omnius 1.0.594 → 1.0.596

package/docs/.vitepress/config.mts

@@ -53,12 +53,14 @@ export default defineConfig({
         items: [
           { text: "Bring Your Own Inference", link: "/guides/bring-your-own-inference" },
           { text: "Tools And Web Search", link: "/guides/tools-and-web-search" },
+          { text: "Categorized OSINT Research", link: "/guides/osint-research" },
           { text: "Agent Integration", link: "/guides/agent-integration" },
           { text: "TUI Workflows", link: "/guides/tui-workflows" },
           { text: "Sponsor And COHERE", link: "/guides/sponsor-and-cohere" },
           { text: "Realtime Conversation", link: "/guides/realtime" },
           { text: "Telegram", link: "/guides/telegram" },
           { text: "Media Generation", link: "/guides/media-generation" },
+          { text: "System Tray Indicator", link: "/guides/system-tray" },
         ],
       },
       {

package/docs/DISCOVERY.json

@@ -5771,6 +5771,65 @@
         "operation.version-compatibility"
       ]
     },
+    {
+      "id": "capability.osint-research",
+      "kind": "capability",
+      "title": "Categorized OSINT research",
+      "summary": "Discover a compact ranked shortlist from the bundled 77-category OSINT4ALL snapshot, expand one exact resource, then deliberately route it through an appropriate web tool with provenance and safety guidance.",
+      "aliases": [
+        "OSINT",
+        "OSINT4ALL",
+        "long-haul research",
+        "open source intelligence"
+      ],
+      "keywords": [
+        "research",
+        "catalog",
+        "search",
+        "provenance",
+        "corroboration",
+        "identity",
+        "social",
+        "network",
+        "geospatial"
+      ],
+      "maturity": "stable",
+      "prerequisites": [
+        "Legitimate research purpose",
+        "Authorization for active or sensitive target interaction"
+      ],
+      "interfaces": [
+        {
+          "type": "agent-tool",
+          "target": "osint_search",
+          "description": "Compact deterministic local discovery"
+        },
+        {
+          "type": "agent-tool",
+          "target": "osint_show",
+          "description": "Exact resource expansion"
+        }
+      ],
+      "references": [
+        {
+          "type": "guide",
+          "target": "docs/guides/osint-research.md",
+          "relation": "canonical-guide"
+        },
+        {
+          "type": "source",
+          "target": "packages/execution/src/tools/osint-catalog-data.ts",
+          "relation": "generated-catalog"
+        }
+      ],
+      "related": [
+        "tool.osint-search",
+        "tool.osint-show",
+        "tool.web-search",
+        "tool.web-fetch",
+        "tool.web-crawl"
+      ]
+    },
     {
       "id": "command.access",
       "kind": "command",
@@ -10866,6 +10925,32 @@
         }
       ]
     },
+    {
+      "id": "guide.guides-osint-research",
+      "kind": "guide",
+      "title": "Categorized OSINT research",
+      "summary": "Bundled Omnius documentation artifact: docs/guides/osint-research.md.",
+      "keywords": [
+        "guides",
+        "osint",
+        "research",
+        "md"
+      ],
+      "maturity": "stable",
+      "interfaces": [
+        {
+          "type": "file",
+          "target": "docs/guides/osint-research.md"
+        }
+      ],
+      "references": [
+        {
+          "type": "documentation",
+          "target": "docs/guides/osint-research.md",
+          "relation": "canonical-artifact"
+        }
+      ]
+    },
     {
       "id": "guide.guides-realtime",
       "kind": "guide",
@@ -10918,6 +11003,32 @@
         }
       ]
     },
+    {
+      "id": "guide.guides-system-tray",
+      "kind": "guide",
+      "title": "System Tray Indicator",
+      "summary": "Bundled Omnius documentation artifact: docs/guides/system-tray.md.",
+      "keywords": [
+        "guides",
+        "system",
+        "tray",
+        "md"
+      ],
+      "maturity": "stable",
+      "interfaces": [
+        {
+          "type": "file",
+          "target": "docs/guides/system-tray.md"
+        }
+      ],
+      "references": [
+        {
+          "type": "documentation",
+          "target": "docs/guides/system-tray.md",
+          "relation": "canonical-artifact"
+        }
+      ]
+    },
     {
       "id": "guide.guides-telegram",
       "kind": "guide",
@@ -13807,6 +13918,7 @@
       ],
       "related": [
         "capability.bring-your-own-inference",
+        "capability.osint-research",
         "api.discovery",
         "api.tools",
         "operation.version-compatibility"
@@ -18273,6 +18385,107 @@
       ],
       "direct_callable": false
     },
+    {
+      "id": "tool.osint-search",
+      "kind": "tool",
+      "title": "OSINT Search",
+      "summary": "Search the bundled OSINT4ALL snapshot locally and return a bounded ranked shortlist with category, archived-health, interaction, and risk metadata; no cataloged service is contacted.",
+      "aliases": [
+        "osint_search",
+        "OSINT catalog search"
+      ],
+      "keywords": [
+        "OSINT4ALL",
+        "local index",
+        "top-k",
+        "77 categories",
+        "1446 resources",
+        "1456 placements"
+      ],
+      "interfaces": [
+        {
+          "type": "rest-schema",
+          "target": "/v1/tools/osint_search"
+        },
+        {
+          "type": "agent-run",
+          "target": "/v1/run"
+        },
+        {
+          "type": "agent-chat",
+          "target": "/v1/chat/completions"
+        }
+      ],
+      "references": [
+        {
+          "type": "source",
+          "target": "packages/execution/src/tools/osint-catalog.ts",
+          "relation": "implementation"
+        },
+        {
+          "type": "guide",
+          "target": "docs/guides/osint-research.md",
+          "relation": "usage"
+        }
+      ],
+      "direct_callable": false,
+      "maturity": "stable",
+      "related": [
+        "capability.osint-research",
+        "tool.osint-show"
+      ]
+    },
+    {
+      "id": "tool.osint-show",
+      "kind": "tool",
+      "title": "OSINT Show",
+      "summary": "Expand one exact local OSINT resource ID into its URL, aliases, original category placements, archived health, and safe next-tool route; no cataloged service is contacted.",
+      "aliases": [
+        "osint_show",
+        "OSINT resource expansion"
+      ],
+      "keywords": [
+        "OSINT4ALL",
+        "exact lookup",
+        "provenance",
+        "risk",
+        "archived health"
+      ],
+      "interfaces": [
+        {
+          "type": "rest-schema",
+          "target": "/v1/tools/osint_show"
+        },
+        {
+          "type": "agent-run",
+          "target": "/v1/run"
+        },
+        {
+          "type": "agent-chat",
+          "target": "/v1/chat/completions"
+        }
+      ],
+      "references": [
+        {
+          "type": "source",
+          "target": "packages/execution/src/tools/osint-catalog.ts",
+          "relation": "implementation"
+        },
+        {
+          "type": "guide",
+          "target": "docs/guides/osint-research.md",
+          "relation": "usage"
+        }
+      ],
+      "direct_callable": false,
+      "maturity": "stable",
+      "related": [
+        "capability.osint-research",
+        "tool.osint-search",
+        "tool.web-fetch",
+        "tool.web-crawl"
+      ]
+    },
     {
       "id": "tool.pdf-to-text",
       "kind": "tool",

package/docs/DISCOVERY.md

@@ -179,6 +179,7 @@ Daemon equivalents are `GET /v1/discovery?q=<intent>` and `GET /v1/discovery/{id
 | `addon.omnius-docs` | Omnius Documentation | Project-local Omnius documentation bundle for discover-then-expand agent workflows. |
 | `addon.omnius-rest-docs` | Omnius REST Documentation | Project-local Omnius REST API documentation bundle for discover-then-expand agent workflows. |
 | `capability.bring-your-own-inference` | Bring your own inference | Connect local runtimes, Claude, Gemini, and registered OpenAI-compatible providers through explicit protocol and credential descriptors. |
+| `capability.osint-research` | Categorized OSINT research | Discover a compact ranked shortlist from the bundled 77-category OSINT4ALL snapshot, expand one exact resource, then deliberately route it through an appropriate web tool with provenance and safety guidance. |
 | `overview` | Omnius capability overview | Start here to discover Omnius providers, tools, APIs, commands, skills, configuration, operations, and shipped documentation. |
 
 ## Command
@@ -357,8 +358,10 @@ Daemon equivalents are `GET /v1/discovery?q=<intent>` and `GET /v1/discovery/{id
 | `guide.guides-agent-integration` | Agent And Service Integration | Bundled Omnius documentation artifact: docs/guides/agent-integration.md. |
 | `guide.guides-bring-your-own-inference` | Bring Your Own Inference | Bundled Omnius documentation artifact: docs/guides/bring-your-own-inference.md. |
 | `guide.guides-media-generation` | Media Generation | Bundled Omnius documentation artifact: docs/guides/media-generation.md. |
+| `guide.guides-osint-research` | Categorized OSINT research | Bundled Omnius documentation artifact: docs/guides/osint-research.md. |
 | `guide.guides-realtime` | Realtime Conversations | Bundled Omnius documentation artifact: docs/guides/realtime.md. |
 | `guide.guides-sponsor-and-cohere` | Sponsor And COHERE Mesh | Bundled Omnius documentation artifact: docs/guides/sponsor-and-cohere.md. |
+| `guide.guides-system-tray` | System Tray Indicator | Bundled Omnius documentation artifact: docs/guides/system-tray.md. |
 | `guide.guides-telegram` | Telegram Bridge | Bundled Omnius documentation artifact: docs/guides/telegram.md. |
 | `guide.guides-tools-and-web-search` | Tools And Web Search | Bundled Omnius documentation artifact: docs/guides/tools-and-web-search.md. |
 | `guide.guides-tui-workflows` | TUI Workflows | Bundled Omnius documentation artifact: docs/guides/tui-workflows.md. |
@@ -591,6 +594,8 @@ Daemon equivalents are `GET /v1/discovery?q=<intent>` and `GET /v1/discovery/{id
 | `tool.ocr-image-advanced` | Ocr Image Advanced | ocr_image_advanced is an agent-bound Omnius tool available through chat/run tool exposure. |
 | `tool.ocr-pdf` | Ocr Pdf | ocr_pdf is an agent-bound Omnius tool available through chat/run tool exposure. |
 | `tool.opencode` | Opencode | opencode is an agent-bound Omnius tool available through chat/run tool exposure. |
+| `tool.osint-search` | OSINT Search | Search the bundled OSINT4ALL snapshot locally and return a bounded ranked shortlist with category, archived-health, interaction, and risk metadata; no cataloged service is contacted. |
+| `tool.osint-show` | OSINT Show | Expand one exact local OSINT resource ID into its URL, aliases, original category placements, archived health, and safe next-tool route; no cataloged service is contacted. |
 | `tool.pdf-to-text` | Pdf To Text | pdf_to_text is an agent-bound Omnius tool available through chat/run tool exposure. |
 | `tool.pdf-visual-markdown` | Pdf Visual Markdown | pdf_visual_markdown is an agent-bound Omnius tool available through chat/run tool exposure. |
 | `tool.phase-recall` | Phase Recall | phase_recall is an agent-bound Omnius tool available through chat/run tool exposure. |

package/docs/discovery/catalog-overrides.json

@@ -20,6 +20,7 @@
       ],
       "related": [
         "capability.bring-your-own-inference",
+        "capability.osint-research",
         "api.discovery",
         "api.tools",
         "operation.version-compatibility"
@@ -87,6 +88,65 @@
         "operation.version-compatibility"
       ]
     },
+    {
+      "id": "capability.osint-research",
+      "kind": "capability",
+      "title": "Categorized OSINT research",
+      "summary": "Discover a compact ranked shortlist from the bundled 77-category OSINT4ALL snapshot, expand one exact resource, then deliberately route it through an appropriate web tool with provenance and safety guidance.",
+      "aliases": ["OSINT", "OSINT4ALL", "long-haul research", "open source intelligence"],
+      "keywords": ["research", "catalog", "search", "provenance", "corroboration", "identity", "social", "network", "geospatial"],
+      "maturity": "stable",
+      "prerequisites": ["Legitimate research purpose", "Authorization for active or sensitive target interaction"],
+      "interfaces": [
+        {"type": "agent-tool", "target": "osint_search", "description": "Compact deterministic local discovery"},
+        {"type": "agent-tool", "target": "osint_show", "description": "Exact resource expansion"}
+      ],
+      "references": [
+        {"type": "guide", "target": "docs/guides/osint-research.md", "relation": "canonical-guide"},
+        {"type": "source", "target": "packages/execution/src/tools/osint-catalog-data.ts", "relation": "generated-catalog"}
+      ],
+      "related": ["tool.osint-search", "tool.osint-show", "tool.web-search", "tool.web-fetch", "tool.web-crawl"]
+    },
+    {
+      "id": "tool.osint-search",
+      "kind": "tool",
+      "title": "OSINT Search",
+      "summary": "Search the bundled OSINT4ALL snapshot locally and return a bounded ranked shortlist with category, archived-health, interaction, and risk metadata; no cataloged service is contacted.",
+      "aliases": ["osint_search", "OSINT catalog search"],
+      "keywords": ["OSINT4ALL", "local index", "top-k", "77 categories", "1446 resources", "1456 placements"],
+      "maturity": "stable",
+      "interfaces": [
+        {"type": "rest-schema", "target": "/v1/tools/osint_search"},
+        {"type": "agent-run", "target": "/v1/run"},
+        {"type": "agent-chat", "target": "/v1/chat/completions"}
+      ],
+      "references": [
+        {"type": "source", "target": "packages/execution/src/tools/osint-catalog.ts", "relation": "implementation"},
+        {"type": "guide", "target": "docs/guides/osint-research.md", "relation": "usage"}
+      ],
+      "related": ["capability.osint-research", "tool.osint-show"],
+      "direct_callable": false
+    },
+    {
+      "id": "tool.osint-show",
+      "kind": "tool",
+      "title": "OSINT Show",
+      "summary": "Expand one exact local OSINT resource ID into its URL, aliases, original category placements, archived health, and safe next-tool route; no cataloged service is contacted.",
+      "aliases": ["osint_show", "OSINT resource expansion"],
+      "keywords": ["OSINT4ALL", "exact lookup", "provenance", "risk", "archived health"],
+      "maturity": "stable",
+      "interfaces": [
+        {"type": "rest-schema", "target": "/v1/tools/osint_show"},
+        {"type": "agent-run", "target": "/v1/run"},
+        {"type": "agent-chat", "target": "/v1/chat/completions"}
+      ],
+      "references": [
+        {"type": "source", "target": "packages/execution/src/tools/osint-catalog.ts", "relation": "implementation"},
+        {"type": "guide", "target": "docs/guides/osint-research.md", "relation": "usage"}
+      ],
+      "related": ["capability.osint-research", "tool.osint-search", "tool.web-fetch", "tool.web-crawl"],
+      "direct_callable": false
+    },
     {
       "id": "provider.ollama",
       "kind": "provider",

package/docs/guides/osint-research.md

@@ -0,0 +1,90 @@
+# Categorized OSINT research
+
+Omnius ships a local, searchable snapshot of the
+[OSINT4ALL Start.me page](https://start.me/p/L1rEYQ/osint4all). It uses the
+same compact discovery pattern as AIWG skills:
+
+1. `osint_search` ranks a small candidate set from local metadata.
+2. `osint_show` expands one exact resource.
+3. The agent explicitly selects `web_fetch`, `web_crawl`,
+   `playwright_browser`, or another appropriate tool.
+4. Research findings keep their fetched-source provenance and are
+   corroborated independently.
+
+The full catalog is never injected into the model prompt.
+
+## Catalog coverage
+
+The bundled snapshot contains:
+
+- 77 Start.me bookmark categories
+- 1,456 source placements
+- 1,446 normalized canonical resources
+- every original Start.me bookmark item ID, category, position, title, and URL
+- duplicate placements retained as provenance on the canonical resource
+- Start.me's archived HTTP result code for each resource
+
+Transient RSS stories and the world-clock widget are not bookmarks and are not
+part of the tool catalog.
+
+The generated data records the source hash and a placement hash. Tests assert
+the exact counts, contiguous source ordinals, unique bookmark IDs, duplicate
+mapping, category totals, and deterministic search behavior.
+
+## Agent usage
+
+Search by need, entity type, service, category, family, domain, or URL
+fragment:
+
+```json
+{
+  "query": "reverse image face search",
+  "family": "media",
+  "health": "live",
+  "limit": 5
+}
+```
+
+`osint_search` returns compact IDs such as `osint.268396782`. Expand only the
+candidate you intend to use:
+
+```json
+{
+  "id": "osint.268396782"
+}
+```
+
+`osint_show` returns the resource URL, aliases, category placements, access
+mode, interaction/risk guidance, and a recommended next-tool route. Both
+catalog tools are local read-only operations and make no network requests.
+
+## Health and safety semantics
+
+Catalog health is an archived Start.me link-check result. It is useful for
+routing, but it is not proof that a resource works now:
+
+- `live`: archived 2xx/3xx response
+- `restricted`: archived authentication, bot-protection, rate-limit, or
+  method-friction response
+- `dead`: archived 404/410 response
+- `unknown`: timeout, server error, nonstandard failure, or missing result
+
+The index contains public links to sensitive and dual-use resources. Discovery
+does not authorize target interaction. Active or sensitive records are labeled
+so the agent can require a legitimate purpose, applicable authorization, and
+terms/legal review before choosing a network or browser tool.
+
+## Rebuilding the snapshot
+
+Fetch or restore the Start.me page-data JSON. The bundled provenance points to
+the exact
+[2026-07-21 archived page-data snapshot](https://web.archive.org/web/20260721182214id_/https://start.me/p/L1rEYQ.json?xpv=1)
+used for this build. Then run:
+
+```bash
+node scripts/build-osint-catalog.mjs --source /path/to/L1rEYQ.json
+```
+
+The source must contain exactly 77 URL-list categories and all 1,456 source
+placements. The generator refuses partial or structurally changed inputs
+instead of silently publishing an incomplete index.

package/docs/guides/system-tray.md

@@ -0,0 +1,85 @@
+# System Tray Indicator
+
+Omnius ships a native per-login tray indicator for Linux, macOS, and Windows
+on x64 hosts. It is separate from the REST daemon: closing the indicator never
+stops the daemon, and the daemon remains usable in headless sessions.
+
+## Install And Control
+
+```bash
+omnius tray install                 # register login startup and start now
+omnius tray status                  # indicator, health, endpoint, registration
+omnius tray restart
+omnius tray stop                    # stop only the indicator
+omnius tray uninstall               # stop it and remove login startup
+```
+
+The indicator polls the daemon's loopback-only `GET /health` route. It does not
+load a model or contact the configured inference backend. If the daemon uses a
+non-default port, Omnius discovers `OMNIUS_HOST`/`OMNIUS_PORT` from the current
+environment and, on Linux, from the installed user service. Override it
+explicitly when needed:
+
+```bash
+omnius tray install --endpoint http://127.0.0.1:11535
+```
+
+Non-loopback endpoints are rejected. The menu provides the current health and
+version, dashboard and log shortcuts, service-manager-aware daemon controls,
+login-startup control, and **Quit indicator**. Daemon stop is a separate,
+explicit menu action.
+
+## Linux / Ubuntu
+
+GNOME needs a StatusNotifier/AppIndicator host. Ubuntu Desktop normally ships
+the `gnome-shell-extension-appindicator` extension; the native helper uses
+Ayatana AppIndicator when available. On a minimal installation:
+
+```bash
+sudo apt install gnome-shell-extension-appindicator libayatana-appindicator3-1
+```
+
+Verify the desktop host without touching the daemon:
+
+```bash
+gdbus call --session \
+  --dest org.kde.StatusNotifierWatcher \
+  --object-path /StatusNotifierWatcher \
+  --method org.freedesktop.DBus.Properties.Get \
+  org.kde.StatusNotifierWatcher IsStatusNotifierHostRegistered
+```
+
+Login registration is written to
+`~/.config/autostart/omnius-tray.desktop`. Runtime PID/state stays under
+`$XDG_RUNTIME_DIR/omnius`; logs are under
+`$XDG_STATE_HOME/omnius` (usually `~/.local/state/omnius`). This avoids tying a
+desktop process to the daemon's persistent `~/.omnius` data directory.
+
+## Platform Registration
+
+| Platform | Login registration |
+| --- | --- |
+| Linux | XDG autostart desktop entry |
+| macOS | `~/Library/LaunchAgents/ai.omnius.tray.plist` |
+| Windows | per-user Startup-folder command |
+
+The optional native helper is exact-pinned and its platform executable is
+checked against a release SHA-256 before execution. Omnius remains usable when
+optional dependencies are disabled; only the tray command reports the missing
+helper. The current helper release targets x64. Other architectures fail with
+an explicit diagnostic instead of falling back to a headless or emulated tray.
+
+## Troubleshooting
+
+```bash
+omnius tray status --json
+tail -f ~/.local/state/omnius/tray.err.log   # Linux default
+```
+
+- **No icon on GNOME:** confirm the AppIndicator extension is active and the
+  session watcher reports a registered host.
+- **Offline despite a running daemon:** pass the daemon's loopback endpoint
+  with `--endpoint`; avoid `0.0.0.0` in client URLs.
+- **No graphical session:** run `omnius tray start` from the logged-in desktop
+  session so `DISPLAY`/`WAYLAND_DISPLAY` and the session D-Bus address exist.
+

package/docs/index.md

@@ -27,7 +27,9 @@ current task.
 - [Realtime Conversation](./guides/realtime.md)
 - [Telegram](./guides/telegram.md)
 - [Media Generation](./guides/media-generation.md)
+- [System Tray Indicator](./guides/system-tray.md)
 - [Tools And Web Search](./guides/tools-and-web-search.md)
+- [Categorized OSINT Research](./guides/osint-research.md)
 
 ## Reference