ltcai 9.9.0 → 9.9.2

package/README.md

@@ -11,7 +11,7 @@
 [![CI Status](https://github.com/TaeSooPark-PTS/LatticeAI/actions/workflows/ci.yml/badge.svg?branch=main)](https://github.com/TaeSooPark-PTS/LatticeAI/actions/workflows/ci.yml)
 [![License](https://img.shields.io/badge/license-MIT-green)](LICENSE)
 
-![v9.9.0 Living Brain walkthrough](output/release/v9.9.0/gifs/v9.9.0-living-brain-walkthrough.gif)
+![v9.9.2 Living Brain walkthrough](output/release/v9.9.2/gifs/v9.9.2-living-brain-walkthrough.gif)
 
 Chat, files, folders, notes, and web pages all flow into one durable knowledge
 graph on your computer. Any model — local MLX or cloud — can speak with that
@@ -24,9 +24,9 @@ memory. Nothing leaves your machine without explicit consent.
 
 | | |
 | --- | --- |
-| **Chat with a Brain that remembers** — every conversation grows durable, source-linked memory ![Brain Chat](output/release/v9.9.0/screenshots/04-brain-chat-home.png) | **See how knowledge connects** — a real relationship graph, not a file list ![Memory Graph](output/release/v9.9.0/screenshots/05-memory-graph.png) |
-| **Capture anything** — files, whole folders, notes, screenshots, web pages ![Capture](output/release/v9.9.0/screenshots/06-capture.png) | **Automate with review** — agent changes become proposals you approve first ![Review Center](output/release/v9.9.0/screenshots/12-review-center.png) |
-| **Pick a model in one click** — recommended local models for your hardware ![Recommended Models](output/release/v9.9.0/screenshots/02-recommended-models.png) | **Stay in control** — audit, roles, retention in a separate admin surface ![Admin Console](output/release/v9.9.0/screenshots/10-admin-console.png) |
+| **Chat with a Brain that remembers** — every conversation grows durable, source-linked memory ![Brain Chat](output/release/v9.9.2/screenshots/04-brain-chat-home.png) | **See how knowledge connects** — a real relationship graph, not a file list ![Memory Graph](output/release/v9.9.2/screenshots/05-memory-graph.png) |
+| **Capture anything** — files, whole folders, notes, screenshots, web pages ![Capture](output/release/v9.9.2/screenshots/06-capture.png) | **Automate with review** — agent changes become proposals you approve first ![Review Center](output/release/v9.9.2/screenshots/12-review-center.png) |
+| **Pick a model in one click** — recommended local models for your hardware ![Recommended Models](output/release/v9.9.2/screenshots/02-recommended-models.png) | **Stay in control** — audit, roles, retention in a separate admin surface ![Admin Console](output/release/v9.9.2/screenshots/10-admin-console.png) |
 
 ## Why Lattice AI
 
@@ -57,45 +57,49 @@ First-run flow — wake the Brain, pick the owner, load a recommended model:
 
 | | | |
 | --- | --- | --- |
-| ![Login](output/release/v9.9.0/screenshots/01-login.png) | ![Model install](output/release/v9.9.0/screenshots/03-install-load-progress.png) | ![Model library](output/release/v9.9.0/screenshots/07-model-library.png) |
+| ![Login](output/release/v9.9.2/screenshots/01-login.png) | ![Model install](output/release/v9.9.2/screenshots/03-install-load-progress.png) | ![Model library](output/release/v9.9.2/screenshots/07-model-library.png) |
 
 Screenshot index and capture notes:
-[output/release/v9.9.0/SCREENSHOT_INDEX.md](output/release/v9.9.0/SCREENSHOT_INDEX.md)
+[output/release/v9.9.2/SCREENSHOT_INDEX.md](output/release/v9.9.2/SCREENSHOT_INDEX.md)
 
 ## Current Release
 
-The current release is **9.9.0 — Fail-Closed Trust**:
-
-- **Change proposals can't clobber your edits.** A proposal now records the
-  original content hash; if the file changed before you approve, the apply is
-  rejected with a conflict instead of silently overwriting your work, and the
-  write is atomic. Duplicate/concurrent approvals apply exactly once.
-- **A confused verifier never reports success.** If the agent's critic output
-  can't be parsed (after one strict retry), the run ends as `NEEDS_REVIEW`
-  instead of a fabricated "done"; completion now requires a valid PASS *and*
-  real execution evidence.
-- **Every mutating tool is governed.** A single-source inventory classifies
-  each side-effecting tool; a CI gate fails closed if a new mutator ships
-  ungoverned, and tools that would overwrite existing content without a
-  reviewable proposal are blocked rather than applied.
-- **Honest onboarding.** Device analysis is modeled as
-  `loading | ready | unavailable`; a failed probe no longer fabricates a
-  "supported, ready on this computer" model card — it shows the cause, a
-  retry, and "continue without a model."
-- **Leaner & audited.** Initial JS bundle is ~22% smaller (lazy-loaded heavy
-  views, with a CI budget), plus dependency/SBOM audit and scheduled
-  PostgreSQL integration workflows, a security-scan report, a model benchmark
-  harness, and current/architecture documentation classification.
+The current release is **9.9.2 — Artifact Trust**:
+
+- **A clean core.** The historical repo-root compatibility shims are gone
+  (only `server.py` remains for `uvicorn server:app`); packaging ships exactly
+  the `latticeai.*` / `lattice_brain.*` packages, and a legacy debt gate in
+  `npm run lint` plus a dedicated test suite keep the root clean for good.
+- **Your first five minutes matter.** A guided "First 5 minutes" card on the
+  empty Brain home walks a new user through asking a first question, adding a
+  first file or note, and seeing what the Brain learned — wired to real
+  features, with progress that persists and a briefing that loads immediately.
+- **Proactive intelligence you can actually see.** Today's briefing now lives
+  on the Brain home instead of a double-collapsed drawer, and Cmd+K opens with
+  proactive quick actions (open briefing, review pending items, ask the Brain)
+  before you type a single letter.
+- **Review Center at product quality.** Proposal cards translate risk and
+  change class into human language, frame diffs with file targets and honest
+  truncation counts, tuck raw IDs into a "Technical details" disclosure, and
+  every approve/reject failure shows a friendly message first.
+- **Errors that speak your language.** The API error pipeline is localized
+  (ko/en): timeouts, unreachable-service, and backend failures produce plain,
+  helpful copy instead of raw `statusText` or English literals, across chat,
+  admin, care, and intelligence panels.
+- **Scenario-first tests, smaller evidence footprint.** 37 version-named test
+  files were renamed to behavior-named suites, and `output/release/` now keeps
+  only the newest three evidence sets (~70MB reclaimed) via an automated
+  retention policy.
 
 Release notes: [RELEASE.md](RELEASE.md) · Full history: [docs/CHANGELOG.md](docs/CHANGELOG.md)
 
-Expected artifacts for 9.9.0 release must use exact filenames:
+Expected artifacts for 9.9.2 release must use exact filenames:
 
-- `dist/ltcai-9.9.0-py3-none-any.whl`
-- `dist/ltcai-9.9.0.tar.gz`
-- `ltcai-9.9.0.tgz`
-- `dist/ltcai-9.9.0.vsix`
-- `src-tauri/target/release/bundle/dmg/Lattice AI_9.9.0_aarch64.dmg`
+- `dist/ltcai-9.9.2-py3-none-any.whl`
+- `dist/ltcai-9.9.2.tar.gz`
+- `ltcai-9.9.2.tgz`
+- `dist/ltcai-9.9.2.vsix`
+- `src-tauri/target/release/bundle/dmg/Lattice AI_9.9.2_aarch64.dmg`
 
 Do not use wildcard artifact uploads. Package registry publishing remains owner-run.
 
@@ -115,7 +119,7 @@ See [ARCHITECTURE.md](ARCHITECTURE.md) for details and
 
 - External package registries are owner-published and can lag behind GitHub.
 - PostgreSQL/pgvector is optional scale/migration tooling. SQLite remains the
-  live local Brain store in 9.9.0.
+  live local Brain store in 9.9.2.
 - Docker, model downloads, cloud model calls, Telegram, Brain Network, and
   update checks require explicit user action.
 - Conversation does not fabricate answers when no model is loaded. Agent and
@@ -127,6 +131,8 @@ See [ARCHITECTURE.md](ARCHITECTURE.md) for details and
 
 | Version | Theme |
 | --- | --- |
+| 9.9.2 | Artifact Trust |
+| 9.9.1 | Clean Foundations |
 | 9.9.0 | Fail-Closed Trust |
 | 9.8.0 | Honest Knowledge Pipeline |
 | 9.7.0 | Proactive Hybrid Brain |

package/bin/ltcai.js

@@ -90,7 +90,7 @@ function run(index) {
     process.exit(1);
   }
 
-  const child = spawn(python, [path.join(root, "ltcai_cli.py"), ...process.argv.slice(2)], {
+  const child = spawn(python, ["-m", "latticeai.cli.entrypoint", ...process.argv.slice(2)], {
     cwd: root,
     stdio: "inherit",
   });

package/desktop/electron/main.cjs

@@ -20,7 +20,7 @@ ipcMain.handle("lattice:select-folder", async (event) => {
 
 function startBackend() {
   if (process.env.LATTICEAI_DESKTOP_NO_BACKEND) return;
-  const command = process.env.LATTICEAI_DESKTOP_BACKEND_CMD || "python3 ltcai_cli.py --host 127.0.0.1 --port 4825";
+  const command = process.env.LATTICEAI_DESKTOP_BACKEND_CMD || "python3 -m latticeai.cli.entrypoint --host 127.0.0.1 --port 4825";
   const [bin, ...args] = command.split(/\s+/).filter(Boolean);
   if (!bin) return;
   backend = spawn(bin, args, {

package/docs/CHANGELOG.md

@@ -4,6 +4,89 @@ The top entry is either the current unreleased main-branch work or the current
 release line. Older entries are historical and may describe behavior as it
 existed at that release.
 
+## [9.9.2] - 2026-07-21
+
+### Added
+- ArtifactWritePipeline: `sanitize_write_content` in
+  `latticeai/core/file_generation.py` — a conservative validate-first →
+  extract → repair gate. The agent executor applies it to every `write_file`
+  `args.content` before dispatch, records a `content_sanitize` verdict on the
+  transcript, and tags `artifact_sanitize`/`artifact_repair` in the loop trace.
+- Artifact-first chat contract: direct file-creation responses and agent runs
+  carry an `artifacts[]` array (`kind/path/filename/bytes/previewable/valid/
+  repaired`) via `collect_artifacts(transcript)`.
+- Direct-path overwrite protection: an existing target is auto-suffixed
+  (`generated_page_2.html`) and announced, instead of silently overwritten.
+- Generated files are optionally indexed into the Brain through the unified
+  `IngestionPipeline` (`workspace://` provenance, `origin: generated_file`);
+  disable with `LATTICEAI_INGEST_GENERATED=0`. The response reports an honest
+  `brain_ingest` status; ingest failures never fail the file creation.
+- Plan schema enforcement (`normalize_plan`): non-empty goal, junk-step
+  filtering, `estimated_steps` clamping, and a deterministic single
+  `write_file` step for file-intent requests whose plan came back empty.
+- Memory quality filter (`filter_learnings`): trivial and duplicate agent
+  learnings are dropped before entering the Brain.
+- FG harness `tests/unit/test_artifact_write_scenarios.py` (FG-01..FG-08):
+  intent gating, filename inference, dirty-output extraction, truncated-HTML
+  repair, agent-path sanitization, how-to non-routing, scaffold validity.
+- Frontend honesty surfaces: "Auto-repaired" badge on file cards
+  (`generation.repaired`), and a distinct warning strip for `NEEDS_REVIEW` /
+  `FAILED` terminal agent states (`role="alert"`, ko/en, dark/light).
+
+### Changed
+- HTML file validation now rejects documents wrapped in prose or Markdown
+  fences, so extraction gets a chance to slice out the real document instead
+  of the wrapper being saved as "valid".
+- `product_readiness` `action-aware-chat` gate additionally proves the
+  ArtifactWritePipeline evidence (module, agent seam, FG harness test).
+
+## [9.9.1] - 2026-07-21
+
+### Removed
+- All repo-root compatibility shims except `server.py`: `ltcai_cli.py`,
+  `auto_setup.py`, `setup_wizard.py`, `mcp_registry.py`, `kg_schema.py`,
+  `knowledge_graph.py`, `knowledge_graph_api.py`, `local_knowledge_api.py`,
+  `llm_router.py`, `p_reinforce.py`, `telegram_bot.py`, and the root `tools/`
+  package (12 of 13 tracked shims, 92%). Canonical imports are the
+  `latticeai.*` / `lattice_brain.*` module paths; the console script and
+  `bin/ltcai.js` now target `latticeai.cli.entrypoint` directly.
+- Stale release evidence: `output/release/` now keeps only the newest three
+  versioned evidence directories (automated retention policy).
+
+### Added
+- Legacy debt gate: `scripts/check_legacy_debt.mjs` in `npm run lint` plus a
+  rewritten `tests/unit/test_legacy_root_shims.py` fail if a root module
+  reappears or any source tree imports a removed shim.
+- `scripts/prune_release_evidence.mjs` retention policy (newest 3, override
+  with `LTCAI_RELEASE_EVIDENCE_KEEP`), wired into `npm run release:evidence`.
+- First-run "First 5 minutes" guided card on the empty Brain home: ask a first
+  question, add a first file/note, see what the Brain learned — real feature
+  wiring, persistent progress, dismissible.
+- Daily briefing on the Brain home (immediate fetch, friendly empty state) and
+  proactive quick actions on Cmd+K cold open (open briefing, review pending,
+  ask the Brain) with live counts.
+- Localized API error pipeline: timeout/unreachable/status failures map to
+  friendly ko/en copy instead of raw `statusText` or English literals.
+- `scripts/check_current_release_docs.mjs` now verifies the ARCHITECTURE.md
+  Release Artifact Map names current-version artifacts exactly.
+
+### Changed
+- Review Center at product quality: translated status/source/risk/change-class
+  labels, framed diffs (file target, +/- coloring, honest truncation count),
+  raw IDs relegated to a collapsed "Technical details" disclosure, structured
+  success/failure feedback, and a distinct error state with retry for the
+  pending-proposals panel.
+- Intelligence/care/admin/markdown panels show friendly i18n error copy first;
+  raw backend detail is demoted to secondary text.
+- 37 version-named test files (`test_v3_*`, `test_v42_*` … `test_t9_*`,
+  `test_kg_v2/v4_*`) renamed to scenario-named suites; versioned test
+  function names cleaned up. Coverage is unchanged (1284 unit tests).
+- Packaging: `pyproject.toml` ships a single root module (`server`);
+  `package.json` files list and `MANIFEST.in` no longer ship shim files.
+- Docs: `docs/LEGACY_COMPATIBILITY.md` rewritten for the post-shim layout;
+  `docs/kg-schema.md` points at `lattice_brain/graph/schema.py`; ARCHITECTURE
+  artifact map and 9.8.0-era references brought current.
+
 ## [9.9.0] - 2026-07-21
 
 ### Fixed

package/docs/CI_AND_RELEASE_GATES.md

@@ -63,7 +63,7 @@ the required-checks list below.
 ## Postgres integration gate
 
 `postgres-integration.yml` runs the migration-integrity suite
-(`tests/integration/test_v42_postgres_migration_live.py`) that is skipped
+(`tests/integration/test_postgres_migration_live.py`) that is skipped
 everywhere else. The suite is gated by `LTCAI_LIVE_POSTGRES_DOCKER_CONSENT=1`;
 the workflow sets that variable, and the test itself starts and tears down a
 `pgvector/pgvector:pg16` container via `docker compose` (preinstalled on

package/docs/COMMUNITY_AND_PLUGINS.md

@@ -1,6 +1,6 @@
 # Community And Plugins
 
-Current release: **9.9.0 — Fail-Closed Trust**.
+Current release: **9.9.2 — Artifact Trust**.
 
 LatticeAI defines the path from a strong local-first framework (8.4.0
 action-aware baseline, 8.5.0 registry+DI hardening, 8.6.0 capture/navigation

package/docs/DEVELOPMENT.md

@@ -3,7 +3,7 @@
 > **Status: canonical** — current contributor guidance, kept in sync with the
 > current release.
 
-Current release: **9.9.0 — Fail-Closed Trust**.
+Current release: **9.9.2 — Artifact Trust**.
 
 This document is for contributors working on the local-first Digital Brain
 codebase. Product positioning and quick start stay in `README.md`; release

package/docs/LEGACY_COMPATIBILITY.md

@@ -1,18 +1,18 @@
 # Legacy Compatibility Map
 
-Current target: **9.6.0 — Trusted Agent Loop**.
+Current target: **9.9.1 — Legacy debt paydown**.
 
-Lattice AI is moving toward a smaller, modular architecture centered on
-`lattice_brain`, `latticeai.services`, `latticeai.api`, and `latticeai.runtime`.
-Some root-level modules remain packaged for compatibility with older imports,
-CLI entrypoints, or extension workflows. Their presence does not define the
-current architecture.
+Lattice AI is centered on `lattice_brain`, `latticeai.services`, `latticeai.api`,
+and `latticeai.runtime`. 9.9.1 completed the root-shim compatibility window:
+every repo-root import shim except `server.py` was physically deleted, and a
+legacy debt gate keeps the root clean.
 
 The managed inventory lives in `latticeai.core.legacy_compatibility` and
 groups shims by layer:
 
-- `root`: historical repo-root imports such as `knowledge_graph.py` — **kept**
-  (external entrypoints: `uvicorn server:app`, installed CLI, old scripts).
+- `root`: historical repo-root imports such as `knowledge_graph.py` —
+  **removed in 9.9.1** except `server.py` (external entrypoints:
+  `uvicorn server:app`, Docker CMD, launch scripts).
 - `brain-flat`: pre-graph-package imports such as `lattice_brain.store` —
   **removed in 8.8.0** (internal-only).
 - `deprecated-namespace`: older `latticeai.brain.*` package imports —
@@ -24,11 +24,44 @@ Removed layers stay listed in `legacy_compatibility.REMOVED_SHIMS` and in the
 `legacy_shim_report()` payload (`removed`, `lingering`), so tooling can tell
 "removed on purpose" apart from "missing by accident".
 
+## Legacy Debt Gate
+
+Two gates keep the debt paid down:
+
+- `scripts/check_legacy_debt.mjs` (part of `npm run lint`) — fails if a
+  disallowed root-level Python module reappears, or if any source tree imports
+  a removed root shim.
+- `tests/unit/test_legacy_root_shims.py` — asserts removed shims stay
+  unimportable, canonical replacements import, and the registry in
+  `latticeai.core.legacy_compatibility` matches reality.
+
+## Root Module Map (removed in 9.9.1)
+
+| Removed root module | Canonical import |
+| --- | --- |
+| `knowledge_graph.py` | `from lattice_brain.graph.store import KnowledgeGraphStore` |
+| `knowledge_graph_api.py` | `from latticeai.api.knowledge_graph import create_knowledge_graph_router` |
+| `kg_schema.py` | `from lattice_brain.graph.schema import ...` |
+| `auto_setup.py` | `from latticeai.setup.auto_setup import probe, recommend` |
+| `llm_router.py` | `import latticeai.models.router` |
+| `ltcai_cli.py` | `from latticeai.cli.entrypoint import main` (console script `LTCAI`) |
+| `mcp_registry.py` | `import latticeai.core.mcp_registry` |
+| `local_knowledge_api.py` | `from latticeai.services.local_knowledge import create_local_knowledge_router` |
+| `p_reinforce.py` | `from latticeai.services.p_reinforce import PReinforceGardener` |
+| `telegram_bot.py` | `from latticeai.integrations.telegram_bot import run_bot` |
+| `setup_wizard.py` | `from latticeai.setup.wizard import scan_environment` |
+| `tools/` | `from latticeai.tools import execute_tool` |
+
+The only remaining root module:
+
+| Kept root module | Why it remains |
+| --- | --- |
+| `server.py` | Lazy proxy to `latticeai.server_app`; preserves `uvicorn server:app`, the Docker CMD, and launch scripts without import-time construction |
+
 ## Brain Core extraction readiness
 
-Removing the internal layers gives `lattice_brain` exactly one import surface
-(its physical module paths). Two structural guards keep it extractable as a
-standalone package:
+`lattice_brain` has exactly one import surface (its physical module paths).
+Two structural guards keep it extractable as a standalone package:
 
 - `tests/unit/test_brain_core_isolation.py` — AST guard that fails if any
   `lattice_brain` module imports `latticeai` (the product imports the Brain,
@@ -36,36 +69,6 @@ standalone package:
 - `tests/unit/test_legacy_root_shims.py::test_internal_shim_layers_are_gone`
   — fails if a removed shim path becomes importable again.
 
-## Current Policy
-
-- Keep compatibility shims while public imports or package entrypoints still
-  depend on them.
-- Prefer moving implementation into focused packages before removing a root
-  module.
-- Add deprecation notes before removal.
-- Avoid breaking package users during a minor release.
-- Do not silently remove rollback, backup, restore, or migration paths.
-- Track every remaining shim through `latticeai.core.legacy_compatibility` so
-  release readiness can report owner, replacement, reason, removal phase, and
-  missing files.
-
-## Root Module Map
-
-| Legacy root module | Current home / direction | Why it remains |
-| --- | --- | --- |
-| `knowledge_graph.py` | `lattice_brain.graph` / `lattice_brain.knowledge` | Compatibility for older graph imports and historical tooling |
-| `knowledge_graph_api.py` | `latticeai.api.memory`, `latticeai.api.search`, graph-related API routers | Compatibility for older API import paths |
-| `kg_schema.py` | `lattice_brain` storage/schema modules | Compatibility for graph schema references |
-| `auto_setup.py` | `latticeai.setup.auto_setup` | Thin compatibility shim for zero-config setup probes and historical commands |
-| `llm_router.py` | `latticeai.models.router` | Compatibility for older local model routing imports |
-| `ltcai_cli.py` | package console entrypoint (`ltcai`) | Compatibility for the installed CLI contract |
-| `mcp_registry.py` | `latticeai.core.mcp_registry` and service-backed registries | Compatibility for MCP/skills lookup entrypoints |
-| `local_knowledge_api.py` | `latticeai.services.local_knowledge` | Thin compatibility shim for local folder/file watcher flows |
-| `p_reinforce.py` | gardener/maintenance service direction | Compatibility for existing Brain gardening runtime hooks |
-| `telegram_bot.py` | opt-in integration package or disabled-by-default connector | Compatibility only; Telegram must remain opt-in |
-| `setup_wizard.py` | `latticeai.setup.wizard` | Thin compatibility shim for first-run recommendation calls |
-| `server.py` | lazy proxy to `latticeai.server_app` / `latticeai.app_factory` | Preserves historical `server.app` imports without import-time construction |
-
 ## Inner Shim Layers (removed in 8.8.0)
 
 | Legacy layer | Example module | Replacement import | Status |
@@ -76,14 +79,10 @@ standalone package:
 
 ## Packaging Notes
 
-`pyproject.toml` and `package.json` still include several root modules because
-older installed packages may import them directly. That is intentional for now.
-The long-term target is:
-
-- move implementation into `lattice_brain`, `latticeai.core`, `latticeai.models`,
-  `latticeai.services`, or `latticeai.api`;
-- leave thin shims with docstrings/deprecation warnings;
-- remove a shim only after tests prove no supported entrypoint relies on it.
+`pyproject.toml` ships a single root module (`server`) plus the
+`latticeai.*`/`lattice_brain.*` packages; the npm package mirrors that. The
+console script `LTCAI` targets `latticeai.cli.entrypoint:main` directly, and
+`bin/ltcai.js` spawns `python -m latticeai.cli.entrypoint`.
 
 ## Removal Checklist
 

package/docs/ONBOARDING.md

@@ -1,6 +1,6 @@
 # Lattice AI Onboarding
 
-Current release: **9.9.0 — Fail-Closed Trust**.
+Current release: **9.9.2 — Artifact Trust**.
 
 The first-run goal is a five-minute path from "I opened the app" to "my Brain
 has a source, a question, and proof." This page is the product contract behind

package/docs/OPERATIONS.md

@@ -1,4 +1,4 @@
-# Lattice AI — Operations Guide (v9.9.0)
+# Lattice AI — Operations Guide (v9.9.2)
 
 > **Status: canonical** — kept in sync with the current release. Storage layout
 > below reflects the SQLite live Brain store and workspace scoping, not the

package/docs/TRUST_MODEL.md

@@ -1,6 +1,6 @@
 # Lattice AI Trust Model
 
-Current release: **9.9.0 — Fail-Closed Trust**.
+Current release: **9.9.2 — Artifact Trust**.
 
 Lattice AI is local-first, explicit about external communication, and honest
 when a capability is unavailable.

package/docs/WHY_LATTICE.md

@@ -1,6 +1,6 @@
 # Why Lattice AI Exists
 
-Current release: **9.9.0 — Fail-Closed Trust**.
+Current release: **9.9.2 — Artifact Trust**.
 
 **Lattice AI is a local-first Digital Brain that keeps your knowledge durable
 across any AI model.**

package/docs/kg-schema.md

@@ -1,9 +1,9 @@
 # Knowledge Graph Schema
 
-Current release: **9.9.0 — Fail-Closed Trust**.
+Current release: **9.9.2 — Artifact Trust**.
 
 명세 출처: `lattice_ai_full_spec.pptx` 슬라이드 20·21·22
-구현: `kg_schema.py`
+구현: `lattice_brain/graph/schema.py`
 
 ---
 
@@ -179,8 +179,8 @@ provenance(source_type, source_uri, content_hash, captured_at, modified_at,
 
 ## 마이그레이션 (legacy → v2)
 
-기존 `knowledge_graph.py` 가 만든 `nodes` / `edges` 테이블은 자유 문자열 타입을
-사용해 왔다. `kg_schema.py` 는 매핑 표를 가지고 있어 정식 enum 으로 변환한다.
+기존 `lattice_brain/graph/store.py`(구 `knowledge_graph.py`) 가 만든 `nodes` / `edges` 테이블은 자유 문자열 타입을
+사용해 왔다. `lattice_brain/graph/schema.py` 는 매핑 표를 가지고 있어 정식 enum 으로 변환한다.
 
 | legacy 타입 (한글 동사) | → v2 `EdgeType` |
 |------------------------|------------------|
@@ -209,7 +209,7 @@ provenance(source_type, source_uri, content_hash, captured_at, modified_at,
 
 마이그레이션은 별도 CLI 없이 **서버 기동 시 자동으로** 일어난다:
 `knowledge_graph.KnowledgeGraphStore` 가 열릴 때 v2 스키마를 생성/치유하고
-(`kg_schema.KGStoreV2.init_schema` — 추가 컬럼은 `ALTER` 로 in-place 치유,
+(`lattice_brain.graph.schema.KGStoreV2.init_schema` — 추가 컬럼은 `ALTER` 로 in-place 치유,
 edges_v2 식별자 변경은 create→copy→swap 으로 재구축), legacy 데이터를
 v2 로 백필한다. 기존 `nodes` / `edges` 테이블은 삭제하지 않는다. v4 에서는
 `nodes_v2` / `edges_v2` 가 쓰기 마스터이며, legacy 테이블은 이전 import/API
@@ -243,7 +243,7 @@ v2 로 백필한다. 기존 `nodes` / `edges` 테이블은 삭제하지 않는
 read/write 는 `knowledge_graph.KnowledgeGraphStore` 가 담당한다:
 
 ```python
-from kg_schema import KGStoreV2, NodeType, EdgeType
+from lattice_brain.graph.schema import KGStoreV2, NodeType, EdgeType
 from knowledge_graph import KnowledgeGraphStore
 
 store = KnowledgeGraphStore(db_path, blob_dir)

package/lattice_brain/__init__.py

@@ -26,7 +26,7 @@ from .storage import (
     storage_from_env,
 )
 
-__version__ = "9.9.0"
+__version__ = "9.9.2"
 
 __all__ = [
     "AgentRuntime",

package/lattice_brain/graph/schema.py

@@ -32,7 +32,7 @@ legacy 테이블에 대한 dual-write 프로젝션(raw SQL) + ``kgv2_*`` 재구
 사용 예
 -------
 ```python
-from kg_schema import KGStoreV2
+from lattice_brain.graph.schema import KGStoreV2
 
 store = KGStoreV2("/Users/me/.ltcai/kg_v2.db")
 store.init_schema()        # nodes_v2 / edges_v2 생성 + 컬럼 drift self-heal

package/lattice_brain/runtime/multi_agent.py

@@ -48,7 +48,7 @@ from .contracts import multi_agent_contract
 from ..utils import now_iso as _now
 
 
-MULTI_AGENT_VERSION = "9.9.0"
+MULTI_AGENT_VERSION = "9.9.2"
 
 AGENT_ROLES = ("researcher", "planner", "executor", "reviewer", "release")
 CORE_PIPELINE = ("planner", "executor", "reviewer")

package/latticeai/__init__.py

@@ -1,3 +1,3 @@
 """Lattice AI - modular server package."""
 
-__version__ = "9.9.0"
+__version__ = "9.9.2"

package/latticeai/api/chat.py

@@ -208,6 +208,7 @@ def create_chat_router(context: AppContext) -> APIRouter:
         execute_tool=execute_tool,
         agent_controller=agent_controller,
         agent_root=AGENT_ROOT,
+        ingestion_pipeline=context.ingestion_pipeline,
     )
     document_coordinator = DocumentGenerationCoordinator(
         model_router=model_router,
@@ -276,6 +277,8 @@ def create_chat_router(context: AppContext) -> APIRouter:
             direct_response = await intent_controller.direct_file_action(
                 req,
                 model_id=selected_model_id,
+                effective_email=effective_email,
+                workspace_id=workspace_id,
             )
             if direct_response is not None:
                 return direct_response

package/latticeai/api/chat_agent_http.py

@@ -18,7 +18,7 @@ from lattice_brain.runtime.hooks import dispatch_tool
 from latticeai.api.chat_contracts import AgentEvalRequest, AgentRequest, AgentResumeRequest
 from latticeai.api.chat_helpers import _LANG_HINT, detect_language, workspace_scope_from_request
 from latticeai.core.agent import AgentRunContext, AgentState
-from latticeai.services.tool_dispatch import collect_created_files
+from latticeai.services.tool_dispatch import collect_artifacts, collect_created_files
 
 
 class AgentHTTPController:
@@ -307,6 +307,7 @@ class AgentHTTPController:
             "state_history": ctx.state_history,
             "final_state": ctx.state.value,
             "created_files": collect_created_files(ctx.transcript),
+            "artifacts": collect_artifacts(ctx.transcript),
             "loop": ctx.trace.summary(),
         }