omnius 1.0.692 → 1.0.694

package/docs/DISCOVERY.json

@@ -32842,7 +32842,7 @@
       "id": "guide.work-orders-runtime-health-remediation-tracker-uppercase",
       "kind": "guide",
       "title": "Runtime Health Remediation Master Tracker",
-      "summary": "Authority: canonical granular tracker for RHR-2026-09-02 Checked-item rule: code, focused tests, and named evidence must all exist Last reconciled: 2026-09-02",
+      "summary": "Authority: canonical granular tracker for RHR-2026-09-02 Checked-item rule: code, focused tests, and named evidence must all exist Last reconciled: 2026-09-04",
       "keywords": [
         "work",
         "orders",
@@ -33902,6 +33902,86 @@
         }
       ]
     },
+    {
+      "id": "guide.work-orders-runtime-health-remediation-wo-23-long-horizon-control-plane-reconciliation-uppercase",
+      "kind": "guide",
+      "title": "WO-23: Long-horizon control-plane reconciliation",
+      "summary": "The restored telegramtest run tui-3869250-mtlvp324-1788468819792-1 continued a large pentest-tooling frontend task across a process restart. It made real source mutations and advanced from the first implementation group to todo-p2a. The run was not dead and its model context had ample nominal capacity.",
+      "keywords": [
+        "work",
+        "orders",
+        "runtime",
+        "health",
+        "remediation",
+        "WO",
+        "23",
+        "long",
+        "horizon",
+        "control",
+        "plane",
+        "reconciliation",
+        "md"
+      ],
+      "maturity": "internal",
+      "audiences": [
+        "maintainer",
+        "large-context-agent"
+      ],
+      "layer": "documentation",
+      "interfaces": [
+        {
+          "type": "file",
+          "target": "docs/work-orders/runtime-health-remediation/WO-23-long-horizon-control-plane-reconciliation.md"
+        }
+      ],
+      "references": [
+        {
+          "type": "documentation",
+          "target": "docs/work-orders/runtime-health-remediation/WO-23-long-horizon-control-plane-reconciliation.md",
+          "relation": "canonical-artifact"
+        }
+      ]
+    },
+    {
+      "id": "guide.work-orders-runtime-health-remediation-wo-24-telegram-logical-request-variant-identity-uppercase",
+      "kind": "guide",
+      "title": "WO-24: Telegram logical request variant identity",
+      "summary": "Telegram follow-up requests could finish a streamed inference with no visible contract and then fail their one unary compatibility request with HTTP 409: logicalrequestconflict. The observed stream used all 300 completion tokens and ended with finish=length.",
+      "keywords": [
+        "work",
+        "orders",
+        "runtime",
+        "health",
+        "remediation",
+        "WO",
+        "24",
+        "telegram",
+        "logical",
+        "request",
+        "variant",
+        "identity",
+        "md"
+      ],
+      "maturity": "internal",
+      "audiences": [
+        "maintainer",
+        "large-context-agent"
+      ],
+      "layer": "documentation",
+      "interfaces": [
+        {
+          "type": "file",
+          "target": "docs/work-orders/runtime-health-remediation/WO-24-telegram-logical-request-variant-identity.md"
+        }
+      ],
+      "references": [
+        {
+          "type": "documentation",
+          "target": "docs/work-orders/runtime-health-remediation/WO-24-telegram-logical-request-variant-identity.md",
+          "relation": "canonical-artifact"
+        }
+      ]
+    },
     {
       "id": "guide.work-orders-telegram-dmn-wo-22-dmn-outreach-and-learning-uppercase",
       "kind": "guide",

package/docs/DISCOVERY.md

@@ -533,7 +533,7 @@ Daemon equivalents are `GET /v1/discovery/bootstrap`, `GET /v1/discovery?q=<inte
 | `guide.work-orders-runtime-health-remediation-live-telegram-log-review-2026-09-03-uppercase` | Live Telegram Log Review, 2026-09-03 | This review is read-only. It examines the persisted Telegram conversation and intake lifecycle records in /home/roko/Documents/Projects/Adjacent/telegramtest/.omnius. The running global Omnius package reports version 1.0.687. This means the observations describe the deployed pre-publication runtime, not the newer source commits on this repository's main bran |
 | `guide.work-orders-runtime-health-remediation-readme-uppercase` | Runtime Health Remediation Program | Program ID: RHR-2026-09-02 Status: active, implementation authorized Owner: Omnius runtime, orchestration, execution, memory, and Telegram packages External dependency: /home/roko/Desktop/ollama-unify Last reconciled: 2026-09-03 |
 | `guide.work-orders-runtime-health-remediation-traceability-uppercase` | Runtime Health Remediation Traceability Matrix | Every completed row links to a deterministic test or operational receipt. A commit hash alone is not proof. A model statement is not proof. Live logs may support a canary only after the hermetic and deterministic gates pass. A status that names pending rollout or live work is intentionally not a completion claim. |
-| `guide.work-orders-runtime-health-remediation-tracker-uppercase` | Runtime Health Remediation Master Tracker | Authority: canonical granular tracker for RHR-2026-09-02 Checked-item rule: code, focused tests, and named evidence must all exist Last reconciled: 2026-09-02 |
+| `guide.work-orders-runtime-health-remediation-tracker-uppercase` | Runtime Health Remediation Master Tracker | Authority: canonical granular tracker for RHR-2026-09-02 Checked-item rule: code, focused tests, and named evidence must all exist Last reconciled: 2026-09-04 |
 | `guide.work-orders-runtime-health-remediation-wo-00-hermetic-test-boundary-uppercase` | WO-00: Hermetic Test Boundary | Status: deterministic acceptance complete Evidence: inference network inventory and audit receipt for commit 8708e449 Risk: high, because current unit tests can contact the live broker Depends on: none |
 | `guide.work-orders-runtime-health-remediation-wo-00-inference-network-inventory-uppercase` | WO-00 Inference Network Inventory | This document describes the machine-checked boundary for production inference clients. The canonical inventory is test-support/inference-network-registry.ts. |
 | `guide.work-orders-runtime-health-remediation-wo-01-inference-pressure-scheduler-uppercase` | WO-01: Foreground and Background Inference Pressure Scheduler | Status: deterministic acceptance complete Evidence: production Telegram cognition integration and controlled-load foreground exclusion Risk: critical, because background work currently competes with user work Depends on: WO-00 |
@@ -561,6 +561,8 @@ Daemon equivalents are `GET /v1/discovery/bootstrap`, `GET /v1/discovery?q=<inte
 | `guide.work-orders-runtime-health-remediation-wo-20-exact-session-continuation-uppercase` | WO-20: Exact session continuation across exit and restart | On 2026-09-03, the telegramtest TUI displayed the latest pentest task during startup, but the first restored model context combined a completed breach.py handoff with an unrelated, older page.tsx todo tree. The user then entered continue, and Omnius continued the stale tree instead of the task that was active before /quit. |
 | `guide.work-orders-runtime-health-remediation-wo-21-task-convergence-and-todo-scope-uppercase` | WO-21: Task convergence and todo scope | On 2026-09-03, a user reported that Omnius remained at task 2/8 for about 40 turns. The report did not include a screenshot or run artifact, so the exact label remains unverified. Omnius has two similar counters: |
 | `guide.work-orders-runtime-health-remediation-wo-22-autocomplete-footer-geometry-uppercase` | WO-22: Autocomplete Footer Geometry Integrity | Scope: CLI TUI footer, DirectInput redraw scheduling, active content writes |
+| `guide.work-orders-runtime-health-remediation-wo-23-long-horizon-control-plane-reconciliation-uppercase` | WO-23: Long-horizon control-plane reconciliation | The restored telegramtest run tui-3869250-mtlvp324-1788468819792-1 continued a large pentest-tooling frontend task across a process restart. It made real source mutations and advanced from the first implementation group to todo-p2a. The run was not dead and its model context had ample nominal capacity. |
+| `guide.work-orders-runtime-health-remediation-wo-24-telegram-logical-request-variant-identity-uppercase` | WO-24: Telegram logical request variant identity | Telegram follow-up requests could finish a streamed inference with no visible contract and then fail their one unary compatibility request with HTTP 409: logicalrequestconflict. The observed stream used all 300 completion tokens and ended with finish=length. |
 | `guide.work-orders-telegram-dmn-wo-22-dmn-outreach-and-learning-uppercase` | WO-22: DMN outreach, DM sharing, and outcome learning | On 2026-09-03 at 17:07 PDT the bot posted in the OMNIUS group without being addressed. The operator asked whether this was self-induced reflection. |
 | `guide.work-orders-telegram-dropbear-context-rca-workorder` | Telegram Dropbear Context Engineering RCA Work Order | Observed run: /home/roko/Documents/Projects/Adjacent/telegramtest/.omnius, run id 1782873796963-i5r7mv. |
 | `guide.work-orders-wo-am-gaps-uppercase` | Associative Memory Gap Work Orders | Generated: 2026-04-13 Source: Deep audit of multimodal associative memory systems Status: READY FOR IMPLEMENTATION |

package/docs/work-orders/runtime-health-remediation/TRACKER.md

@@ -2,7 +2,7 @@
 
 **Authority:** canonical granular tracker for RHR-2026-09-02
 **Checked-item rule:** code, focused tests, and named evidence must all exist
-**Last reconciled:** 2026-09-02
+**Last reconciled:** 2026-09-04
 
 ## Phase 0: durable program boundary
 
@@ -254,6 +254,40 @@ deterministically repaired P0 or P1 defect.
   publish-tree changes.
 - [x] Record WO-19 acceptance evidence in `WO-19-CLEAN-BUILD-EVIDENCE.md`.
 
+## WO-23: long-horizon control-plane reconciliation
+
+- [x] Reconcile typed failure outcomes across retry, workboard, and durable
+  failure memory.
+- [x] Project all unresolved todo leaves and active failure obligations into
+  integration closure.
+- [x] Keep lexical discovery candidates advisory until evidence adopts them.
+- [x] Compact oversized raw discovery independently of total provider context
+  capacity and restore validated canonical receipt handles.
+- [x] Activate nested Git tracking only from explicit in-workspace target paths
+  and reject ambiguous or escaped repositories.
+- [x] Consolidate Telegram `edited_message` revisions before UI output,
+  cognition, attention inference, or queue admission.
+- [x] Pass deterministic regression tests, affected typechecks, and the
+  workspace build.
+- [x] Commit and push the scoped repair to `main`.
+
+## WO-24: Telegram logical request variant identity
+
+- [x] Correlate empty Telegram streams with broker conflict receipts.
+- [x] Confirm the broker correctly binds one logical ID to one exact wire
+  contract.
+- [x] Give stream-to-unary compatibility fallback a distinct stable ID.
+- [x] Give `/v1`-to-native empty recovery a distinct stable ID.
+- [x] Give changed `/v1` recovery bodies a distinct stable ID.
+- [x] Preserve the original ID across byte-identical queue retries.
+- [x] Route Ollama follow-up decisions through native chat with `think:false`.
+- [x] Raise the follow-up contract budget from 300 to 1,024 tokens.
+- [x] Add a broker-faithful 409 conflict regression harness.
+- [x] Pass backend, Telegram transport, observability, and Bot API suites.
+- [x] Pass affected package typechecks and the workspace build.
+- [ ] Run a token-generating live canary only after the mandatory accelerator
+  preflight identifies the requested endpoint, model, and GPU placement.
+
 ## Program completion gate
 
 - [x] All repository-controlled deterministic WO acceptance sections pass.

package/docs/work-orders/runtime-health-remediation/WO-23-long-horizon-control-plane-reconciliation.md

@@ -0,0 +1,154 @@
+# WO-23: Long-horizon control-plane reconciliation
+
+## Incident
+
+The restored `telegram_test` run
+`tui-3869250-mtlvp324-1788468819792-1` continued a large pentest-tooling
+frontend task across a process restart. It made real source mutations and
+advanced from the first implementation group to `todo-p2a`. The run was not
+dead and its model context had ample nominal capacity.
+
+The live artifacts nevertheless exposed contradictions that make long-horizon
+work slower and less trustworthy:
+
+- the workboard had 34 unresolved cards while integration closure reported
+  `ready`, no gaps, and no blockers;
+- successful corrective actions did not retire several failure cards;
+- todo leaf cards had no evidence even when their declared artifacts were
+  mutated and inspected;
+- restored historical discovery transactions occupied most of the model-visible
+  tool context;
+- a generic task word such as `left` promoted unrelated mesh paths into the
+  affected-path frontier;
+- Git progress stayed permanently disabled because the launch workspace was
+  not a repository even though mutations targeted a nested repository; and
+- repeated `edited_message` updates from a streaming peer bot were displayed
+  and admitted as repeated cognition before logical-input consolidation.
+
+This order repairs Omnius. It does not mutate the pentest project used as the
+field workload.
+
+## Evidence
+
+- Live debug index:
+  `/home/roko/Documents/Projects/Adjacent/telegram_test/.omnius/debug-library/runs/tui-3869250-mtlvp324-1788468819792-1/README.md`
+- Live workboard:
+  `/home/roko/Documents/Projects/Adjacent/telegram_test/.omnius/workboards/tui-3869250-mtlvp324-1788468819792-1/active.json`
+- Live Git projection:
+  `/home/roko/Documents/Projects/Adjacent/telegram_test/.omnius/git-progress/latest.json`
+- Live interruption lifecycle:
+  `/home/roko/Documents/Projects/Adjacent/telegram_test/.omnius/interruptions/tui-3869250-mtlvp324.json`
+- Canonical incident packet:
+  `/home/roko/.codex/attachments/a27b0a6c-c533-49d8-8a4c-818769e24453/pasted-text-1.txt`
+
+## Design invariants
+
+### Failure lifecycle
+
+- [x] Record a failure only after any inline permission retry reaches its final
+      outcome.
+- [x] Never persist a `workboardCardId` unless that card exists.
+- [x] Resolve failures from typed target and receipt evidence, not prose.
+- [x] Include receipt-observed paths when matching a corrective verifier.
+- [x] Retire or supersede the durable obligation when an in-memory failure
+      expires. Expiry is not verification.
+- [x] Surface failed reconciliation as bounded telemetry instead of swallowing
+      it silently.
+
+### Todo and completion truth
+
+- [x] Keep every active todo leaf in the authoritative workboard projection.
+      Apply limits only when rendering.
+- [x] Use canonical path fields for declared-artifact evidence predicates.
+- [x] Bind a mutation or verifier only to an explicit todo/card assignment or
+      an unambiguous normalized artifact overlap.
+- [x] Reject ambiguous todo evidence binding instead of selecting by prose.
+- [x] Give integration closure the current unresolved todo leaves and active
+      project failure obligations.
+- [x] Never render closure as `ready` while either authoritative set remains
+      unresolved.
+
+### Context and ontology
+
+- [x] Classify fused canonical task frames and operational work graphs as
+      working-set context even when they contain a nested current-goal section.
+- [x] Trigger consolidation from raw-discovery pressure independently of the
+      provider's total context capacity.
+- [x] Preserve or reconstruct validated receipt handles across restoration so
+      successful historical discovery does not require full raw transactions.
+- [x] Keep lexical candidate paths advisory.
+- [x] Put only explicit required artifacts, mutations, evidence targets, and
+      adopted claim paths in `affectedPaths`.
+- [x] A single generic task-token overlap must not create an affected path.
+
+### Nested Git progress
+
+- [x] Keep the launch workspace as the safety and `.omnius` state root.
+- [x] Discover Git roots only from canonical tool target or mutation paths.
+- [x] Never recursively select the first nested repository.
+- [x] Recover from an outer `not_repo` result when later typed path evidence
+      identifies one enclosing repository.
+- [x] Reject paths outside the workspace and conflicting repository evidence.
+- [x] Mark post-mutation discovery as late and do not fabricate a pre-mutation
+      clean baseline.
+
+### Telegram edit ingress
+
+- [x] Use `(chat_id, message_id)` as the logical input identity across Telegram
+      `message` and `edited_message` envelopes.
+- [x] Consolidate an edit before conversation observation, TUI `heard` output,
+      queue admission, or attention inference.
+- [x] Replace the queued payload with the newest edit and extend only the
+      bounded quiet window.
+- [x] An edit to an already active or settled peer-bot input must not start a
+      second cognition/reply run.
+- [x] Preserve the latest edited content as transport and conversation evidence.
+- [x] Do not add sender names, text patterns, or forced reply decisions.
+
+## Granular implementation checklist
+
+- [x] Add unresolved todo/failure inputs to `BuildIntegrationClosureInput`.
+- [x] Render bounded todo and failure proof gaps in the closure frontier.
+- [x] Add closure tests for open todos, active failures, and candidate-only
+      paths.
+- [x] Remove advisory candidates from authoritative `affectedPaths`.
+- [x] Add a discovery regression for `left sidebar` versus unrelated
+      `left_*` mesh assets.
+- [x] Correct fused-frame request-budget classification precedence.
+- [x] Correct the equivalent context-dump classification.
+- [x] Add fused-frame accounting tests.
+- [x] Include execution-receipt observed paths in target extraction.
+- [x] Make first observed failures card/store consistent.
+- [x] Reconcile expiry with durable cards without claiming verification.
+- [x] Add failure-resolution error telemetry.
+- [x] Remove the 20-leaf authority cap from todo mirroring.
+- [x] Normalize declared-artifact predicates as paths.
+- [x] Add an exact, ambiguity-safe todo evidence selector.
+- [x] Add todo evidence-binding tests.
+- [x] Add evidence-driven nested Git-root activation.
+- [x] Add nested/multiple/outside-root Git tests.
+- [x] Move edit consolidation before Telegram observation and ingress output.
+- [x] Add repeated peer-bot edit tests for history, queue, and router cardinality.
+- [x] Run affected package tests.
+- [x] Run affected package typechecks.
+- [x] Run the workspace build.
+- [x] Inspect and stage only task-owned files.
+- [x] Commit and push `main` without rewriting history.
+
+## Acceptance
+
+The repair is accepted when deterministic tests prove the invariants above and
+the live evidence can no longer produce these contradictions. Token-generating
+live inference is outside this order unless the mandatory GPU preflight is
+completed first.
+
+## Verification evidence
+
+- `pnpm --filter @omnius/orchestrator typecheck`: passed.
+- `pnpm --filter omnius typecheck`: passed.
+- Focused orchestrator suites: 67 tests passed across 9 files.
+- Telegram transport contract: 11 tests passed.
+- Full `agenticRunner.test.ts`: 175 tests passed.
+- `pnpm -r build`: passed for all 11 buildable workspace projects.
+- No live token-generating inference was used. The mandatory accelerator gate
+  therefore did not apply.

package/docs/work-orders/runtime-health-remediation/WO-24-telegram-logical-request-variant-identity.md

@@ -0,0 +1,65 @@
+# WO-24: Telegram logical request variant identity
+
+## Incident
+
+Telegram follow-up requests could finish a streamed inference with no visible
+contract and then fail their one unary compatibility request with HTTP 409:
+`logical_request_conflict`. The observed stream used all 300 completion tokens
+and ended with `finish=length`.
+
+The broker response was correct. Omnius reused one logical request ID after it
+changed the request body from streaming to unary. The same contract violation
+also existed in the backend's empty-output recovery path when it changed from
+OpenAI-compatible `/v1/chat/completions` to native `/api/chat`, or when it
+constructed a changed `/v1` retry body.
+
+## Root cause
+
+ollama-unify binds a logical request ID to the exact request method, path,
+content type, and body. It uses that binding for idempotent queue admission and
+completed-response replay. Omnius treated the ID as a broad correlation ID.
+It therefore reused the ID across different transport contracts. The broker
+rejected the second contract instead of replaying an unrelated response.
+
+The initial empty output had a second cause. Telegram follow-up inference used
+the OpenAI-compatible Ollama renderer without native transport preference. A
+Qwen-derived model can consume its entire budget in renderer-managed reasoning
+even when the caller requests `think:false`. The stream adapter then has no
+visible contract to parse.
+
+## Invariants
+
+- [x] One logical request ID identifies one exact wire contract.
+- [x] Byte-identical queue retries retain their original ID.
+- [x] A stream-to-unary transition derives a new stable ID.
+- [x] A `/v1`-to-native recovery transition derives a new stable ID.
+- [x] A changed retry body derives a new stable ID.
+- [x] A Telegram Ollama follow-up uses native chat and explicit
+  direct-answer mode.
+- [x] Follow-up output capacity fits the declared JSON contract.
+- [x] A deterministic test broker rejects any future cross-contract ID reuse.
+
+## Implementation
+
+- [x] Add `telegramUnaryCompatibilityLogicalRequestId`.
+- [x] Apply the derived ID to the unary compatibility request only.
+- [x] Add backend request-variant identity derivation.
+- [x] Apply a native-recovery identity before `/api/chat`.
+- [x] Apply a changed-retry identity before the second `/v1` request.
+- [x] Use the normal broker request builder for the changed retry.
+- [x] Set `preferNativeOllamaChat` for Ollama follow-up decisions.
+- [x] Raise follow-up `maxTokens` from 300 to 1,024.
+- [x] Document logical ID semantics on the backend request contract.
+
+## Verification
+
+- `pnpm --filter @omnius/orchestrator typecheck`: passed.
+- `pnpm --filter omnius typecheck`: passed.
+- `ollama-backend-pool.test.ts`: 27 tests passed.
+- `telegram-inference-contract.test.ts`: 10 tests passed.
+- `telegram-observability.test.ts`: 22 tests passed.
+- `telegram-bot-api-10.test.ts`: 135 tests passed.
+- The mocked broker stores the first exact body for every logical ID and emits
+  the production-style non-retryable 409 response if later content differs.
+- No token-generating live inference was used. A live canary remains subject to
+  the mandatory endpoint, model, and physical GPU placement preflight.

package/npm-shrinkwrap.json

@@ -1,12 +1,12 @@
 {
   "name": "omnius",
-  "version": "1.0.692",
+  "version": "1.0.694",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "omnius",
-      "version": "1.0.692",
+      "version": "1.0.694",
       "bundleDependencies": [
         "image-to-ascii"
       ],
@@ -2011,6 +2011,22 @@
         "node": ">= 8"
       }
     },
+    "node_modules/@peculiar/asn1-asym-key": {
+      "version": "2.9.4",
+      "resolved": "https://registry.npmjs.org/@peculiar/asn1-asym-key/-/asn1-asym-key-2.9.4.tgz",
+      "integrity": "sha512-s7SJfjcXlR3MYMngDTeMLCy3VjGaIxeEy905CQ0j09pDbeYhNBvBGA7r7cAvCZYkVFo9kVg9RAki0K2iUz7SGQ==",
+      "license": "MIT",
+      "dependencies": {
+        "@peculiar/asn1-pkcs8": "^2.9.4",
+        "@peculiar/asn1-schema": "^2.9.4",
+        "@peculiar/asn1-x509": "^2.9.4",
+        "asn1js": "^3.0.10",
+        "tslib": "^2.8.1"
+      },
+      "engines": {
+        "node": ">=14"
+      }
+    },
     "node_modules/@peculiar/asn1-cms": {
       "version": "2.9.4",
       "resolved": "https://registry.npmjs.org/@peculiar/asn1-cms/-/asn1-cms-2.9.4.tgz",
@@ -2167,6 +2183,22 @@
         "node": ">=14"
       }
     },
+    "node_modules/@peculiar/asn1-x509-post-quantum": {
+      "version": "2.9.4",
+      "resolved": "https://registry.npmjs.org/@peculiar/asn1-x509-post-quantum/-/asn1-x509-post-quantum-2.9.4.tgz",
+      "integrity": "sha512-GD0k7BY3dsEIeai7C7bVRPddj/PzZu+sTawRPRxdHKbdy1f9b58WQyk0eFJdr28GShyLVTU8poyi4+bTAZfEtQ==",
+      "license": "MIT",
+      "dependencies": {
+        "@peculiar/asn1-asym-key": "^2.9.4",
+        "@peculiar/asn1-schema": "^2.9.4",
+        "@peculiar/asn1-x509": "^2.9.4",
+        "asn1js": "^3.0.10",
+        "tslib": "^2.8.1"
+      },
+      "engines": {
+        "node": ">=14"
+      }
+    },
     "node_modules/@peculiar/json-schema": {
       "version": "1.1.12",
       "resolved": "https://registry.npmjs.org/@peculiar/json-schema/-/json-schema-1.1.12.tgz",
@@ -2205,18 +2237,19 @@
       }
     },
     "node_modules/@peculiar/x509": {
-      "version": "2.0.0",
-      "resolved": "https://registry.npmjs.org/@peculiar/x509/-/x509-2.0.0.tgz",
-      "integrity": "sha512-r10lkuy6BNfRmyYdRAfgu6dq0HOmyIV2OLhXWE3gDEPBdX1b8miztJVyX/UxWhLwemNyDP3CLZHpDxDwSY0xaA==",
+      "version": "2.1.0",
+      "resolved": "https://registry.npmjs.org/@peculiar/x509/-/x509-2.1.0.tgz",
+      "integrity": "sha512-IYbg1R03CSQGWwl24kGyqrdVtixNSbRaDvBg1r5wyYjTP+VwPQkka1BzTgU5+vxiuwqg04OxdvdJ1xYYFIdUSA==",
       "license": "MIT",
       "dependencies": {
-        "@peculiar/asn1-cms": "^2.6.0",
-        "@peculiar/asn1-csr": "^2.6.0",
-        "@peculiar/asn1-ecc": "^2.6.0",
-        "@peculiar/asn1-pkcs9": "^2.6.0",
-        "@peculiar/asn1-rsa": "^2.6.0",
-        "@peculiar/asn1-schema": "^2.6.0",
-        "@peculiar/asn1-x509": "^2.6.0",
+        "@peculiar/asn1-cms": "^2.9.4",
+        "@peculiar/asn1-csr": "^2.9.4",
+        "@peculiar/asn1-ecc": "^2.9.4",
+        "@peculiar/asn1-pkcs9": "^2.9.4",
+        "@peculiar/asn1-rsa": "^2.9.4",
+        "@peculiar/asn1-schema": "^2.9.4",
+        "@peculiar/asn1-x509": "^2.9.4",
+        "@peculiar/asn1-x509-post-quantum": "^2.9.4",
         "pvtsutils": "^1.3.6",
         "tslib": "^2.8.1",
         "tsyringe": "^4.10.0"
@@ -4321,9 +4354,9 @@
       }
     },
     "node_modules/hono": {
-      "version": "4.13.5",
-      "resolved": "https://registry.npmjs.org/hono/-/hono-4.13.5.tgz",
-      "integrity": "sha512-O6+/eCYRkzzzy0rPWwKLiGBR1nFuUPZynnwjxN1MBA62NNqbT0wQEzQyK2gSO5yDIDB336sXQleAhOHrzlYyKw==",
+      "version": "4.13.7",
+      "resolved": "https://registry.npmjs.org/hono/-/hono-4.13.7.tgz",
+      "integrity": "sha512-c8/gF9ac8Y78/agExVocyLevgR+JlpNB444Py0FSX8pJoPdYUfUzRcXtYEYGwt6l19qIlVZPN5Mfsw9jFShmQQ==",
       "license": "MIT",
       "engines": {
         "node": ">=16.9.0"
@@ -5128,9 +5161,9 @@
       }
     },
     "node_modules/jose": {
-      "version": "6.2.10",
-      "resolved": "https://registry.npmjs.org/jose/-/jose-6.2.10.tgz",
-      "integrity": "sha512-iiW7J9qRFlGxvCOIBDBDxFePQSn7ZMAnrYGhrrOo6siO/MIqwfyilLR27pkfDgUk+raLuzADS8A3S/KLBisc0g==",
+      "version": "6.2.11",
+      "resolved": "https://registry.npmjs.org/jose/-/jose-6.2.11.tgz",
+      "integrity": "sha512-A5NPn7g8EAzGU3IzRs+Yiq8K5n3ypYS75M5+KKiVHdUexfpWK1kP4ZMq7QnTGDoMj6TJ1dtcEJjW60yZDXS4hg==",
       "license": "MIT",
       "funding": {
         "url": "https://github.com/sponsors/panva"
@@ -7591,9 +7624,9 @@
       }
     },
     "node_modules/undici": {
-      "version": "7.29.0",
-      "resolved": "https://registry.npmjs.org/undici/-/undici-7.29.0.tgz",
-      "integrity": "sha512-IDxfleLmmbSskfWSUATiN1nfn2rDuvnMOqb5CWR92iIfojA0Ud+ulOAAEQ57LPr9rWmsreUyf5lwyao+7GNNVw==",
+      "version": "7.29.1",
+      "resolved": "https://registry.npmjs.org/undici/-/undici-7.29.1.tgz",
+      "integrity": "sha512-RYONW2MeafgYlkVOKYKkA/Ag7BmXqgIWCa8t1m0JcxrQg9pI9lEqRhAOruOBCbAohOa/gkCF+iPi9hrgvTzu6Q==",
       "license": "MIT",
       "engines": {
         "node": ">=20.18.1"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "omnius",
-  "version": "1.0.692",
+  "version": "1.0.694",
   "description": "AI coding agent powered by open-source models (Ollama/vLLM) — interactive TUI with agentic tool-calling loop",
   "type": "module",
   "main": "./dist/library.js",