omnius 1.0.680 → 1.0.682

package/dist/update-worker.js

@@ -291370,6 +291370,33 @@ var MANAGED_ASR_VENV = join4(homedir5(), ".omnius", "runtimes", "asr", ".venv-wh
 var MANAGED_TRANSCRIBE_CLI_DIR = join4(homedir5(), ".omnius", "runtimes", "asr", "transcribe-cli-node");
 var YT_DLP_VENV = join4(homedir5(), ".omnius", "runtimes", "media-tools", ".venv-ytdlp");
 
+// packages/execution/dist/tools/document.js
+var DEFAULT_MAX_DOCUMENT_BYTES = 8 * 1024 * 1024;
+var MAX_ZIP_EXPANDED_BYTES = 16 * 1024 * 1024;
+var MAX_ZIP_ENTRY_BYTES = 4 * 1024 * 1024;
+
+// packages/execution/dist/tools/safe-image-edit.js
+var MAX_INPUT_BYTES = 25 * 1024 * 1024;
+var MAX_OUTPUT_BYTES = 30 * 1024 * 1024;
+
+// packages/execution/dist/tools/audio-edit.js
+init_process_async();
+var AUDIO_EDIT_LIMITS = {
+  maxInputFiles: 16,
+  maxMixInputs: 8,
+  maxSegments: 32,
+  maxInputBytes: 512 * 1024 * 1024,
+  maxTotalInputBytes: 1024 * 1024 * 1024,
+  maxInputDurationSec: 2 * 60 * 60,
+  maxTotalInputDurationSec: 4 * 60 * 60,
+  maxOutputDurationSec: 2 * 60 * 60,
+  maxOutputBytes: 512 * 1024 * 1024,
+  maxSilenceSegmentSec: 5 * 60,
+  maxTotalSilenceSec: 10 * 60,
+  maxDelaySec: 10 * 60,
+  processTimeoutMs: 10 * 60 * 1e3
+};
+
 // packages/execution/dist/tools/safe-math-eval.js
 var CONSTANTS = {
   "math.pi": Math.PI,
@@ -293091,7 +293118,7 @@ var DEFAULT_SPONSOR_MEDIA_LIMITS = {
 
 // packages/execution/dist/tools/pdf-document.js
 init_process_async();
-var DEFAULT_MAX_DOCUMENT_BYTES = 500 * 1024 * 1024;
+var DEFAULT_MAX_DOCUMENT_BYTES2 = 500 * 1024 * 1024;
 
 // packages/execution/dist/index.js
 init_vision();

package/docs/DISCOVERY.json

@@ -25220,11 +25220,11 @@
         },
         {
           "signature": "/remind <when> <message>",
-          "description": "Set a scoped minimal reminder; a due time is required"
+          "description": "Set a scoped person notification; a due time is required"
         },
         {
           "signature": "/remind in 30m <message>",
-          "description": "Set a scoped minimal reminder with a relative due time"
+          "description": "Set a scoped person notification with a relative due time"
         },
         {
           "signature": "/reminders",
@@ -36648,6 +36648,62 @@
         }
       ]
     },
+    {
+      "id": "tool.audio-edit",
+      "kind": "tool",
+      "title": "Audio Edit",
+      "summary": "audio_edit is a directly callable Omnius tool.",
+      "aliases": [
+        "audio_edit"
+      ],
+      "keywords": [
+        "tool",
+        "audio",
+        "edit"
+      ],
+      "maturity": "stable",
+      "layer": "execution",
+      "audiences": [
+        "coding-agent",
+        "integrator",
+        "service-agent"
+      ],
+      "use_when": [
+        "The caller needs this isolated operation and live metadata confirms direct-call availability"
+      ],
+      "avoid_when": [
+        "The live registry reports the tool unavailable or the caller lacks its required scope"
+      ],
+      "interfaces": [
+        {
+          "type": "rest-schema",
+          "target": "/v1/tools/audio_edit"
+        },
+        {
+          "type": "rest-call",
+          "target": "/v1/tools/audio_edit/call"
+        }
+      ],
+      "references": [
+        {
+          "type": "source",
+          "target": "packages/execution/src/tools/audio-edit.ts",
+          "relation": "implementation"
+        }
+      ],
+      "direct_callable": true,
+      "live_metadata": "GET /v1/tools/audio_edit",
+      "source_of_truth": [
+        "packages/execution/src/tools/audio-edit.ts",
+        "GET /v1/tools/audio_edit"
+      ],
+      "verification": [
+        {
+          "check": "Inspect GET /v1/tools/audio_edit before use",
+          "expected": "Schema, security, exposure, and availability match the intended invocation"
+        }
+      ]
+    },
     {
       "id": "tool.audio-playback",
       "kind": "tool",
@@ -37710,6 +37766,61 @@
         }
       ]
     },
+    {
+      "id": "tool.document",
+      "kind": "tool",
+      "title": "Document",
+      "summary": "document is a directly callable Omnius tool.",
+      "aliases": [
+        "document"
+      ],
+      "keywords": [
+        "tool",
+        "document"
+      ],
+      "maturity": "stable",
+      "layer": "execution",
+      "audiences": [
+        "coding-agent",
+        "integrator",
+        "service-agent"
+      ],
+      "use_when": [
+        "The caller needs this isolated operation and live metadata confirms direct-call availability"
+      ],
+      "avoid_when": [
+        "The live registry reports the tool unavailable or the caller lacks its required scope"
+      ],
+      "interfaces": [
+        {
+          "type": "rest-schema",
+          "target": "/v1/tools/document"
+        },
+        {
+          "type": "rest-call",
+          "target": "/v1/tools/document/call"
+        }
+      ],
+      "references": [
+        {
+          "type": "source",
+          "target": "packages/execution/src/tools/document.ts",
+          "relation": "implementation"
+        }
+      ],
+      "direct_callable": true,
+      "live_metadata": "GET /v1/tools/document",
+      "source_of_truth": [
+        "packages/execution/src/tools/document.ts",
+        "GET /v1/tools/document"
+      ],
+      "verification": [
+        {
+          "check": "Inspect GET /v1/tools/document before use",
+          "expected": "Schema, security, exposure, and availability match the intended invocation"
+        }
+      ]
+    },
     {
       "id": "tool.embedding-store",
       "kind": "tool",
@@ -41445,6 +41556,63 @@
         }
       ]
     },
+    {
+      "id": "tool.safe-image-edit",
+      "kind": "tool",
+      "title": "Safe Image Edit",
+      "summary": "safe_image_edit is a directly callable Omnius tool.",
+      "aliases": [
+        "safe_image_edit"
+      ],
+      "keywords": [
+        "tool",
+        "safe",
+        "image",
+        "edit"
+      ],
+      "maturity": "stable",
+      "layer": "execution",
+      "audiences": [
+        "coding-agent",
+        "integrator",
+        "service-agent"
+      ],
+      "use_when": [
+        "The caller needs this isolated operation and live metadata confirms direct-call availability"
+      ],
+      "avoid_when": [
+        "The live registry reports the tool unavailable or the caller lacks its required scope"
+      ],
+      "interfaces": [
+        {
+          "type": "rest-schema",
+          "target": "/v1/tools/safe_image_edit"
+        },
+        {
+          "type": "rest-call",
+          "target": "/v1/tools/safe_image_edit/call"
+        }
+      ],
+      "references": [
+        {
+          "type": "source",
+          "target": "packages/execution/src/tools/safe-image-edit.ts",
+          "relation": "implementation"
+        }
+      ],
+      "direct_callable": true,
+      "live_metadata": "GET /v1/tools/safe_image_edit",
+      "source_of_truth": [
+        "packages/execution/src/tools/safe-image-edit.ts",
+        "GET /v1/tools/safe_image_edit"
+      ],
+      "verification": [
+        {
+          "check": "Inspect GET /v1/tools/safe_image_edit before use",
+          "expected": "Schema, security, exposure, and availability match the intended invocation"
+        }
+      ]
+    },
     {
       "id": "tool.safe-python",
       "kind": "tool",

package/docs/DISCOVERY.md

@@ -657,6 +657,7 @@ Daemon equivalents are `GET /v1/discovery/bootstrap`, `GET /v1/discovery?q=<inte
 | `tool.asr-listen` | Asr Listen | asr_listen is a directly callable Omnius tool. |
 | `tool.audio-analyze` | Audio Analyze | audio_analyze is a directly callable Omnius tool. |
 | `tool.audio-capture` | Audio Capture | audio_capture is a directly callable Omnius tool. |
+| `tool.audio-edit` | Audio Edit | audio_edit is a directly callable Omnius tool. |
 | `tool.audio-playback` | Audio Playback | audio_playback is a directly callable Omnius tool. |
 | `tool.autoresearch` | Autoresearch | autoresearch is a directly callable Omnius tool. |
 | `tool.av-comprehend` | Av Comprehend | av_comprehend is a directly callable Omnius tool. |
@@ -676,6 +677,7 @@ Daemon equivalents are `GET /v1/discovery/bootstrap`, `GET /v1/discovery?q=<inte
 | `tool.desktop-click` | Desktop Click | desktop_click is a directly callable Omnius tool. |
 | `tool.desktop-describe` | Desktop Describe | desktop_describe is a directly callable Omnius tool. |
 | `tool.diagnostic` | Diagnostic | diagnostic is a directly callable Omnius tool. |
+| `tool.document` | Document | document is a directly callable Omnius tool. |
 | `tool.embedding-store` | Embedding Store | embedding_store is a directly callable Omnius tool. |
 | `tool.enter-worktree` | Enter Worktree | enter_worktree is a directly callable Omnius tool. |
 | `tool.exit-worktree` | Exit Worktree | exit_worktree is a directly callable Omnius tool. |
@@ -742,6 +744,7 @@ Daemon equivalents are `GET /v1/discovery/bootstrap`, `GET /v1/discovery?q=<inte
 | `tool.repl-exec` | Repl Exec | repl_exec is a directly callable Omnius tool. |
 | `tool.replay-with-intervention` | Replay With Intervention | replay_with_intervention is a directly callable Omnius tool. |
 | `tool.repo-map` | Repo Map | repo_map is a directly callable Omnius tool. |
+| `tool.safe-image-edit` | Safe Image Edit | safe_image_edit is a directly callable Omnius tool. |
 | `tool.safe-python` | Safe Python | safe_python is a directly callable Omnius tool. |
 | `tool.scheduler` | Scheduler | scheduler is a directly callable Omnius tool. |
 | `tool.screenshot` | Screenshot | screenshot is a directly callable Omnius tool. |

package/docs/guides/telegram.md

@@ -29,7 +29,7 @@ The Telegram bridge is a scoped public ingress and egress layer. It supports adm
 | Public group | scoped public intake | only if Telegram grants send rights | creative/public policy | group plus sender |
 | No send rights | observed incoming messages only | no | no outbound retry loop | failure noted for that chat |
 
-If Telegram returns a send failure, store the raw failed tool output in the conversation trajectory. The agent should reason from the observed failure and avoid repeated sends to a chat where it lacks rights.
+If Telegram returns a permanent write refusal, the bridge opens a durable read-only circuit for that chat. Later messages still enter scoped history, but they do not start reply inference. A time-gated `getChatMember` permission check must confirm restored text-write capability before reply inference resumes.
 
 ## Scope Model
 
@@ -64,7 +64,11 @@ Preference writes require an explicit tool decision. They are not selected by re
 
 ## Failure Feedback
 
-Telegram platform and tool failures should be passed back to the agent loop as raw observed output. Do not hardcode behavior around a specific Telegram error string. The model should see the observed failure and choose a corrected action.
+Telegram platform and tool failures remain raw trajectory evidence when the model can choose a corrected action. Permanent transport capability failures are different. The host must stop work that cannot be delivered.
+
+The write-capability circuit classifies only caught `Error` objects and structured Bot API responses. It never scans participant text. `CHAT_WRITE_FORBIDDEN`, bot removal/blocking, missing send rights, and an unavailable chat open the chat-scoped circuit. A closed topic opens a topic-scoped circuit. These checks establish transport capability only; they do not classify conversational intent or decide whether a message deserves a reply.
+
+Typing begins only after the relationship router returns a valid, input-bound `should_reply=true` decision. If the first typing action returns a permanent write refusal, Omnius does not retry without the topic, does not start a heartbeat, and does not generate the reply. Later read-only intake does not invoke the attention router.
 
 Failure feedback should include:
 
@@ -74,7 +78,47 @@ Failure feedback should include:
 - whether the failure happened before or after content generation
 - current chat/user preference scope
 
-The feedback is ordinary trajectory evidence. It should not be converted into reward hacks, hidden classifiers, or error-specific branches.
+Other feedback is ordinary trajectory evidence. It should not be converted into reward hacks or hidden conversational classifiers.
+
+## Scheduled Reminders
+
+Telegram reminders have two explicit outcomes:
+
+- `person_notification` stores text and sends that text to the scoped person or chat when due.
+- `agent_action` stores a task description, starts a new tool-capable run when due, and lets the host deliver the verified final result to the stored Telegram scope.
+
+The legacy names `minimal` and `action` remain accepted for existing data. The
+model must select the outcome from the requested future effect. “Remind me to
+read the news at 09:00” is a person notification. “Get the news on topic X,
+validate it, summarize it, and send it every morning at 9” is an agent action
+with `repeat="daily"`, `time="09:00"`, and a complete `task_description`.
+
+The scheduler claims each occurrence with a durable lease. It renews the lease
+while the action runs. It increments `triggerCount` and advances recurrence only
+after verified task completion and a target delivery receipt. A crash, incomplete
+run, unavailable bridge, or failed send retains the occurrence and records
+bounded exponential backoff. The host owns result delivery. An action task must
+not send a second copy or create another reminder as a delivery workaround.
+
+## Latency Adaptation
+
+Telegram measures the full interval from intake receipt to a durable delivery receipt. Each chat/model pair starts with the full profile. A turn beyond the hard latency limit trials one leaner profile on the next real turn. Omnius does not issue duplicate inference to race profiles.
+
+The normal router is a dependent decision cascade. Its first frame emits only route, reply authorization, actor role, reply basis, and cited evidence. A chat decision can proceed immediately. An action decision expands inside the task runner, where mission, effects, verification, and delivery are tracked. Durable peer-output classification is exposed only when the host packet contains repeated same-actor bot evidence. A strict retry uses the same small authorization frame and cannot create preferences, pattern memory, stimulation state, or expected-outcome side decisions.
+
+This keeps ordinary human chat replies within a 320-token router ceiling. The 420-token recovery ceiling exists only for an invalid core contract. The larger contract is reserved for the evidence-gated repeated peer-output branch. More output capacity does not force generation, but the common path does not expose fields that the model does not need.
+
+The full, balanced, and lean profiles preserve the typed relationship decision, action routing, evidence checks, and final Telegram receipt. Leaner chat profiles reduce optional context duplication and output ceilings. A failed typed contract or delivery receipt immediately returns the session to a richer profile. A leaner profile remains selected only after enough receipt-valid samples show no material quality-rate loss and at least a 10 percent median latency improvement.
+
+Tuneables:
+
+| Variable | Default | Purpose |
+| --- | ---: | --- |
+| `OMNIUS_TG_LATENCY_TARGET_MS` | `30000` | Desired end-to-end Telegram reply time |
+| `OMNIUS_TG_LATENCY_HARD_MS` | `60000` | Latency that trials the next leaner profile |
+| `OMNIUS_TG_LATENCY_MIN_SAMPLES` | `3` | Valid samples required before retaining a challenger |
+| `OMNIUS_TG_LATENCY_SAMPLE_WINDOW` | `24` | Per-profile rolling comparison window |
+| `OMNIUS_TG_WRITE_CAPABILITY_RECHECK_MS` | `300000` | Minimum interval between read-only permission probes |
 
 ## Public Creative Tools
 
@@ -86,6 +130,39 @@ Public users can create files, images, and audio through scoped creative workspa
 
 These tools should not grant arbitrary filesystem access.
 
+Every public artifact is retained as an encrypted per-chat object and bound to
+a host-signed capability containing its logical path, byte length, content
+hash, detected MIME type, source tool, expiry, delivery allowance, and review
+receipts. The model cannot mint that capability. Telegram delivery verifies
+the decrypted bytes against it and uses a durable, idempotent delivery job with
+a lease, bounded backoff, and the returned Telegram message ID.
+
+### Scoped create, edit, review, deliver loop
+
+| Artifact | Typed tool | Supported work | Required review before delivery |
+| --- | --- | --- | --- |
+| Raster image | `safe_image_edit` | inspect, crop, resize, upscale/downscale, mask, composite, combine, convert | `telegram_image_analyze detail='full'` on the exact output |
+| Audio | `audio_edit` | inspect, trim, concatenate, typed splice and silence, mix, normalize, fade, convert, resample | `audio_analyze` for sound/music or `transcribe_file` for speech |
+| PDF or DOCX | `document` | create from heading/paragraph/bullet/page-break blocks, inspect, hash-guarded revise | `document action='inspect'` on the exact output |
+
+These tools do not accept shell commands, raw FFmpeg filters, ImageMagick
+expressions, raw PDF/OOXML bytes, HTML, macros, or paths outside the chat
+workspace. Image and audio edits never overwrite an artifact. Document
+revision requires `overwrite=true` and the `expected_hash` from the latest
+receipt. A changed output receives a new content hash, so old review evidence
+cannot authorize delivery of new bytes.
+
+The image tool uses fixed ImageMagick argument vectors. The audio tool uses
+fixed FFmpeg and FFprobe argument vectors. Both require those host programs to
+be installed. The dependency-free document tool creates real PDF 1.4 and
+OOXML DOCX files. PDF text uses the built-in WinAnsi font set; use DOCX for
+full Unicode. DOCX pagination is explicitly reported as an estimate.
+
+The agent must inspect the returned receipt, compare the reviewed evidence to
+the user request, and create another output when the evidence exposes a gap.
+Automatic attachment waits for the matching signed review receipt. Public
+edits also use a separate per-user, per-chat hourly quota.
+
 ## Media Intake
 
 Photos, documents, audio, video, and voice messages use a two-stage intake:
@@ -127,4 +204,4 @@ Acquired public media remains blocked from delivery and `task_complete` until re
 
 ## Verification
 
-Relevant focused tests include `telegram-media-admission.test.ts`, `telegram-media-cache.test.ts`, `telegram-media-evidence.test.ts`, `telegram-public-media.test.ts`, `telegram-creative-tools.test.ts`, Telegram delivery preferences, inference error suppression, reflection corpus, and Bot API compatibility tests.
+Relevant focused tests include `telegram-media-admission.test.ts`, `telegram-media-cache.test.ts`, `telegram-media-evidence.test.ts`, `telegram-public-media.test.ts`, `telegram-artifact-ledger.test.ts`, `telegram-creative-tools.test.ts`, `safe-image-edit.test.ts`, `audio-edit.test.ts`, `document.test.ts`, Telegram delivery preferences, inference error suppression, reflection corpus, and Bot API compatibility tests.

package/docs/reference/configuration.md

@@ -18,6 +18,11 @@ Configuration is layered from environment, global user settings, project setting
 | `OMNIUS_DAEMON` | Start in daemon mode when set to `1` |
 | `OMNIUS_FORCE_NO_THINK` | Force `think: false` for Qwen-style backends |
 | `OMNIUS_THINK_AUTO` | Enable opt-in automatic thinking mode trigger |
+| `OMNIUS_TG_LATENCY_TARGET_MS` | Desired end-to-end Telegram reply time (default `30000`) |
+| `OMNIUS_TG_LATENCY_HARD_MS` | Trial a leaner Telegram chat profile after this total latency (default `60000`) |
+| `OMNIUS_TG_LATENCY_MIN_SAMPLES` | Receipt-valid samples required to retain a leaner profile (default `3`) |
+| `OMNIUS_TG_LATENCY_SAMPLE_WINDOW` | Per-profile rolling Telegram latency sample count (default `24`) |
+| `OMNIUS_TG_WRITE_CAPABILITY_RECHECK_MS` | Minimum read-only Telegram permission-probe interval (default `300000`, minimum `15000`) |
 | `OMNIUS_ASR_CUDA_VISIBLE_DEVICES` | Exact CUDA GPU index or UUID used for managed ASR activation; multi-device masks are rejected (Jetson's integrated GPU is `0`) |
 | `OMNIUS_VIBEVOICE_PYTHON` | Host Python used to create the VibeVoice venv; its CUDA-enabled Torch is inherited with `--system-site-packages` |
 | `OMNIUS_VIBEVOICE_ATTN` | VibeVoice attention implementation (`sdpa` by default; use a host-supported implementation) |

package/docs/reference/slash-commands.md

@@ -1093,8 +1093,8 @@ List scoped TUI reminders
 Signatures:
 
 - `/reminder [list\|all]` - List scoped TUI reminders
-- `/remind <when> <message>` - Set a scoped minimal reminder; a due time is required
-- `/remind in 30m <message>` - Set a scoped minimal reminder with a relative due time
+- `/remind <when> <message>` - Set a scoped person notification; a due time is required
+- `/remind in 30m <message>` - Set a scoped person notification with a relative due time
 - `/reminders` - Alias for /reminder
 
 ### /scheduler

package/npm-shrinkwrap.json

@@ -1,12 +1,12 @@
 {
   "name": "omnius",
-  "version": "1.0.680",
+  "version": "1.0.682",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "omnius",
-      "version": "1.0.680",
+      "version": "1.0.682",
       "bundleDependencies": [
         "image-to-ascii"
       ],