ltcai 8.9.0 → 9.1.0

package/README.md

@@ -1,9 +1,23 @@
 # Lattice AI
 
-**Lattice AI 8.9.0 is the local-first Digital Brain platform. This release hardens authenticated history and graph scoping, blocks unapproved direct Tool API execution paths, makes local permission approvals and installer/process execution safer to audit, and keeps package, desktop, extension, static app, and documentation metadata synchronized to the 8.9.0 line.**
+**Lattice AI 9.1.0 is the local-first Digital Brain platform. Code Review Completion & Fail-Closed Runtime closes every actionable finding from the July 11 review: security boundaries now deny by default, runtime and chat state have typed ownership, frontend failures stay visible and tested, and repository/release hygiene is enforced across the 9.1.0 line.**
 
 **Lattice AI는 모델이 바뀌어도 내 지식과 맥락을 보존하는 로컬 우선 AI 브레인입니다.**
 
+> The 9.1.0 release adds request-scoped model routing,
+> workspace-isolated graph identities and frontend caches, fail-closed admin
+> gates, SSRF-safe web capture, private local state permissions, and reproducible
+> release/test isolation. The same release introduces a human-first UI:
+> a visible knowledge journey from conversation or source capture into the
+> living Brain, its real relationship graph, and memory-grounded automation;
+> the empty Brain home now keeps that complete loop inside one viewport, with
+> continuous vital motion and behavior-driven listening, recall, synthesis,
+> and action states. Task navigation and technical detail stay calm and
+> approachable.
+> Telegram access requires an explicit chat allowlist and server session token;
+> public invitation access uses signed, expiring authorization instead of a
+> static cookie; and unknown or unreadable Knowledge Graph scope fails closed.
+
 Your model is the voice you use today. Your Brain is the asset you keep.
 Lattice AI preserves conversations, documents, decisions, project context,
 relationships, and workflows on your computer by default. Cloud models, model
@@ -11,7 +25,9 @@ downloads, update checks, and other external communication happen only after
 explicit consent.
 
 It is not a ChatGPT clone, a model launcher, a graph database, or a note app.
-It is the finished private AI memory layer wrapped in a Living Brain experience — with desktop source capture that uses native folder selection, ToolRegistry readiness, Config-driven DI for automation, and continued AgentRuntime/Tool wiring seams.
+It is a Living Brain: chatting or adding a file, folder, note, or web page grows
+durable memory; the real graph shows how that knowledge connects; and reviewed,
+user-enabled automations can act from the same evidence.
 
 [![PyPI Version](https://img.shields.io/pypi/v/ltcai?label=PyPI)](https://pypi.org/project/ltcai/)
 [![npm Version](https://img.shields.io/npm/v/ltcai?label=npm)](https://www.npmjs.com/package/ltcai)
@@ -43,10 +59,13 @@ You need Lattice AI when:
   session as disposable.
 - Add documents, selected local folders, notes, screenshots, and web pages with
   source-aware memory.
-- See recent memories, older memories, topics, relationships, and the full
-  knowledge graph when you want deeper structure.
-- Create consent-first Brain automation drafts for memory digests, project
-  reviews, and follow-up suggestions before any schedule is enabled.
+- Watch new knowledge enter the Brain and appear in a lightweight, real
+  relationship graph before opening the full graph explorer.
+- See the Brain breathe, pulse, listen, recall, synthesize, and act while the
+  source, graph, composer, and next memory-grounded action remain visible in a
+  single desktop or mobile viewport.
+- Create evidence-linked Brain automation drafts for memory digests, project
+  reviews, and follow-up suggestions, then explicitly enable them when ready.
 - Use a recommended local model without learning model internals first.
 - Keep advanced controls, audit logs, roles, and retention in a separate Admin
   surface.
@@ -58,18 +77,20 @@ You need Lattice AI when:
 2. Create or open a local profile.
 3. Let Lattice explain what this computer can run.
 4. Start with the recommended model as the Brain's voice, or skip and choose later.
-5. Talk to your Brain.
-6. Use the memory rings to move from current context to the full knowledge graph.
-7. Back up, inspect, export, or restore the Brain when you need ownership actions.
+5. Talk to your Brain or add a file, folder, note, or web page.
+6. Watch the source become memory and connect to the visible knowledge graph.
+7. Ask, delegate, review, or explicitly enable a memory-grounded automation.
+8. Back up, inspect, export, or restore the Brain when you need ownership actions.
 
 ## Living Brain Flow
 
 The screenshots below are the latest checked-in visual evidence captures. They
 keep the first-run Brain flow, memory graph, source capture, model library,
 system view, admin console, and review center visible as release gates while
-8.9.0 focuses on scoped memory isolation, direct Tool API policy enforcement,
-AgentRuntime human-approval semantics, confirmation-token guarded installer
-execution, and frontend/runtime maintainability.
+9.1.0 completes the July 11 code review with fail-closed access control,
+typed runtime/model state, a decomposed chat API, honest frontend error states
+and unit tests, and repository/release hygiene. The captures below are the
+checked-in 9.1.0 visual release evidence for that product flow.
 
 ### 1. Wake Brain
 
@@ -81,36 +102,40 @@ confirm owner, check the computer, choose the Brain voice.
 Choose the owner of the Brain. The profile is not a SaaS account by default; it
 is the local identity for the knowledge you keep.
 
-![Login](output/release/v8.7.0/screenshots/01-login.png)
+![Login](output/release/v9.1.0/screenshots/01-login.png)
 
 ### 3. Recommended Models
 
 Start with a short list: safest recommendation, faster model, stronger model.
 Advanced details stay available without overwhelming first-time users.
 
-![Recommended Models](output/release/v8.7.0/screenshots/02-recommended-models.png)
+![Recommended Models](output/release/v9.1.0/screenshots/02-recommended-models.png)
 
 ### 4. Install And Load
 
 Download and load only after consent. Lattice explains model size, local
 execution, and network use before work starts.
 
-![Install and Load](output/release/v8.7.0/screenshots/03-install-load-progress.png)
+![Install and Load](output/release/v9.1.0/screenshots/03-install-load-progress.png)
 
 ### 5. Brain Chat
 
-Talk normally. Useful decisions and context become memory, then appear later as
-topics, relationships, graph structure, and the concentric memory rings around
-the Brain.
+Talk normally or add a source from a single, living canvas. The default home
+fits the complete knowledge lifecycle into one viewport: source controls feed
+the breathing Brain, real nodes and animated relationships stay visible beside
+it, and the composer plus grounded next action remain within reach. Brain motion
+and its visible life signal follow real listening, recall, synthesis, and action
+state. Detailed memory rings, provenance, conversation history, and
+model/runtime proof open as overlays only when requested.
 
-![Brain Brief Home](output/release/v8.7.0/screenshots/04-brain-chat-home.png)
+![One-viewport Living Brain Home](output/release/v9.1.0/screenshots/04-brain-chat-home.png)
 
 ### 6. Review Center
 
 Automation results are staged for review before they become durable decisions.
 Snooze, unsnooze, run now, approve, and dismiss actions stay explicit.
 
-![Review Center](output/release/v8.7.0/screenshots/12-review-center.png)
+![Review Center](output/release/v9.1.0/screenshots/12-review-center.png)
 
 ## Brain Depths
 
@@ -126,10 +151,10 @@ The user travels inward from everyday memory to deeper structure:
 
 Walkthrough:
 
-![v8.7.0 Living Brain walkthrough](output/release/v8.7.0/gifs/v8.7.0-living-brain-walkthrough.gif)
+![v9.1.0 Living Brain walkthrough](output/release/v9.1.0/gifs/v9.1.0-living-brain-walkthrough.gif)
 
 Screenshot index and capture notes:
-[output/release/v8.7.0/SCREENSHOT_INDEX.md](output/release/v8.7.0/SCREENSHOT_INDEX.md)
+[output/release/v9.1.0/SCREENSHOT_INDEX.md](output/release/v9.1.0/SCREENSHOT_INDEX.md)
 
 ## Install
 
@@ -164,7 +189,11 @@ pip install "ltcai[local]"
 - **Product category**: local-first Digital Brain.
 - **Core capability**: private AI memory layer for conversations, documents,
   decisions, relationships, workflows, and project context.
-- **UX metaphor**: Living Brain.
+- **UX metaphor**: a visible source-to-memory-to-graph-to-automation journey
+  centered on the Living Brain, not a generic chat or operations dashboard.
+- **Product navigation**: desktop task navigation and a mobile bottom bar expose
+  Chat, Sources, Memory, and Work; model, workspace, and admin controls live in
+  the secondary menu.
 - **Desktop shell**: Tauri 2 starts a localhost sidecar.
 - **Frontend**: React, TypeScript, Vite, TanStack Query, Zustand, Cytoscape.js,
   React Flow, and generated OpenAPI types.
@@ -210,40 +239,42 @@ See [docs/DEVELOPMENT.md](docs/DEVELOPMENT.md) for developer workflow details.
 
 ## Current Release
 
-The current release is **8.9.0 — Scoped Memory & Tool Policy Hardening**:
-
-- Conversation history reads and deletes now scope by authenticated user and
-  readable workspace, while preserving legacy-global rows only in no-auth or
-  explicitly compatible flows.
-- Knowledge Graph search, graph traversal, relationships, node reads, and chat
-  context now apply workspace scope at the graph/service boundary.
-- Direct HTTP/MCP Tool API calls enforce ToolRegistry policy before hooks or
-  handlers run; destructive paths and non-auto-approved user writes are blocked.
-- AgentRuntime no longer treats “requires approval” plans as implicitly
-  approved, and rollback now handles tool results that omit `success`.
-- Local permission approvals hash tokens at rest, use atomic queue writes, and
-  reject write approvals for blocked system prefixes.
-- Frontend API base handling, Tauri credentials, workspace clearing, CSS tokens,
-  and i18n literal checks are split into safer maintainability seams.
-
-Expected artifacts for 8.9.0 release must use exact filenames:
-
-- `dist/ltcai-8.9.0-py3-none-any.whl`
-- `dist/ltcai-8.9.0.tar.gz`
-- `ltcai-8.9.0.tgz`
-- `dist/ltcai-8.9.0.vsix`
-- `src-tauri/target/release/bundle/dmg/Lattice AI_8.9.0_aarch64.dmg`
+The current release is **9.1.0 — Code Review Completion & Fail-Closed Runtime**:
+
+- Telegram rejects every chat and callback outside
+  `LATTICEAI_TELEGRAM_ALLOWED_CHAT_IDS`, and its local API bridge requires
+  `LATTICEAI_SERVER_SESSION_TOKEN` instead of scanning stored sessions.
+- Public invitation authorization is signed and expiring, default invitation
+  credentials are removed, Knowledge Graph scope lookup fails closed, and
+  desktop/knowledge/network tools use explicit policy and consent boundaries.
+- App assembly exports typed runtime stages, model routing uses injected typed
+  state, and chat history, documents, streaming, and contracts are split into
+  focused modules.
+- The React workspace distinguishes unavailable services from empty Brain data,
+  gates success callbacks on real success, and has Vitest coverage for API
+  result shapes, proof state, conversation state, primitives, and i18n.
+- Large frontend i18n/CSS/Brain hooks and repeated runtime utilities are split,
+  obsolete aliases and local VSIX artifacts are removed, and review documents
+  live under `docs/reviews/` as immutable history.
+
+Expected artifacts for 9.1.0 release must use exact filenames:
+
+- `dist/ltcai-9.1.0-py3-none-any.whl`
+- `dist/ltcai-9.1.0.tar.gz`
+- `ltcai-9.1.0.tgz`
+- `dist/ltcai-9.1.0.vsix`
+- `src-tauri/target/release/bundle/dmg/Lattice AI_9.1.0_aarch64.dmg`
 
 Do not use wildcard artifact uploads. Package registry publishing remains owner-run.
 
 See [docs/ROADMAP_RECOMMENDATIONS.md](docs/ROADMAP_RECOMMENDATIONS.md) for the
-strategic roadmap slices applied through 8.9.0 and the follow-up tracks.
+strategic roadmap slices applied through 9.1.0 and the follow-up tracks.
 
 ## Known Limitations
 
 - External package registries are owner-published and can lag behind GitHub.
 - PostgreSQL/pgvector is optional scale/migration tooling. SQLite remains the
-  live local Brain store in 8.9.0.
+  live local Brain store in 9.1.0.
 - Docker, model downloads, cloud model calls, Telegram, Brain Network, and update
   checks require explicit user action.
 - Conversation does not fabricate answers when no model is loaded.
@@ -255,6 +286,8 @@ strategic roadmap slices applied through 8.9.0 and the follow-up tracks.
 
 | Version | Theme |
 | --- | --- |
+| 9.1.0 | Code Review Completion & Fail-Closed Runtime: all July 11 review findings closed across fail-closed security, typed runtime/model/chat boundaries, honest frontend failures and tests, and repository hygiene |
+| 9.0.0 | Code Review Closure & Runtime Cleanup: July 8 code-review follow-ups fixed, chat/runtime reliability improved, duplicated utility surfaces consolidated, runtime audit append paths moved to JSONL, and release metadata/artifacts synchronized |
 | 8.9.0 | Scoped Memory & Tool Policy Hardening: authenticated history/KG reads are workspace-scoped, direct Tool API paths enforce registry policy, local approvals hash tokens at rest, AgentRuntime approval semantics are explicit, and frontend/runtime seams are split |
 | 8.8.0 | Brain Core Extraction & Recall Proof Hardening: internal-only Brain shim layers are removed, AgentRuntime run contracts/retry budgets are tighter, Brain Chat gains conversation controls, and citation recall exposes matched evidence |
 | 8.7.0 | Runtime State Hygiene & Release Evidence Refresh: model-runtime internals prefer typed state over legacy globals, compatibility sync is deprecated, 8.7.0 visual evidence is refreshed, and all release metadata/docs are synchronized |
@@ -265,16 +298,6 @@ strategic roadmap slices applied through 8.9.0 and the follow-up tracks.
 | 8.2.0 | Brain Brief: evidence-backed home briefing, honest empty-state guidance, recall/graph/model-proof next actions, and continued model/workspace runtime extraction |
 | 8.1.0 | Intuitive Brain Home: living Brain, recent memory, connected topic, next action, and composer are visible in one product-first screen with refreshed 8.1.0 evidence and artifacts |
 | 8.0.0 | Runtime Architecture Contract: AgentRuntime, ToolRegistry, central Config, server decomposition, and KG hardening are captured as machine-checkable release boundaries with exact 8.0.0 artifacts |
-| 7.9.0 | Agent Runtime Boundary Hardening: explicit `SingleAgentRuntime`, compatibility alias preservation, injected rollback port, and release/readiness docs aligned to the product AgentRuntime facade |
-| 7.8.0 | Brain Chat Home UX Simplification: chat-first first viewport, visible workspace navigation, collapsed source/status utilities, hidden default depth controls, and removal of obsolete Brain UX components |
-| 7.7.0 | Complete Product Polish: command-center Brain Home, repaired Review Center evidence, exact 7.7 docs/artifacts, product readiness gate, and stronger CI/release checks |
-| 7.6.0 | Brain-Centered UX & Architecture Closure: Wake Brain first-run surface, concentric memory rings with direct depth controls, and machine-checkable closure of the two architecture/UX review files |
-| 7.5.0 | Runtime Debt Burn-down & Release Risk Cleanup: API consumers get normalized contract views, retrieval quality uses a 250+ record corpus fixture, stale artifact risk is removed, npm audit is clean, and Tauri is updated past the old block warning |
-| 7.4.0 | Runtime Contract Convergence & Corpus Retrieval: agent/workflow/audit/realtime records share the agent-run-contract/v1 family, and retrieval quality gates run against a real corpus-scale fixture |
-| 7.3.0 | Runtime Contract & Retrieval Quality: shared agent-run contract across runtimes plus deterministic hybrid recall/ranking regression gates |
-| 7.2.0 | Runtime Trust Baseline: agent run preview/readiness, simulation-mode guardrails, live ToolRegistry manifest/diagnostics, and tests for dispatch/governance/catalog drift |
-| 7.1.0 | Brain Usability Completion: clearer first-run onboarding, ingestion progress/emergence, richer graph controls, inline answer proof, workspace/profile/admin discovery, empty/error/consent feedback, and VS Code sync status |
-| 7.0.0 | Brain Productization Loop: first-screen ingestion for files/folders/notes/web, answer-level memory proof and source citations, model-continuity demo flow, five-minute first-run loop, and recall/KG quality eval in CI |
 
 ## Documentation