graph/local/watch/stop", { source_id }, {}),
   models: () => get("/models", { catalog: [], loaded: [], recommended: [] }),
-  loadModel: (model_id: string, engine?: string) => post("/models/load", { model_id, engine: engine || null }, {}),
+  loadModel: (model_id: string, engine?: string, allow_download = false) => post("/models/load", { model_id, engine: engine || null, allow_download }, {}),
   unloadModel: (model_id: string) => del(`/models/unload/${encodeURIComponent(model_id)}`, {}),
   embeddingsStatus: () => get("/api/embeddings/status", {}),
   agentRuntime: () => get("/agents/api/runtime/status", { runtime: {}, agents: [], runs: [] }),
@@ -263,6 +278,9 @@ export const latticeApi = {
   workflowDefinitions: () => get("/workflows/api/definitions", { workflows: [] }),
   workflowRuns: () => get("/workflows/api/runs", { runs: [] }),
   workflowTriggers: () => get("/workflows/api/triggers", { armed: [] }),
+  createWorkflow: (body: { name: string; nodes: Array<Record<string, unknown>>; metadata?: Record<string, unknown> }) => post("/workflows/api/definitions", body, {}),
+  importWorkflow: (data: Record<string, unknown>) => post("/workflows/api/import", { data }, {}),
+  exportWorkflow: (id: string) => get(`/workflows/api/export/${encodeURIComponent(id)}`, {}),
   runWorkflow: (id: string) => post(`/workflows/api/definitions/${encodeURIComponent(id)}/run`, {}, {}),
   updateWorkflow: (id: string, body: unknown) => patch(`/workflows/api/definitions/${encodeURIComponent(id)}`, body, {}),
   stopWorkflowRun: (id: string) => post(`/workflows/api/runs/${encodeURIComponent(id)}/stop`, {}, {}),