ltcai 8.6.0 → 8.7.0

package/README.md

@@ -1,6 +1,6 @@
 # Lattice AI
 
-**Lattice AI 8.6.0 is the local-first Digital Brain platform. This release fixes desktop folder selection for the Tauri localhost app, improves Capture feedback for folder and web source saving, and aligns the new Brain shell navigation with CI-verified visual coverage.**
+**Lattice AI 8.7.0 is the local-first Digital Brain platform. This release hardens runtime state ownership, refreshes the checked-in release evidence, and synchronizes package, desktop, extension, and documentation metadata to the 8.7.0 line.**
 
 **Lattice AI는 모델이 바뀌어도 내 지식과 맥락을 보존하는 로컬 우선 AI 브레인입니다.**
 
@@ -65,9 +65,9 @@ You need Lattice AI when:
 ## Living Brain Flow
 
 The screenshots below are the latest checked-in visual evidence captures from
-the 8.2 Brain Home release. The 8.3 line keeps that first-run flow focused on
-the Brain while adding clearer onboarding, stronger workflow/runtime
-boundaries, and better ingestion proof behind the scenes.
+the 8.7.0 release. They keep the first-run Brain flow, memory graph, source
+capture, model library, system view, admin console, and review center visible as
+release gates.
 
 ### 1. Wake Brain
 
@@ -79,21 +79,21 @@ confirm owner, check the computer, choose the Brain voice.
 Choose the owner of the Brain. The profile is not a SaaS account by default; it
 is the local identity for the knowledge you keep.
 
-![Login](output/release/v8.2.0/screenshots/01-login.png)
+![Login](output/release/v8.7.0/screenshots/01-login.png)
 
 ### 3. Recommended Models
 
 Start with a short list: safest recommendation, faster model, stronger model.
 Advanced details stay available without overwhelming first-time users.
 
-![Recommended Models](output/release/v8.2.0/screenshots/02-recommended-models.png)
+![Recommended Models](output/release/v8.7.0/screenshots/02-recommended-models.png)
 
 ### 4. Install And Load
 
 Download and load only after consent. Lattice explains model size, local
 execution, and network use before work starts.
 
-![Install and Load](output/release/v8.2.0/screenshots/03-install-load-progress.png)
+![Install and Load](output/release/v8.7.0/screenshots/03-install-load-progress.png)
 
 ### 5. Brain Chat
 
@@ -101,14 +101,14 @@ Talk normally. Useful decisions and context become memory, then appear later as
 topics, relationships, graph structure, and the concentric memory rings around
 the Brain.
 
-![Brain Brief Home](output/release/v8.2.0/screenshots/04-brain-chat-home.png)
+![Brain Brief Home](output/release/v8.7.0/screenshots/04-brain-chat-home.png)
 
 ### 6. Review Center
 
 Automation results are staged for review before they become durable decisions.
 Snooze, unsnooze, run now, approve, and dismiss actions stay explicit.
 
-![Review Center](output/release/v8.2.0/screenshots/12-review-center.png)
+![Review Center](output/release/v8.7.0/screenshots/12-review-center.png)
 
 ## Brain Depths
 
@@ -124,10 +124,10 @@ The user travels inward from everyday memory to deeper structure:
 
 Walkthrough:
 
-![v8.2.0 Living Brain walkthrough](output/release/v8.2.0/gifs/v8.2.0-living-brain-walkthrough.gif)
+![v8.7.0 Living Brain walkthrough](output/release/v8.7.0/gifs/v8.7.0-living-brain-walkthrough.gif)
 
 Screenshot index and capture notes:
-[output/release/v8.2.0/SCREENSHOT_INDEX.md](output/release/v8.2.0/SCREENSHOT_INDEX.md)
+[output/release/v8.7.0/SCREENSHOT_INDEX.md](output/release/v8.7.0/SCREENSHOT_INDEX.md)
 
 ## Install
 
@@ -190,7 +190,6 @@ Main validation set:
 
 ```bash
 npm run check:python
-node scripts/run_python.mjs -m ruff check .
 npm run lint
 npm run typecheck
 npm run test:unit
@@ -200,34 +199,36 @@ npm run desktop:tauri:check
 npm run docs:check-links
 ```
 
+`npm run lint` includes the Python Ruff baseline, frontend TypeScript lint
+gate, visual smoke syntax checks, and i18n literal checks.
+
 See [docs/DEVELOPMENT.md](docs/DEVELOPMENT.md) for developer workflow details.
 
 ## Current Release
 
-The current release is **8.6.0 — Desktop Capture & Navigation Reliability**:
+The current release is **8.7.0 — Runtime State Hygiene & Release Evidence Refresh**:
 
-- The desktop Capture flow can open a native folder picker from the Tauri
-  localhost app, fill the selected path, and immediately scan/connect it.
-- Folder picker failures now surface an actionable message instead of silently
-  doing nothing, while manual path entry remains available.
-- Web page capture keeps paste, Enter-to-save, and `https://` normalization for
-  bare domains.
-- The Brain shell sidebar/navigation and admin entry points are covered by
-  updated Visual Smoke tests, while the 8.5 ToolRegistry and Config DI
-  hardening remains active.
+- Internal model-runtime logic now reads from the typed `ModelRuntimeState`
+  object instead of the legacy module-global compatibility surface.
+- `sync_to_module_globals()` remains available for external shims, but now emits
+  a `DeprecationWarning` so new code does not rebuild global-state coupling.
+- The 8.7.0 release evidence refresh updates screenshots, walkthrough GIF/WebM,
+  package/runtime/static/Tauri metadata, and current-release documentation.
+- The 8.6 desktop Capture reliability and 8.5 ToolRegistry/Config DI hardening
+  remain active release guarantees.
 
-Expected artifacts for 8.6.0 release must use exact filenames:
+Expected artifacts for 8.7.0 release must use exact filenames:
 
-- `dist/ltcai-8.6.0-py3-none-any.whl`
-- `dist/ltcai-8.6.0.tar.gz`
-- `ltcai-8.6.0.tgz`
-- `dist/ltcai-8.6.0.vsix`
-- `src-tauri/target/release/bundle/dmg/Lattice AI_8.6.0_aarch64.dmg`
+- `dist/ltcai-8.7.0-py3-none-any.whl`
+- `dist/ltcai-8.7.0.tar.gz`
+- `ltcai-8.7.0.tgz`
+- `dist/ltcai-8.7.0.vsix`
+- `src-tauri/target/release/bundle/dmg/Lattice AI_8.7.0_aarch64.dmg`
 
 Do not use wildcard artifact uploads. Package registry publishing remains owner-run.
 
 See [docs/ROADMAP_RECOMMENDATIONS.md](docs/ROADMAP_RECOMMENDATIONS.md) for the
-strategic roadmap slices applied through 8.6.0 and the follow-up tracks.
+strategic roadmap slices applied through 8.7.0 and the follow-up tracks.
 
 ## Known Limitations
 
@@ -244,6 +245,7 @@ strategic roadmap slices applied through 8.6.0 and the follow-up tracks.
 
 | Version | Theme |
 | --- | --- |
+| 8.7.0 | Runtime State Hygiene & Release Evidence Refresh: model-runtime internals prefer typed state over legacy globals, compatibility sync is deprecated, 8.7.0 visual evidence is refreshed, and all release metadata/docs are synchronized |
 | 8.6.0 | Desktop Capture & Navigation Reliability: native folder selection works from the Tauri localhost app, picker failures surface in Capture, web saving remains one-action, and the Brain shell sidebar/admin flow is CI-covered |
 | 8.5.0 | Tool Registry Readiness & Config DI: ToolRegistry drift removed, `tz_name` flows through central Config into automation runtimes, and current-release documentation is synchronized |
 | 8.4.0 | Action-Aware Brain Chat: explicit file create/write/save/edit requests from Brain Chat route into the governed workspace file tool so files are actually created instead of returned as code-only answers |

package/docs/CHANGELOG.md

@@ -6,7 +6,29 @@ existed at that release.
 
 ## [Unreleased]
 
-No unreleased changes.
+## [8.7.0] - 2026-07-05
+
+### Added
+- Added unit test coverage for model-runtime `STATE` source-of-truth behavior
+  and deprecation warnings on legacy global synchronization.
+- Added refreshed 8.7.0 screenshots, walkthrough GIF/WebM, and capture notes
+  under `output/release/v8.7.0/`.
+
+### Changed
+- Reduced internal reliance on bare module globals in
+  `latticeai/services/model_runtime.py`; implementation logic now consistently
+  reads from the `ModelRuntimeState` instance while globals remain as a legacy
+  compatibility surface.
+- Added `DeprecationWarning` to `sync_to_module_globals()` while preserving the
+  external shim behavior.
+- Removed a loose `as any` cast from `frontend/src/pages/Act.tsx`.
+- Version bumped to 8.7.0 across Python, npm, VS Code extension, Tauri, static
+  metadata, README evidence links, release notes, and current-release
+  documentation.
+
+### Fixed
+- Internal model-runtime functions now prefer the typed state object per the
+  project preference for composition over global mutable state.
 
 ## [8.6.0] - 2026-07-05
 

package/docs/COMMUNITY_AND_PLUGINS.md

@@ -1,9 +1,11 @@
 # Community And Plugins
 
-Current release: **8.6.0 — Desktop Capture & Navigation Reliability**.
+Current release: **8.7.0 — Runtime State Hygiene & Release Evidence Refresh**.
 
-LatticeAI defines the path from a strong local-first framework (8.4.0 action-aware baseline, 8.5.0 registry+DI hardening, 8.6.0 capture/navigation reliability) to a
-product ecosystem. The immediate goal is small and practical: make it clear how
+LatticeAI defines the path from a strong local-first framework (8.4.0
+action-aware baseline, 8.5.0 registry+DI hardening, 8.6.0 capture/navigation
+reliability, and 8.7.0 runtime-state hygiene) to a product ecosystem. The
+immediate goal is small and practical: make it clear how
 contributors can extend the Brain without weakening local-first trust,
 workspace scoping, or release quality.
 

package/docs/DEVELOPMENT.md

@@ -1,10 +1,10 @@
 # Lattice AI Development
 
-Current release: **8.6.0 — Desktop Capture & Navigation Reliability**.
+Current release: **8.7.0 — Runtime State Hygiene & Release Evidence Refresh**.
 
 This document is for contributors working on the local-first Digital Brain
 codebase. Product positioning and quick start stay in `README.md`; release
-history is intentionally limited to 7.0.0-8.6.0 in `docs/CHANGELOG.md` and
+history is intentionally limited to 7.0.0-8.7.0 in `docs/CHANGELOG.md` and
 `RELEASE.md`.
 
 ## Product Contract
@@ -49,13 +49,15 @@ API, UI, or release work, run:
 
 ```bash
 npm run check:python
-node scripts/run_python.mjs -m ruff check .
 npm run lint
 npm run typecheck
 npm run test:unit
 npm run docs:check-links
 ```
 
+`npm run lint` runs the Python Ruff baseline, frontend TypeScript lint gate,
+visual smoke syntax checks, and i18n literal checks.
+
 Use these when the change touches the relevant surface:
 
 ```bash
@@ -112,10 +114,10 @@ For user-facing, API, runtime, release, or packaging changes, check:
 Release/publish examples must use exact target-version filenames. Do not
 document wildcard artifact upload commands.
 
-For 8.6.0 release work, exact artifacts are:
+For 8.7.0 release work, exact artifacts are:
 
-- `dist/ltcai-8.6.0-py3-none-any.whl`
-- `dist/ltcai-8.6.0.tar.gz`
-- `ltcai-8.6.0.tgz`
-- `dist/ltcai-8.6.0.vsix`
-- `src-tauri/target/release/bundle/dmg/Lattice AI_8.6.0_aarch64.dmg`
+- `dist/ltcai-8.7.0-py3-none-any.whl`
+- `dist/ltcai-8.7.0.tar.gz`
+- `ltcai-8.7.0.tgz`
+- `dist/ltcai-8.7.0.vsix`
+- `src-tauri/target/release/bundle/dmg/Lattice AI_8.7.0_aarch64.dmg`

package/docs/LEGACY_COMPATIBILITY.md

@@ -1,14 +1,14 @@
 # Legacy Compatibility Map
 
-Current release: **8.6.0 — Desktop Capture & Navigation Reliability**.
+Current release: **8.7.0 — Runtime State Hygiene & Release Evidence Refresh**.
 
 Lattice AI is moving toward a smaller, modular architecture centered on
 `lattice_brain`, `latticeai.services`, `latticeai.api`, and `latticeai.runtime`.
 Some root-level modules remain packaged for compatibility with older imports,
 CLI entrypoints, or extension workflows. Their presence does not define the
-current 8.6.0 architecture.
+current 8.7.0 architecture.
 
-8.6.0 also tracks the inner compatibility layers that sit below the root
+8.7.0 also tracks the inner compatibility layers that sit below the root
 modules. The managed inventory lives in `latticeai.core.legacy_compatibility`
 and groups shims by layer:
 

package/docs/ONBOARDING.md

@@ -1,6 +1,6 @@
 # Lattice AI Onboarding
 
-Current release: **8.6.0 — Desktop Capture & Navigation Reliability**.
+Current release: **8.7.0 — Runtime State Hygiene & Release Evidence Refresh**.
 
 The first-run goal is a five-minute path from "I opened the app" to "my Brain
 has a source, a question, and proof." This page is the product contract behind
@@ -32,7 +32,7 @@ read the docs first.
 
 ## Release Gate
 
-8.6.0 treats onboarding as a release gate, not marketing copy. The current
+8.7.0 treats onboarding as a release gate, not marketing copy. The current
 machine-checkable product readiness report requires this five-minute contract,
 the Brain Home surface, setup helpers, graph ingestion tests, and exact release
 artifact documentation before the release can be called complete.

package/docs/TRUST_MODEL.md

@@ -1,6 +1,6 @@
 # Lattice AI Trust Model
 
-Current release: **8.6.0 — Desktop Capture & Navigation Reliability**.
+Current release: **8.7.0 — Runtime State Hygiene & Release Evidence Refresh**.
 
 Lattice AI is local-first, explicit about external communication, and honest
 when a capability is unavailable.

package/docs/WHY_LATTICE.md

@@ -1,6 +1,6 @@
 # Why Lattice AI Exists
 
-Current release: **8.6.0 — Desktop Capture & Navigation Reliability**.
+Current release: **8.7.0 — Runtime State Hygiene & Release Evidence Refresh**.
 
 **Lattice AI is a local-first Digital Brain that keeps your knowledge durable
 across any AI model.**
@@ -32,7 +32,7 @@ The graph matters, but it is not the product identity. The product identity is a
 local-first Digital Brain: a place where the user can talk, add sources, watch
 memory grow, and inspect the Knowledge Graph when they need proof.
 
-In 8.6.0 the first screen is intentionally not a dashboard. The living Brain,
+In 8.7.0 the first screen is intentionally not a dashboard. The living Brain,
 conversation composer, evidence-backed Brain Brief, and five-minute onboarding
 path appear together so the user immediately knows what matters, what to add,
 and why the answer is grounded in local memory.

package/docs/kg-schema.md

@@ -1,6 +1,6 @@
 # Knowledge Graph Schema
 
-Current release: **8.6.0 — Desktop Capture & Navigation Reliability**.
+Current release: **8.7.0 — Runtime State Hygiene & Release Evidence Refresh**.
 
 명세 출처: `lattice_ai_full_spec.pptx` 슬라이드 20·21·22
 구현: `kg_schema.py`

package/lattice_brain/__init__.py

@@ -26,7 +26,7 @@ from .storage import (
     storage_from_env,
 )
 
-__version__ = "8.6.0"
+__version__ = "8.7.0"
 
 __all__ = [
     "AgentRuntime",

package/lattice_brain/runtime/multi_agent.py

@@ -21,7 +21,7 @@ from typing import Any, Callable, Dict, List, Optional
 from .contracts import multi_agent_contract
 
 
-MULTI_AGENT_VERSION = "8.6.0"
+MULTI_AGENT_VERSION = "8.7.0"
 
 AGENT_ROLES = ("researcher", "planner", "executor", "reviewer", "release")
 CORE_PIPELINE = ("planner", "executor", "reviewer")

package/latticeai/__init__.py

@@ -1,3 +1,3 @@
 """Lattice AI - modular server package."""
 
-__version__ = "8.6.0"
+__version__ = "8.7.0"

package/latticeai/app_factory.py

@@ -107,7 +107,7 @@ def _build(config: "Optional[Config]" = None) -> Dict[str, Any]:
         enforce_rate_limit as _enforce_rate_limit,
     )
     from latticeai.core.audit import (
-        get_audit_log as _get_audit_log,
+        get_audit_log as _get_audit_log,  # noqa: F401 - legacy server_app attr exported via locals()
         classify_sensitive_message as _classify_sensitive_message,
         build_sensitivity_report as _build_sensitivity_report,
         build_admin_audit_report as _build_admin_audit_report,
@@ -992,7 +992,7 @@ def _build(config: "Optional[Config]" = None) -> Dict[str, Any]:
         create_admin_router=create_admin_router,
         require_admin=require_admin,
         get_history=get_history,
-        get_audit_log=_get_audit_log,
+        get_audit_log=get_audit_log,
         audit_file=AUDIT_FILE,
         public_user=public_user,
         load_vpc_config=load_vpc_config,

package/latticeai/core/config.py

@@ -43,7 +43,12 @@ def _bool(env: Mapping[str, str], key: str, default: bool = False) -> bool:
     raw = env.get(key)
     if raw is None:
         return default
-    return raw.strip().lower() in {"1", "true", "yes", "on"}
+    normalized = raw.strip().lower()
+    if normalized in {"1", "true", "yes", "on"}:
+        return True
+    if normalized in {"0", "false", "no", "off"}:
+        return False
+    return default
 
 
 def _int(env: Mapping[str, str], key: str, default: int) -> int:
@@ -56,6 +61,13 @@ def _int(env: Mapping[str, str], key: str, default: int) -> int:
         return default
 
 
+def _port(env: Mapping[str, str], key: str, default: int) -> int:
+    port = _int(env, key, default)
+    if 1 <= port <= 65535:
+        return port
+    return default
+
+
 @dataclass(frozen=True)
 class Config:
     """Everything a caller must know about app-level settings.
@@ -146,7 +158,7 @@ class Config:
         is_public = app_mode == "public"
 
         host = _value(env, "LATTICEAI_HOST", "127.0.0.1")
-        port = _int(env, "LATTICEAI_PORT", 4825)
+        port = _port(env, "LATTICEAI_PORT", 4825)
         network_exposed = not host_is_loopback(host)
 
         cors_extra = [item.strip() for item in _value(env, "LATTICEAI_CORS_ALLOWED_ORIGINS", "").split(",") if item.strip()]

package/latticeai/core/marketplace.py

@@ -11,7 +11,7 @@ from copy import deepcopy
 from typing import Any, Dict, List, Optional
 
 
-MARKETPLACE_VERSION = "8.6.0"
+MARKETPLACE_VERSION = "8.7.0"
 TEMPLATE_KINDS = ("plugin", "workflow", "agent")
 
 

package/latticeai/core/workspace_os.py

@@ -49,7 +49,7 @@ __all__ = [
     "remove_skill_directory",
 ]
 
-WORKSPACE_OS_VERSION = "8.6.0"
+WORKSPACE_OS_VERSION = "8.7.0"
 
 # Workspace types separate single-user Personal workspaces from shared
 # Organization workspaces. Both keep the same local-first JSON store; the type

package/latticeai/models/router.py

@@ -13,8 +13,9 @@ import time
 from dataclasses import dataclass
 from pathlib import Path
 
-# Set MLX_VLM_DRAFT_KIND to 'mtp' to enable the Gemma 4 assistant MTP drafter.
-os.environ["MLX_VLM_DRAFT_KIND"] = "mtp"
+# Default Gemma 4 assistant drafting to MTP without overriding an operator's
+# explicit MLX runtime choice.
+os.environ.setdefault("MLX_VLM_DRAFT_KIND", "mtp")
 
 from concurrent.futures import ThreadPoolExecutor
 from typing import AsyncIterator, Dict, Optional, Tuple, List

package/latticeai/runtime/router_registration.py

@@ -162,16 +162,22 @@ def build_auth_admin_security_router_bundle(
         append_audit_event=append_audit_event,
     )
 
-    def security_audit_events_safe() -> list[dict[str, Any]]:
+    def audit_log_events_safe() -> list[dict[str, Any]]:
         try:
-            return get_audit_log(audit_file)
+            return get_audit_log()
+        except TypeError:
+            try:
+                return get_audit_log(audit_file)
+            except Exception as exc:  # pragma: no cover - defensive legacy behavior
+                logger.warning("security audit events load failed: %s", exc)
+                return []
         except Exception as exc:  # pragma: no cover - defensive legacy behavior
             logger.warning("security audit events load failed: %s", exc)
             return []
 
     def security_list_uploaded_files() -> list[dict[str, Any]]:
         files: list[dict[str, Any]] = []
-        for idx, event in enumerate(security_audit_events_safe()):
+        for idx, event in enumerate(audit_log_events_safe()):
             if event.get("event_type") != "document_upload":
                 continue
             files.append({
@@ -191,7 +197,7 @@ def build_auth_admin_security_router_bundle(
     security_router = create_security_router(
         require_admin=require_admin,
         get_history=get_history,
-        get_audit_events=security_audit_events_safe,
+        get_audit_events=audit_log_events_safe,
         classify_sensitive_message=classify_sensitive_message,
         build_sensitivity_report=build_sensitivity_report,
         list_uploaded_files=security_list_uploaded_files,
@@ -205,7 +211,7 @@ def build_auth_admin_security_router_bundle(
         "security_router": security_router,
         "_graph_stats_safe": graph_stats_safe,
         "_product_hardening_status": product_hardening_status,
-        "_security_audit_events_safe": security_audit_events_safe,
+        "_security_audit_events_safe": audit_log_events_safe,
         "_security_list_uploaded_files": security_list_uploaded_files,
     }
 

package/latticeai/services/architecture_readiness.py

@@ -1,6 +1,6 @@
 """Machine-checkable architecture readiness gates for release work.
 
-8.6.0 keeps the major architecture priorities under an explicit release
+8.7.0 keeps the major architecture priorities under an explicit release
 contract while product maturity work reduces visible beta seams. AgentRuntime, ToolRegistry,
 central Config, decomposed server runtime, and Knowledge Graph stabilization
 must remain discoverable, ordered, and backed by tests before the release can be
@@ -17,7 +17,7 @@ from typing import Any, Dict, List
 from latticeai.core.legacy_compatibility import legacy_shim_report
 
 
-ARCHITECTURE_VERSION_TARGET = "8.6.0"
+ARCHITECTURE_VERSION_TARGET = "8.7.0"
 
 PREFERRED_REFACTORING_ORDER = [
     "agent-runtime",

package/latticeai/services/model_runtime.py

@@ -16,6 +16,7 @@ import shutil
 import time
 import urllib.error
 import urllib.request
+import warnings
 from pathlib import Path
 from typing import AsyncIterator, Dict, List, Optional
 
@@ -100,6 +101,21 @@ class ModelRuntimeState:
         self.get_user_api_key = _missing_user_api_key
 
     def sync_to_module_globals(self):
+        """Sync to bare module globals for legacy external importers.
+
+        This is a compatibility surface only. Internal code should use STATE.
+        Emits DeprecationWarning (future removal in major after 8.x).
+        """
+        warnings.warn(
+            "sync_to_module_globals is a legacy compatibility shim and will be removed "
+            "after 8.x. Use latticeai.services.model_runtime.STATE or injected context instead.",
+            DeprecationWarning,
+            stacklevel=2,
+        )
+        self._sync_globals()
+
+    def _sync_globals(self) -> None:
+        """Internal no-warning sync used at init."""
         global router, APP_MODE, DEFAULT_HOST, DEFAULT_PORT, DATA_DIR, BASE_DIR
         global ENABLE_TELEGRAM, ENABLE_GRAPH, AUTOLOAD_MODELS, MODEL_IDLE_UNLOAD_SECONDS
         global ALLOW_LOCAL_MODELS, REQUIRE_AUTH, INVITE_GATE_ENABLED, ALLOW_PLAINTEXT_API_KEYS
@@ -128,7 +144,7 @@ class ModelRuntimeState:
         get_user_api_key = self.get_user_api_key
 
 STATE = ModelRuntimeState()
-STATE.sync_to_module_globals()
+STATE._sync_globals()  # initial no-warning; public API warns on explicit legacy syncs
 
 # Configured by server_app.configure_model_runtime during app assembly.
 
@@ -141,7 +157,9 @@ def _env_bool(key: str, default: bool = False) -> bool:
 
 
 def _download_allowed(allow_download: bool = False) -> bool:
-    return bool(allow_download) or _env_bool("LATTICEAI_ALLOW_MODEL_DOWNLOADS", default=False) or bool(AUTOLOAD_MODELS)
+    # Prefer STATE (the source of truth) over bare module global for internal logic.
+    autoload = getattr(STATE, "AUTOLOAD_MODELS", AUTOLOAD_MODELS)
+    return bool(allow_download) or _env_bool("LATTICEAI_ALLOW_MODEL_DOWNLOADS", default=False) or bool(autoload)
 
 
 def _download_block(provider: str, model_name: str) -> None:
@@ -204,7 +222,7 @@ def configure_model_runtime(**deps) -> None:
         elif key == "get_user_api_key":
             STATE.get_user_api_key = value
 
-    STATE.sync_to_module_globals()
+    STATE._sync_globals()  # wiring path uses internal (no spurious deprecation in normal startup)
 
 
 # Catalog data + version-dedup helpers live in ``model_catalog``; re-exported
@@ -727,7 +745,8 @@ def engine_installed(engine: str) -> bool:
     return False
 
 def engine_status() -> List[Dict]:
-    cloud_models = router.detected_cloud_models()
+    r = getattr(STATE, "router", None) or router
+    cloud_models = r.detected_cloud_models() if r else []
     cloud_by_provider = {}
     for model in cloud_models:
         cloud_by_provider.setdefault(model["provider"], []).append(model)
@@ -887,37 +906,41 @@ def engine_status() -> List[Dict]:
     return engines
 
 def runtime_features() -> Dict:
+    # Read from STATE object (central) for implementation; bare globals kept only
+    # for external legacy consumers who import names directly from this module.
+    s = STATE
+    r = getattr(s, "router", None) or router
     return {
-        "mode": APP_MODE,
-        "public": IS_PUBLIC_MODE,
-        "host": DEFAULT_HOST,
-        "port": DEFAULT_PORT,
-        "data_dir": str(DATA_DIR),
-        "telegram_enabled": ENABLE_TELEGRAM,
-        "graph_enabled": ENABLE_GRAPH,
-        "autoload_models": AUTOLOAD_MODELS,
-        "model_idle_unload_seconds": MODEL_IDLE_UNLOAD_SECONDS,
-        "model_memory_policy": router.model_memory_policy(),
-        "allow_local_models": ALLOW_LOCAL_MODELS,
+        "mode": s.APP_MODE,
+        "public": s.IS_PUBLIC_MODE,
+        "host": s.DEFAULT_HOST,
+        "port": s.DEFAULT_PORT,
+        "data_dir": str(s.DATA_DIR),
+        "telegram_enabled": s.ENABLE_TELEGRAM,
+        "graph_enabled": s.ENABLE_GRAPH,
+        "autoload_models": s.AUTOLOAD_MODELS,
+        "model_idle_unload_seconds": s.MODEL_IDLE_UNLOAD_SECONDS,
+        "model_memory_policy": r.model_memory_policy() if r else None,
+        "allow_local_models": s.ALLOW_LOCAL_MODELS,
         "security": {
-            "host": DEFAULT_HOST,
-            "require_auth": REQUIRE_AUTH,
-            "invite_gate_enabled": INVITE_GATE_ENABLED,
-            "keyring_available": keyring is not None,
-            "plaintext_api_keys_allowed": ALLOW_PLAINTEXT_API_KEYS,
-            "cors_allow_network": CORS_ALLOW_NETWORK,
+            "host": s.DEFAULT_HOST,
+            "require_auth": s.REQUIRE_AUTH,
+            "invite_gate_enabled": s.INVITE_GATE_ENABLED,
+            "keyring_available": s.keyring is not None,
+            "plaintext_api_keys_allowed": s.ALLOW_PLAINTEXT_API_KEYS,
+            "cors_allow_network": s.CORS_ALLOW_NETWORK,
         },
-        "default_model": PUBLIC_MODEL if IS_PUBLIC_MODE else LOCAL_MODEL,
+        "default_model": s.PUBLIC_MODEL if s.IS_PUBLIC_MODE else s.LOCAL_MODEL,
         "local_only_features": {
-            "mlx": ALLOW_LOCAL_MODELS and not IS_PUBLIC_MODE,
-            "telegram_bridge": ENABLE_TELEGRAM,
-            "desktop_chrome_bridge": not IS_PUBLIC_MODE,
-            "computer_use_bridge": not IS_PUBLIC_MODE,
+            "mlx": s.ALLOW_LOCAL_MODELS and not s.IS_PUBLIC_MODE,
+            "telegram_bridge": s.ENABLE_TELEGRAM,
+            "desktop_chrome_bridge": not s.IS_PUBLIC_MODE,
+            "computer_use_bridge": not s.IS_PUBLIC_MODE,
         },
         "public_features": {
             "web_ui": True,
             "openai_compatible_models": True,
-            "persistent_data_dir": str(DATA_DIR),
+            "persistent_data_dir": str(s.DATA_DIR),
         },
     }
 
@@ -1099,7 +1122,8 @@ async def _probe_cloud_model(model_ref: str) -> Dict[str, object]:
 
 async def verify_cloud_models(force: bool = False, provider_filter: Optional[str] = None) -> Dict[str, Dict]:
     now = time.time()
-    cloud_items = [item for item in router.detected_cloud_models() if item.get("tag") == "cloud"]
+    r = getattr(STATE, "router", None) or router
+    cloud_items = [item for item in (r.detected_cloud_models() if r else []) if item.get("tag") == "cloud"]
     if provider_filter:
         cloud_items = [item for item in cloud_items if item.get("provider") == provider_filter]