omnius 1.0.651 → 1.0.653

package/docs/OMNIUS-RELIABILITY-LONG-HORIZON-TODO.md

@@ -1,6 +1,6 @@
 # Omnius Reliability and Long-Horizon Workboard
 
-Updated: 2026-08-28
+Updated: 2026-08-29
 
 This file is the durable workboard for the current repair program.
 It records scope, dependencies, evidence, and closure rules.
@@ -313,7 +313,19 @@ It records scope, dependencies, evidence, and closure rules.
 - [x] Project completion claims.
 - [x] Project completion evidence.
 - [x] Project trusted command receipts.
+- [x] Project durable workboard cards, dependencies, assignees, decisions,
+  blockers, source bindings, verifier contracts, and evidence.
+- [x] Keep the workboard authoritative for execution while the graph remains
+  its reasoning and proof projection.
+- [x] Link explicit completion claims to the matching todo proof path.
+- [x] Require task-to-verification-to-evidence closure for explicit work.
+- [x] Reject a todo status as proof for acceptance, artifacts, or verification.
+- [x] Reject failed, timed-out, stale, malformed, and model-forged verifier
+  receipts.
+- [x] Keep trusted command receipts out of model-callable workboard schemas.
 - [x] Preserve authority as explicit, adopted, or inferred.
+- [x] Add the constrained controller boundary for model-proposed graph patches.
+- [x] Reject model authority escalation.
 - [x] Build target-focused graph slices.
 - [x] Include supporting evidence.
 - [x] Include refuting evidence.
@@ -321,6 +333,9 @@ It records scope, dependencies, evidence, and closure rules.
 - [x] Preserve parent reference closure.
 - [x] Preserve action-target closure.
 - [x] Limit model-visible graph context.
+- [x] Enforce a whole rendered-context character budget.
+- [x] Report partial coverage and omitted-node counts.
+- [x] Render relations only when both endpoints are visible.
 - [x] Refresh the graph before each primary model turn.
 - [x] Refresh the graph before each brute-force model turn.
 - [x] Keep one current graph block in context.
@@ -354,6 +369,9 @@ It records scope, dependencies, evidence, and closure rules.
 - [x] Fail the feature unit when verification throws.
 - [x] Contain and persist verifier errors.
 - [x] Prevent fallback completion without evidence.
+- [x] Preserve feature-node graph, card, requirement, acceptance, evidence,
+  verification-receipt, and attempt lineage.
+- [x] Save feature trees with atomic replacement.
 - [x] Distinguish absent delivery manifests from invalid manifests.
 - [x] Reject invalid authored delivery manifests.
 - [x] Reject incomplete authored delivery manifests.
@@ -363,6 +381,112 @@ It records scope, dependencies, evidence, and closure rules.
 - [x] Return `incomplete_verification` after repeated authoritative holds.
 - [x] Apply the same fail-safe to alternate terminal paths.
 
+## P1: Telegram temporal relationship flow
+
+- [x] Add immutable scoped turn nodes.
+- [x] Record direct replies, mentions, participation, and turn order as typed
+  relations.
+- [x] Separate observed, reported, inferred, and operational evidence classes.
+- [x] Keep router relationship notes as advisory claims.
+- [x] Build one-hop target-focused social context for the current chat and
+  thread.
+- [x] Preserve relation observations and temporal validity instead of only a
+  lossy aggregate.
+- [x] Stop ordinary group-chat text from entering global user personality
+  memory.
+- [x] Persist Telegram conversation snapshots atomically.
+- [x] Add an append-only canonical Telegram social event log.
+- [x] Replay missing social events into the snapshot after an interrupted
+  observation-to-snapshot boundary.
+- [x] Consume Telegram `message_reaction` updates.
+- [x] Consume Telegram `message_reaction_count` updates.
+- [x] Track the actor, target message, target participant, added reactions,
+  removed reactions, and current reaction set.
+- [x] Record reactions sent by Omnius through `setMessageReaction`.
+- [x] Keep emoji meaning unclassified in the transport graph. Any feeling or
+  intent interpretation stays advisory and must cite the observed reaction.
+- [ ] QUEUED — Add deterministic alias-merge receipts.
+- [ ] QUEUED — Add a multi-store social projection transaction coordinator if
+  the durability requirement expands beyond atomic per-store writes.
+
+## P1: Daemon frontend redesign
+
+- [x] Capture the bounded Huggle desktop, collapsed-sidebar, menus, Explorer,
+  and mobile interaction references.
+- [x] Map the current `localhost:11435` frontend and its regression suites.
+- [x] Rebuild the daemon shell, responsive navigation, chat composer,
+  capability cards, model picker, attachment menu, and Explorer interaction
+  hierarchy from the bounded reference.
+- [x] Preserve Omnius identity, owned assets, accessibility, daemon
+  routes, diagnostics, and operational capabilities.
+- [x] Update route, script, layout, responsive, and interaction tests.
+- [x] Remove generic keyword-class coloring for `error`, `success`, `ok`,
+  `bad`, and `live`; explicit state components retain their own presentation.
+- [x] Fix native `/v1/chat` streaming through an active remote share.
+  - Detect `{stream:true}` from the request contract instead of relying on an
+    `Accept` header that the native chat client does not send.
+  - Forward remote HTTP status, safe response headers, and SSE bytes without a
+    nested SSE wrapper.
+  - Preserve the original abort signal. User cancellation does not clear the
+    selected remote share.
+  - Clear a rejected sticky remote-share transport without automatically
+    resubmitting a possibly accepted chat mutation to the local daemon.
+  - Accept Tor-only remote-share state.
+- [x] Decouple daemon-owned chat work from the browser response lifetime.
+  - Guard all child-callback SSE writes and final response closure after a tab
+    closes, reloads, or loses its proxy transport.
+  - Keep the child running and persist its terminal in-flight result for
+    reattachment.
+  - Handle child spawn errors without an unhandled process event.
+  - Mark the server-side chat registry from child completion or failure, not
+    from browser connection closure.
+  - Verify a pre-inference spawn failure returns accepted, structured failure,
+    and DONE frames while `/health` remains available.
+- [x] Keep the operational-world JSON schema compatible with the Zod runtime
+  embedded in the publish bundle. Do not use the Zod 4-only `z.json()` helper
+  on the daemon startup path.
+- [ ] QUEUED — Replace parent-owned child stdout/stderr pipes with a durable
+  supervised output journal before claiming that detached chat children
+  survive a daemon restart. A detached PID alone does not make its pipes
+  restart-safe.
+- [x] Verify the rebuilt frontend on desktop and mobile viewports.
+- [x] Keep publish, install, daemon activation, and live service replacement
+  outside this source-only work scope. The operator owns those actions.
+
+## P1: Public Telegram presentation leak
+
+- [x] Prevent `[STEERING_RECONCILIATION]` contracts from reaching a
+  public Telegram reply.
+- [x] Prevent internal `no_reply` rationale, identity-boundary notes,
+  and injected-chatter analysis from reaching a public Telegram reply.
+- [x] Keep these records available only in the internal Context or
+  Evidence tabs.
+- [x] Add public-chat regressions for addressed-to-other-bot,
+  no-reply, steering reconciliation, and ordinary group chatter cases.
+
+## P1: Latest Hermes session and durable-work audit
+
+- [x] Audit official `NousResearch/hermes-agent` at commit
+  `1a47a36422ae3c42c23839b72cc24fb6a651aa28` (2026-08-29).
+- [x] Compare session lineage, prompt snapshots, strict role alternation,
+  memory-provider lifecycle, turn ownership, delivery obligations, durable
+  Kanban claims, and stale-claim recovery with Omnius.
+- [x] Preserve Omnius strengths that Hermes does not replace: typed work graph,
+  claim/evidence separation, fresh verifier receipts, mutation lineage, and
+  fail-closed completion projection.
+- [x] Adopt the relevant event-sourcing pattern for Telegram social state.
+- [x] Keep system-prompt snapshots stable within one active conversation.
+- [x] Keep platform identity and capability scope in session-owned state, not
+  process-global environment state.
+- [ ] QUEUED — Add a durable outbound Telegram delivery-obligation ledger with
+  idempotent message keys and crash recovery.
+- [ ] QUEUED — Bind active long-horizon work claims to renewable ownership
+  leases and reclaim stale claims without discarding the task history.
+- [ ] QUEUED — Add session-lineage edges for compression, reset, delegation,
+  and recovery boundaries to the operational world graph.
+- [ ] QUEUED — Add deterministic shutdown receipts for background memory writes
+  and report abandoned writes separately from abandoned prefetch work.
+
 ## P1: Inference visibility
 
 - [x] Add a shell-style inference block.
@@ -441,6 +565,16 @@ It records scope, dependencies, evidence, and closure rules.
 - [x] Operational controller tests: 6 passed.
 - [x] Operational runner test: 1 passed.
 - [x] Feature-node tests: 7 passed.
+- [x] Workboard trusted-receipt tests: 22 passed.
+- [x] Operational work-graph, reducer, feature-node, and context replay tests:
+  30 passed.
+- [x] Telegram temporal relationship regression, voice-soul, and Bot API tests:
+  103 passed.
+- [x] Daemon frontend route, script, responsive-layout, and interaction
+  regressions: 15 passed.
+- [x] Headless Chromium verified desktop and mobile live layouts, capability
+  counts, menu behavior, empty-state transitions, route titles, and mobile
+  drawer behavior with zero page errors.
 - [x] Delivery coverage focused tests passed.
 - [x] Workspace TypeScript builds passed.
 - [x] Targeted Nexus tests passed.
@@ -471,9 +605,8 @@ It records scope, dependencies, evidence, and closure rules.
   the literal incomplete `back at it?` delivery regression.
 - [x] CLI typecheck, all workspace builds, publish generation, and publish
   artifact audit passed after Reply/Evidence isolation.
-- [ ] VERIFY — Restart the operator-owned `telegram_test` TUI so its in-memory
-  process loads the rebuilt bundle, then confirm one fresh private DM keeps
-  diagnostics behind the buttons.
+- Operator-owned activation note: rebuilding, installing, restarting, and
+  activating the daemon or `telegram_test` poller are not tasks on this board.
 - [x] Direct live `AgenticRunner` inference with `robit/ornith-1.5:9b` completed
   in one turn with 5,837 total provider tokens and no `task_complete` demand.
 - [x] Legacy `maxTurns` control passed alone with a 60-second harness timeout
@@ -483,8 +616,8 @@ It records scope, dependencies, evidence, and closure rules.
 - [x] Rerun all workspace TypeScript builds after the transport repair.
 - [x] Rebuild all workspaces, regenerate `publish/`, pass the publish artifact
   audit, install the rebuilt package, and restart both user daemons.
-- [ ] VERIFY — Run live Telegram inference.
-- [ ] VERIFY — Run live ontology patch inference.
+- [ ] VERIFY — After operator activation, observe one live Telegram route and
+  one live ontology patch without changing service ownership from this task.
 
 ## Closure rule
 

package/docs/ONTOLOGY-LONG-HORIZON-WORK-GRAPH.md

@@ -1,6 +1,6 @@
 # Ontology Long-Horizon Work Graph
 
-Date: 2026-08-28
+Date: 2026-08-29
 
 ## Objective
 
@@ -11,7 +11,7 @@ Keep one canonical graph across planning, execution, verification, and completio
 ## Reference boundary
 
 The [Ontology Workbench](https://robit-man.github.io/ontology/) is the documentation and reference implementation.
-Its [raw source](https://github.com/robit-man/ontology/blob/main/index.html) defines the contracts and behavior.
+Its [pinned raw source](https://github.com/robit-man/ontology/blob/eb15ad0c0b0535b19333551e7dc579bc99920e3d/index.html) defines the contracts and behavior reviewed for this implementation.
 
 Use the implementation as a contract reference.
 Do not copy its browser and IndexedDB monolith into Omnius.
@@ -21,7 +21,7 @@ Do not copy its browser and IndexedDB monolith into Omnius.
 Omnius now has one versioned operational work graph across planning,
 execution, evidence, and completion.
 
-The implementation projects the existing todo and completion stores.
+The implementation projects the existing todo, durable workboard, and completion stores.
 It does not add an independent planner or evidence store.
 
 Implemented components:
@@ -40,7 +40,8 @@ Implemented components:
 - `packages/orchestrator/src/operational-world/persistence.ts` writes atomic
   task-epoch snapshots with revision history and validation receipts.
 - `packages/orchestrator/src/operational-world/controller.ts` owns projection,
-  persistence, model context, and explicit completion blockers.
+  persistence, the constrained model-patch boundary, model context, and
+  explicit completion blockers.
 - `AgenticRunner` refreshes the graph before each primary and brute-force model
   turn. It exposes one current reasoning slice and rechecks explicit graph
   closure at every terminal path.
@@ -61,6 +62,10 @@ objective
 
 Relations must also represent dependencies, blockers, contradictions, and supersession.
 
+The durable workboard remains the execution-control surface. The operational
+graph is its evidence and reasoning projection. It does not create a second
+scheduler or permit a model patch to bypass workboard transitions.
+
 ## Useful Ontology Workbench contracts
 
 The reference separates four concerns:
@@ -132,6 +137,44 @@ no-op comparison, and exports preserve these fields.
 A false result or exception fails the node. The fallback path never changes an
 unverified unit to complete.
 
+Each feature node retains its graph, workboard-card, requirement, acceptance,
+evidence, verification-receipt, and attempt lineage. Feature-tree saves use an
+atomic replace so an interrupted write does not publish a partial tree.
+
+### Receipt-backed workboard verification
+
+A declared verifier is no longer satisfied by model-authored text that merely
+names the command. The controller attaches `CommandEvidenceReceipt` only
+through an internal runtime API that is absent from model-callable schemas.
+
+The verifier gate requires:
+
+- The exact normalized declared command
+- A supported process-receipt schema
+- A zero process exit code
+- No timeout
+- Valid start and finish times
+- A finish time at or after the card entered work, when that boundary exists
+
+Failed, timed-out, stale, malformed, and receipt-free evidence remains visible
+for diagnosis. It does not certify completion.
+
+### Workboard projection
+
+The graph projects workboard cards as adopted work nodes and preserves their
+dependencies, assignees, decisions, blockers, evidence, source bindings, and
+verifier contracts. It emits the canonical proof path:
+
+```text
+task -> verification -> evidence
+  |
+  +-> acceptance or requirement
+```
+
+A card status alone cannot complete an explicit acceptance, artifact, or
+verification obligation. A fresh trusted receipt must close the corresponding
+path.
+
 ### Authoritative completion evidence
 
 The active completion gate and final terminal fail-safe now reject open,
@@ -149,6 +192,11 @@ typed operations, author, rationale, and creation time. The reducer rejects
 stale or reused revisions and emits an immutable validation receipt with graph
 and referenced-evidence hashes.
 
+`OperationalWorkGraphController.applyModelPatch` keeps model changes inside
+this boundary. It preserves the caller's base revision, attributes the patch
+to its producer, and rejects model-created nodes or claims that try to gain
+explicit or adopted authority.
+
 ### First-class conflict objects
 
 Structured claims include subject, predicate, object, valid time, authority,
@@ -161,6 +209,28 @@ The graph slice starts from exact or lexical targets, expands a bounded
 neighborhood, includes supporting and refuting evidence roles, retains claims
 and conflicts, and restores parent and action-target closure after trimming.
 
+Rendering also has a whole-block character budget. It keeps the focus first,
+then blockers, acceptance and requirements, verification and evidence, and
+finally other active nodes. It emits relations only when both endpoints are in
+the rendered set and reports partial coverage and omitted-node count.
+
+### Telegram group relationship graph
+
+Telegram social state is a separate scoped temporal projection. Version 2
+records immutable turn nodes and typed relations for direct replies, mentions,
+participation, and turn order. Observed and operational facts remain separate
+from model-inferred relationship claims.
+
+The target-focused social context includes only the current chat, current
+thread, and user-in-chat scopes. It expands one relationship hop around the
+addressed participant. Ordinary group-chat text is not written to global user
+personality memory. Explicit global preferences continue to use their
+dedicated adoption path.
+
+Router relationship notes are advisory claims. They cannot rewrite observed
+addressing, identity, or interaction edges. Conversation snapshots use atomic
+replacement.
+
 ### Shared source bindings
 
 The shared schema supports URI fragments, line and character ranges, pages,
@@ -202,6 +272,11 @@ Use these core relations:
 - `contradicts`
 - `blocked_by`
 - `supersedes`
+- `assigned_to`
+- `attempts`
+- `invalidates`
+- `resolves`
+- `synthesizes`
 
 Each node and relation must have a stable identifier.
 Each inferred item must record its authority.
@@ -259,6 +334,11 @@ The reducer must do these checks:
 8. Apply operations in a deterministic order.
 9. Emit an immutable patch and revision receipt.
 
+Dependency and blocker cycles are invalid. Relation endpoints are also typed:
+assignment targets an entity, evidence links target evidence, verification
+links target verification, and satisfaction links target a requirement or
+acceptance node.
+
 Use `integrationClosure.ts` as the first graph adapter.
 Do not make its bounded display neighborhood the authoritative validation universe.
 
@@ -310,6 +390,13 @@ Keep each inferred edge advisory until adoption.
 - Exceptions and false verification results cannot create completion.
 - Feature decomposition fields survive in the todo store and tool contract.
 - Exact verifier commands require trusted receipts after relevant mutations.
+- Workboard cards, assignments, blockers, decisions, and evidence project into
+  the canonical graph without replacing the workboard execution engine.
+- Model patches remain inferred and revision-bound.
+- Bounded graph rendering reports omissions and never emits dangling rendered
+  relations.
+- Telegram turns and relationships preserve observed facts separately from
+  advisory model claims and stay within chat, thread, and user-in-chat scope.
 - Explicit completion gaps hold `task_complete` and alternate terminal paths.
 - Repeated holds terminate as `incomplete_verification`; they never report a
   false success.
@@ -349,3 +436,16 @@ Reconcile conflicts before dependent work begins.
 
 This design lets Omnius decompose extreme complexity into durable ontological work.
 It also keeps progress, evidence, and completion lossless across long sessions.
+
+## Deliberate remaining boundaries
+
+These items are later durability and product extensions. They do not permit a
+completion bypass:
+
+- Replace the Telegram social snapshot source with an append-only canonical
+  social event log, while retaining the snapshot as a projection.
+- Add deterministic alias-merge receipts for renamed or linked identities.
+- Add a transaction coordinator if social facts must commit atomically across
+  conversation memory, the social projection, and other memory stores.
+- Generalize the shared temporal graph only after its scope and privacy model
+  can represent chat and thread boundaries without widening retrieval.

package/npm-shrinkwrap.json

@@ -1,12 +1,12 @@
 {
   "name": "omnius",
-  "version": "1.0.651",
+  "version": "1.0.653",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "omnius",
-      "version": "1.0.651",
+      "version": "1.0.653",
       "bundleDependencies": [
         "image-to-ascii"
       ],
@@ -1449,9 +1449,9 @@
       "license": "Apache-2.0 OR MIT"
     },
     "node_modules/@libp2p/webrtc/node_modules/node-datachannel": {
-      "version": "0.33.1",
-      "resolved": "https://registry.npmjs.org/node-datachannel/-/node-datachannel-0.33.1.tgz",
-      "integrity": "sha512-9oryOvUx2WqOmMUQ+JHyCx9w9UPBLGQcZQNcSYDc1LZS/hFSAqDyIRt6b5H5Ue13Gpe/vTjU8y9UvCBrbwpbAQ==",
+      "version": "0.33.2",
+      "resolved": "https://registry.npmjs.org/node-datachannel/-/node-datachannel-0.33.2.tgz",
+      "integrity": "sha512-WRL+uqYG2eSvpnKuCOKueaMiyKlDjkJFd6pFH/f2SbD/EiXLMXwmYNU5z+TDQPrAv+BMgkuC40UESeRRL+4zBw==",
       "license": "MPL 2.0",
       "dependencies": {
         "detect-libc": "^2.0.4"
@@ -1460,19 +1460,16 @@
         "node": ">=18.20.0"
       },
       "optionalDependencies": {
-        "@node-datachannel/android-arm64": "0.33.1",
-        "@node-datachannel/darwin-arm64": "0.33.1",
-        "@node-datachannel/darwin-x64": "0.33.1",
-        "@node-datachannel/linux-arm64-gnu": "0.33.1",
-        "@node-datachannel/linux-arm64-musl": "0.33.1",
-        "@node-datachannel/linux-x64-gnu": "0.33.1",
-        "@node-datachannel/linux-x64-musl": "0.33.1",
-        "@node-datachannel/win32-arm64-msvc": "0.33.1",
-        "@node-datachannel/win32-x64-msvc": "0.33.1"
-      }
-    },
-    "node_modules/@libp2p/webrtc/node_modules/node-datachannel/node_modules/@node-datachannel/android-arm64": {
-      "optional": true
+        "@node-datachannel/android-arm64": "0.33.2",
+        "@node-datachannel/darwin-arm64": "0.33.2",
+        "@node-datachannel/darwin-x64": "0.33.2",
+        "@node-datachannel/linux-arm64-gnu": "0.33.2",
+        "@node-datachannel/linux-arm64-musl": "0.33.2",
+        "@node-datachannel/linux-x64-gnu": "0.33.2",
+        "@node-datachannel/linux-x64-musl": "0.33.2",
+        "@node-datachannel/win32-arm64-msvc": "0.33.2",
+        "@node-datachannel/win32-x64-msvc": "0.33.2"
+      }
     },
     "node_modules/@libp2p/webrtc/node_modules/protons-runtime": {
       "version": "7.0.0",
@@ -1796,10 +1793,23 @@
         "url": "https://paulmillr.com/funding/"
       }
     },
+    "node_modules/@node-datachannel/android-arm64": {
+      "version": "0.33.2",
+      "resolved": "https://registry.npmjs.org/@node-datachannel/android-arm64/-/android-arm64-0.33.2.tgz",
+      "integrity": "sha512-I71a0jICUNYgh4ZI5AcINEMuRtQSVyrpp4FV3kJZMcx31xS0vKKtf06tpsUAtW5uS+uRXbZR+vlMEqS1h710wQ==",
+      "cpu": [
+        "arm64"
+      ],
+      "license": "MPL 2.0",
+      "optional": true,
+      "os": [
+        "android"
+      ]
+    },
     "node_modules/@node-datachannel/darwin-arm64": {
-      "version": "0.33.1",
-      "resolved": "https://registry.npmjs.org/@node-datachannel/darwin-arm64/-/darwin-arm64-0.33.1.tgz",
-      "integrity": "sha512-6reyGKzuYNzuJypm4KrpJVTpION39rZmLoqDNMiehTVuSZzV1yoYyLHCzJ9XNVpOViGdaUvAWXJTlHcoQOZtrw==",
+      "version": "0.33.2",
+      "resolved": "https://registry.npmjs.org/@node-datachannel/darwin-arm64/-/darwin-arm64-0.33.2.tgz",
+      "integrity": "sha512-EwBGiaMh3MX6zjYoZHuK02Q6hmQQIvR39335Kb/ZnP3fXZU0/VWx6ksHLM6K0XFFYRfP+yJeVgU79g++xoeQpw==",
       "cpu": [
         "arm64"
       ],
@@ -1810,9 +1820,9 @@
       ]
     },
     "node_modules/@node-datachannel/darwin-x64": {
-      "version": "0.33.1",
-      "resolved": "https://registry.npmjs.org/@node-datachannel/darwin-x64/-/darwin-x64-0.33.1.tgz",
-      "integrity": "sha512-1zXH/E79bswwRfbUwilw9iPNCCI4GLul/xxsjx/H7jbPT9SeMgkHKcx7Emuw91NBeYYPvYSYwQ705h4FTVDxow==",
+      "version": "0.33.2",
+      "resolved": "https://registry.npmjs.org/@node-datachannel/darwin-x64/-/darwin-x64-0.33.2.tgz",
+      "integrity": "sha512-a1nvL6MiskSjV3TWTNXdVpI/2kHNIOP2AbuBZjR5eC7VSrH/6hCFfHIBW4SFKXGFm8LOGliY9Df10UnJUutjwA==",
       "cpu": [
         "x64"
       ],
@@ -1823,9 +1833,9 @@
       ]
     },
     "node_modules/@node-datachannel/linux-arm64-gnu": {
-      "version": "0.33.1",
-      "resolved": "https://registry.npmjs.org/@node-datachannel/linux-arm64-gnu/-/linux-arm64-gnu-0.33.1.tgz",
-      "integrity": "sha512-FriA+y9cKnr9shQaNz4AdqkaNb7yqBcj1U/OgAlLvJtY/mJLvRX7R3iic18aUA5BkMMK+wwqBI/0Al3brxdRAw==",
+      "version": "0.33.2",
+      "resolved": "https://registry.npmjs.org/@node-datachannel/linux-arm64-gnu/-/linux-arm64-gnu-0.33.2.tgz",
+      "integrity": "sha512-YWAu3EiMl2HRi/fwWlfFTW30wFTkRVYJWRHQcI1uDSeZYG/tfyBqBy6CRy9Sgrb0xjOYZ6XhLDj8cdX0foPlpg==",
       "cpu": [
         "arm64"
       ],
@@ -1836,9 +1846,9 @@
       ]
     },
     "node_modules/@node-datachannel/linux-arm64-musl": {
-      "version": "0.33.1",
-      "resolved": "https://registry.npmjs.org/@node-datachannel/linux-arm64-musl/-/linux-arm64-musl-0.33.1.tgz",
-      "integrity": "sha512-MGtNFlIZ5b9sRBDFD3xS3oAhmAxJyEDrrhuUUEtR4Z4boSGOIzg0IiE5YQalmG7XgpMe0cxigBBTJitDczYyNQ==",
+      "version": "0.33.2",
+      "resolved": "https://registry.npmjs.org/@node-datachannel/linux-arm64-musl/-/linux-arm64-musl-0.33.2.tgz",
+      "integrity": "sha512-16o3Ny5hbxTTjDmhsZog/t7p2tRP6s/Oa/V9kKzZfiGlCqvxxCE4ACOWw/MWHOhN0xI9/63IIRfrrnQnPxjK8g==",
       "cpu": [
         "arm64"
       ],
@@ -1849,9 +1859,9 @@
       ]
     },
     "node_modules/@node-datachannel/linux-x64-gnu": {
-      "version": "0.33.1",
-      "resolved": "https://registry.npmjs.org/@node-datachannel/linux-x64-gnu/-/linux-x64-gnu-0.33.1.tgz",
-      "integrity": "sha512-0mTxq+0fYatoQ/7y9uMLDSRbnb0/Vrrl1Fhsuys8PfB06ft3IA8+6/qdFgRriHbCNkCkB3mSvWEIjCVjXuPr1A==",
+      "version": "0.33.2",
+      "resolved": "https://registry.npmjs.org/@node-datachannel/linux-x64-gnu/-/linux-x64-gnu-0.33.2.tgz",
+      "integrity": "sha512-grLRAbZgSIX8nmObciblyCmnevDCst0snhV+z1fvDmUlzXIVXeDmv6lEzAaWs3KRleagqwSsFg5d1td1bwMT9w==",
       "cpu": [
         "x64"
       ],
@@ -1862,9 +1872,9 @@
       ]
     },
     "node_modules/@node-datachannel/linux-x64-musl": {
-      "version": "0.33.1",
-      "resolved": "https://registry.npmjs.org/@node-datachannel/linux-x64-musl/-/linux-x64-musl-0.33.1.tgz",
-      "integrity": "sha512-LSIdM/tpdwy8d+pN7Vj5Dd4kU3vtdh1PKzz8MYPEPKpv2If5gBydA9pvmGDldiyn07Ijj1TrIQhV+1ozGBm0dw==",
+      "version": "0.33.2",
+      "resolved": "https://registry.npmjs.org/@node-datachannel/linux-x64-musl/-/linux-x64-musl-0.33.2.tgz",
+      "integrity": "sha512-PlpgvYjo+gmBhIkRFaZWIhCF335FMTJmCpl+FVa4XliEgyOqD+cvjQPWcbnlrA2Jd+QnLiZt+NxT7nv4QXpoiQ==",
       "cpu": [
         "x64"
       ],
@@ -1875,9 +1885,9 @@
       ]
     },
     "node_modules/@node-datachannel/win32-arm64-msvc": {
-      "version": "0.33.1",
-      "resolved": "https://registry.npmjs.org/@node-datachannel/win32-arm64-msvc/-/win32-arm64-msvc-0.33.1.tgz",
-      "integrity": "sha512-uERR6Zz3wqLnOhBe1YRFodFSD9c7N3aM2Upe/z7miR7F8sprLr00+SkrTXZ+RayW8BN+xDtZRKFYYROvuJy/ug==",
+      "version": "0.33.2",
+      "resolved": "https://registry.npmjs.org/@node-datachannel/win32-arm64-msvc/-/win32-arm64-msvc-0.33.2.tgz",
+      "integrity": "sha512-8NpHkm7R8EY0jHGHOXdK7K0wjWY34PJ+PJY++2VDHTAtXGazNm28zcnVE/4IU0N26YGdCDSSWat3OO3W6nwoRw==",
       "cpu": [
         "arm64"
       ],
@@ -1888,9 +1898,9 @@
       ]
     },
     "node_modules/@node-datachannel/win32-x64-msvc": {
-      "version": "0.33.1",
-      "resolved": "https://registry.npmjs.org/@node-datachannel/win32-x64-msvc/-/win32-x64-msvc-0.33.1.tgz",
-      "integrity": "sha512-i5c3t+hDz6oNcen8aQZetxtAfYnNeUEND67oJrnAL8qQFzaRv6wKO5Q7G1vpjzQUyC54xe6s4oD8uuVo2sKPzA==",
+      "version": "0.33.2",
+      "resolved": "https://registry.npmjs.org/@node-datachannel/win32-x64-msvc/-/win32-x64-msvc-0.33.2.tgz",
+      "integrity": "sha512-aLk0O/M1JNVpzxx4RVBXMJTMlpswE04Cz5baayKwuEN+qk9hO6DSJgYMR6Wq9a5zGYAmvLFlOg+LsePyXkWliA==",
       "cpu": [
         "x64"
       ],
@@ -6370,9 +6380,9 @@
       }
     },
     "node_modules/qs": {
-      "version": "6.15.3",
-      "resolved": "https://registry.npmjs.org/qs/-/qs-6.15.3.tgz",
-      "integrity": "sha512-O9gl3zCl5h5blw1KGUzQKhA5oUXSl8rwUIM5o0S3nCXMliSvy5Dzx7/DJcI+SwgICv+IneSZwhBh1oSyEHA71A==",
+      "version": "6.16.0",
+      "resolved": "https://registry.npmjs.org/qs/-/qs-6.16.0.tgz",
+      "integrity": "sha512-h6fhOIaRrID2CbEY2fqs+7t+UXZo+MLAnU5gRIq85uFtdiUPCdsApMlHhXogKVM4HM2DVbIjGNTTYH2OcmP1vA==",
       "license": "BSD-3-Clause",
       "dependencies": {
         "es-define-property": "^1.0.1",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "omnius",
-  "version": "1.0.651",
+  "version": "1.0.653",
   "description": "AI coding agent powered by open-source models (Ollama/vLLM) — interactive TUI with agentic tool-calling loop",
   "type": "module",
   "main": "./dist/library.js",