omnius 1.0.867 → 1.0.869

package/docs/DISCOVERY.md

@@ -161,18 +161,20 @@ Daemon equivalents are `GET /v1/discovery/bootstrap`, `GET /v1/discovery?q=<inte
 | `api.v1-mcps` | /v1/mcps | List MCP servers (PT-03) |
 | `api.v1-mcps-name` | /v1/mcps/{name} | Get MCP server details (PT-03) |
 | `api.v1-mcps-name-call` | /v1/mcps/{name}/call | Invoke a tool on an MCP server (PT-03) |
-| `api.v1-media-audio` | /v1/media/audio | Generate a sound effect — body {prompt, model?, backend?, duration?, seed?} |
+| `api.v1-media-audio` | /v1/media/audio | Generate sound — body {projectRoot,prompt,request_id?,session_id?,model?,backend?,duration?,seed?} |
 | `api.v1-media-av-analyze` | /v1/media/av/analyze | Analyze a media file into a grounded entity/event/evidence answer (AV entity-comprehension) — body {path\|mediaUri, question?}; reports per-role live-vs-mock adapter status |
-| `api.v1-media-file` | /v1/media/file | Stream an exact owned gallery file — query {kind,name}; Validate an exact gallery identity and MIME before acquisition; Delete only a selected saved gallery file and matching metadata |
-| `api.v1-media-gallery` | /v1/media/gallery | List previously generated media from the global store, newest first |
-| `api.v1-media-image` | /v1/media/image | Generate an image — body {prompt, model?, backend?, width?, height?, steps?, guidance?, seed?, aspect_ratio?} |
+| `api.v1-media-file` | /v1/media/file | Stream an exact artifact — query {projectRoot,kind,name} or {scope:'legacy-global',kind,name}; Validate exact project/archive identity, MIME and ETag before acquisition; Delete a selected project artifact or explicit legacy copy and matching metadata |
+| `api.v1-media-gallery` | /v1/media/gallery | Discover existing artifacts in a registered project, or the explicit legacy global archive |
+| `api.v1-media-generations-cancel` | /v1/media/generations/cancel | Request daemon-owned Stop — JSON {projectRoot,request_id\|generation_id,session_id?} |
+| `api.v1-media-generations-status` | /v1/media/generations/status | Read actual daemon-owned generation settlement for captured project and request identity |
+| `api.v1-media-image` | /v1/media/image | Generate an image in a registered project — body {projectRoot,prompt,request_id?,session_id?,model?,backend?,width?,height?,steps?,guidance?,seed?,aspect_ratio?} |
 | `api.v1-media-migrate` | /v1/media/migrate | Dedup + migrate legacy per-group media caches into the unified store — body {dryRun?, roots?, maxDepth?} |
 | `api.v1-media-models` | /v1/media/models | List available generative media models per kind (image/video/audio/music) |
-| `api.v1-media-music` | /v1/media/music | Generate music — body {prompt, model?, backend?, duration?, seed?} |
+| `api.v1-media-music` | /v1/media/music | Generate music — body {projectRoot,prompt,request_id?,session_id?,model?,backend?,duration?,seed?} |
 | `api.v1-media-relocate` | /v1/media/relocate | Relocate the whole media store (weights/venvs/gallery) to a chosen folder — body {newRoot, dryRun?}; streams media.relocate_progress and returns 202 + job_id |
 | `api.v1-media-relocate-status` | /v1/media/relocate/status | Status of the in-flight (or last) media-store relocation job |
 | `api.v1-media-store` | /v1/media/store | Resolved media/model/gallery roots and disk information |
-| `api.v1-media-video` | /v1/media/video | Generate a video — body {prompt, model?, backend?, num_frames?, fps?, width?, height?, steps?, guidance?, seed?} |
+| `api.v1-media-video` | /v1/media/video | Generate video — body {projectRoot,prompt,request_id?,session_id?,model?,backend?,num_frames?,fps?,width?,height?,steps?,guidance?,seed?} |
 | `api.v1-media-weights` | /v1/media/weights | Inspect an exact media model's actual cache paths, physical bytes, known dependencies, sharing and supported actions; Delete an exact cached dependency while retaining its catalog entry |
 | `api.v1-media-weights-download` | /v1/media/weights/download | Start or reattach a durable network/disk-only weight download |
 | `api.v1-media-weights-jobs-id` | /v1/media/weights/jobs/{id} | Read durable download state and restart interruption status |
@@ -431,7 +433,11 @@ Daemon equivalents are `GET /v1/discovery/bootstrap`, `GET /v1/discovery?q=<inte
 | `guide.design-dashboard-reconstruction-plan` | Dashboard reconstruction plan | 2026-10-16 · source implementation only; publishing remains with the user. |
 | `guide.design-dashboard-styleguide` | Omnius browser instrument design system | Version 1 · 2026-10-16 · implementation contract |
 | `guide.design-dashboard-todo-uppercase` | Dashboard reconstruction — durable TODO | Updated: 2026-10-16. Contract: styleguide. Scope and sequence: plan. |
-| `guide.design-media-unification-todo-uppercase` | Next phase: media storage and generation interface unification | Requested 2026-10-16. Queued after the current browser dashboard reconstruction; do not divert the current delivery into this work. These items are not implemented or verified by the dashboard reconstruction receipt. |
+| `guide.design-media-unification-design` | Unified media: project artifacts, shared models, deliberate presentation | Status: implementation contract, 2026-10-16. Follows the delivered dashboard reconstruction (6cfaebbd). Track verification in media-unification-TODO.md. |
+| `guide.design-media-unification-todo-uppercase` | Next phase: media storage and generation interface unification | Requested 2026-10-16. Active after dashboard reconstruction delivery 6cfaebbd. Contract: media unification design. The preceding dashboard receipt does not count as verification of this phase. |
+| `guide.design-session-presentation-todo-uppercase` | Session media, code and working-state presentation | Requested 2026-10-16 after media generation/store unification. |
+| `guide.design-update-operation-cancellation` | Owned update cancellation and restart | The native update dialog stays present while an operation is running. Escape, Ctrl+C and outside clicks do not dismiss it. Its top-right Cancel control sends an explicit request; it shows cancellation pending until the owned work settles. An error remains in the same dialog with a Close action. Ordinary menu dismissal and native frame animation remain unchan |
+| `guide.design-update-session-restoration-todo-uppercase` | Queued next: update lifecycle and exact session restoration | Requested 2026-10-16. Implemented after media unification; source-only delivery, with no real installer or running daemon changes during verification. |
 | `guide.discovery-agent-map` | Agent Map | Bundled Omnius documentation artifact: docs/discovery/agent-map.json. |
 | `guide.discovery-catalog-overrides` | Discovery Catalog Curated Source | Curated aliases, relationships, invocation modes, and conceptual entries merged into the generated catalog. |
 | `guide.discovery-json` | Omnius Machine Discovery Catalog | Generated JSON catalog consumed by the CLI, REST discovery API, JavaScript API, and offline agents. |
@@ -567,6 +573,31 @@ Daemon equivalents are `GET /v1/discovery/bootstrap`, `GET /v1/discovery?q=<inte
 | `guide.work-orders-evidence-instrument-divider-collapsed-160x48` | Instrument Divider Collapsed 160x48 | Bundled Omnius documentation artifact: docs/work-orders/evidence/instrument-divider-collapsed-160x48.png. |
 | `guide.work-orders-evidence-instrument-divider-resized-160x48` | Instrument Divider Resized 160x48 | Bundled Omnius documentation artifact: docs/work-orders/evidence/instrument-divider-resized-160x48.png. |
 | `guide.work-orders-evidence-instrument-help-scroll-120x36` | Instrument Help Scroll 120x36 | Bundled Omnius documentation artifact: docs/work-orders/evidence/instrument-help-scroll-120x36.png. |
+| `guide.work-orders-evidence-instrument-interface-live-20261016-interface-after-reconstruction` | Interface After Reconstruction | Bundled Omnius documentation artifact: docs/work-orders/evidence/instrument-interface-live-20261016/interface-after-reconstruction.png. |
+| `guide.work-orders-evidence-instrument-interface-live-20261016-interface-before-reconstruction` | Interface Before Reconstruction | Bundled Omnius documentation artifact: docs/work-orders/evidence/instrument-interface-live-20261016/interface-before-reconstruction.png. |
+| `guide.work-orders-evidence-instrument-interface-live-20261016-media-audio-playing` | Media Audio Playing | Bundled Omnius documentation artifact: docs/work-orders/evidence/instrument-interface-live-20261016/media-audio-playing.png. |
+| `guide.work-orders-evidence-instrument-interface-live-20261016-media-image-100x30` | Media Image 100x30 | Bundled Omnius documentation artifact: docs/work-orders/evidence/instrument-interface-live-20261016/media-image-100x30.png. |
+| `guide.work-orders-evidence-instrument-interface-live-20261016-media-image-120x36` | Media Image 120x36 | Bundled Omnius documentation artifact: docs/work-orders/evidence/instrument-interface-live-20261016/media-image-120x36.png. |
+| `guide.work-orders-evidence-instrument-interface-live-20261016-media-image-160x48` | Media Image 160x48 | Bundled Omnius documentation artifact: docs/work-orders/evidence/instrument-interface-live-20261016/media-image-160x48.png. |
+| `guide.work-orders-evidence-instrument-interface-live-20261016-media-image-60x20` | Media Image 60x20 | Bundled Omnius documentation artifact: docs/work-orders/evidence/instrument-interface-live-20261016/media-image-60x20.png. |
+| `guide.work-orders-evidence-instrument-interface-live-20261016-media-image-80x24` | Media Image 80x24 | Bundled Omnius documentation artifact: docs/work-orders/evidence/instrument-interface-live-20261016/media-image-80x24.png. |
+| `guide.work-orders-evidence-instrument-interface-live-20261016-media-progress-collapsed` | Media Progress Collapsed | Bundled Omnius documentation artifact: docs/work-orders/evidence/instrument-interface-live-20261016/media-progress-collapsed.png. |
+| `guide.work-orders-evidence-instrument-interface-live-20261016-media-video-frame-a` | Media Video Frame A | Bundled Omnius documentation artifact: docs/work-orders/evidence/instrument-interface-live-20261016/media-video-frame-a.png. |
+| `guide.work-orders-evidence-instrument-interface-live-20261016-media-video-frame-b` | Media Video Frame B | Bundled Omnius documentation artifact: docs/work-orders/evidence/instrument-interface-live-20261016/media-video-frame-b.png. |
+| `guide.work-orders-evidence-instrument-interface-live-20261016-media-voice-autocomplete-junction` | Media Voice Autocomplete Junction | Bundled Omnius documentation artifact: docs/work-orders/evidence/instrument-interface-live-20261016/media-voice-autocomplete-junction.png. |
+| `guide.work-orders-evidence-instrument-interface-live-20261016-report` | Report | Bundled Omnius documentation artifact: docs/work-orders/evidence/instrument-interface-live-20261016/report.json. |
+| `guide.work-orders-evidence-instrument-media-live-20261016-media-audio-playing` | Media Audio Playing | Bundled Omnius documentation artifact: docs/work-orders/evidence/instrument-media-live-20261016/media-audio-playing.png. |
+| `guide.work-orders-evidence-instrument-media-live-20261016-media-image-100x30` | Media Image 100x30 | Bundled Omnius documentation artifact: docs/work-orders/evidence/instrument-media-live-20261016/media-image-100x30.png. |
+| `guide.work-orders-evidence-instrument-media-live-20261016-media-image-120x36` | Media Image 120x36 | Bundled Omnius documentation artifact: docs/work-orders/evidence/instrument-media-live-20261016/media-image-120x36.png. |
+| `guide.work-orders-evidence-instrument-media-live-20261016-media-image-160x48` | Media Image 160x48 | Bundled Omnius documentation artifact: docs/work-orders/evidence/instrument-media-live-20261016/media-image-160x48.png. |
+| `guide.work-orders-evidence-instrument-media-live-20261016-media-image-60x20` | Media Image 60x20 | Bundled Omnius documentation artifact: docs/work-orders/evidence/instrument-media-live-20261016/media-image-60x20.png. |
+| `guide.work-orders-evidence-instrument-media-live-20261016-media-image-80x24` | Media Image 80x24 | Bundled Omnius documentation artifact: docs/work-orders/evidence/instrument-media-live-20261016/media-image-80x24.png. |
+| `guide.work-orders-evidence-instrument-media-live-20261016-media-progress-collapsed` | Media Progress Collapsed | Bundled Omnius documentation artifact: docs/work-orders/evidence/instrument-media-live-20261016/media-progress-collapsed.png. |
+| `guide.work-orders-evidence-instrument-media-live-20261016-media-video-frame-a` | Media Video Frame A | Bundled Omnius documentation artifact: docs/work-orders/evidence/instrument-media-live-20261016/media-video-frame-a.png. |
+| `guide.work-orders-evidence-instrument-media-live-20261016-media-video-frame-b` | Media Video Frame B | Bundled Omnius documentation artifact: docs/work-orders/evidence/instrument-media-live-20261016/media-video-frame-b.png. |
+| `guide.work-orders-evidence-instrument-media-live-20261016-media-voice-autocomplete-junction` | Media Voice Autocomplete Junction | Bundled Omnius documentation artifact: docs/work-orders/evidence/instrument-media-live-20261016/media-voice-autocomplete-junction.png. |
+| `guide.work-orders-evidence-instrument-media-live-20261016-report` | Report | Bundled Omnius documentation artifact: docs/work-orders/evidence/instrument-media-live-20261016/report.json. |
+| `guide.work-orders-evidence-instrument-media-verification-20261016` | Instrument Media Verification 20261016 | Bundled Omnius documentation artifact: docs/work-orders/evidence/instrument-media-verification-20261016.json. |
 | `guide.work-orders-evidence-instrument-package-artifact-20261016` | Instrument Package Artifact 20261016 | Bundled Omnius documentation artifact: docs/work-orders/evidence/instrument-package-artifact-20261016.json. |
 | `guide.work-orders-evidence-instrument-package-install-20261016` | Instrument Package Install 20261016 | Bundled Omnius documentation artifact: docs/work-orders/evidence/instrument-package-install-20261016.json. |
 | `guide.work-orders-evidence-instrument-package-install-20261016-updated` | Instrument Package Install 20261016 Updated | Bundled Omnius documentation artifact: docs/work-orders/evidence/instrument-package-install-20261016-updated.json. |
@@ -593,6 +624,21 @@ Daemon equivalents are `GET /v1/discovery/bootstrap`, `GET /v1/discovery?q=<inte
 | `guide.work-orders-evidence-instrument-terminal-light-120x36` | Instrument Terminal Light 120x36 | Bundled Omnius documentation artifact: docs/work-orders/evidence/instrument-terminal-light-120x36.png. |
 | `guide.work-orders-evidence-instrument-transcript-selection-120x36` | Instrument Transcript Selection 120x36 | Bundled Omnius documentation artifact: docs/work-orders/evidence/instrument-transcript-selection-120x36.png. |
 | `guide.work-orders-evidence-instrument-vim-composer-120x36` | Instrument Vim Composer 120x36 | Bundled Omnius documentation artifact: docs/work-orders/evidence/instrument-vim-composer-120x36.png. |
+| `guide.work-orders-evidence-instrument-working-live-20261016-action-working-progress` | Action Working Progress | Bundled Omnius documentation artifact: docs/work-orders/evidence/instrument-working-live-20261016/action-working-progress.png. |
+| `guide.work-orders-evidence-instrument-working-live-20261016-action-working-result-json` | Action Working Result Json | Bundled Omnius documentation artifact: docs/work-orders/evidence/instrument-working-live-20261016/action-working-result-json.png. |
+| `guide.work-orders-evidence-instrument-working-live-20261016-interface-after-reconstruction` | Interface After Reconstruction | Bundled Omnius documentation artifact: docs/work-orders/evidence/instrument-working-live-20261016/interface-after-reconstruction.png. |
+| `guide.work-orders-evidence-instrument-working-live-20261016-interface-before-reconstruction` | Interface Before Reconstruction | Bundled Omnius documentation artifact: docs/work-orders/evidence/instrument-working-live-20261016/interface-before-reconstruction.png. |
+| `guide.work-orders-evidence-instrument-working-live-20261016-media-audio-playing` | Media Audio Playing | Bundled Omnius documentation artifact: docs/work-orders/evidence/instrument-working-live-20261016/media-audio-playing.png. |
+| `guide.work-orders-evidence-instrument-working-live-20261016-media-image-100x30` | Media Image 100x30 | Bundled Omnius documentation artifact: docs/work-orders/evidence/instrument-working-live-20261016/media-image-100x30.png. |
+| `guide.work-orders-evidence-instrument-working-live-20261016-media-image-120x36` | Media Image 120x36 | Bundled Omnius documentation artifact: docs/work-orders/evidence/instrument-working-live-20261016/media-image-120x36.png. |
+| `guide.work-orders-evidence-instrument-working-live-20261016-media-image-160x48` | Media Image 160x48 | Bundled Omnius documentation artifact: docs/work-orders/evidence/instrument-working-live-20261016/media-image-160x48.png. |
+| `guide.work-orders-evidence-instrument-working-live-20261016-media-image-60x20` | Media Image 60x20 | Bundled Omnius documentation artifact: docs/work-orders/evidence/instrument-working-live-20261016/media-image-60x20.png. |
+| `guide.work-orders-evidence-instrument-working-live-20261016-media-image-80x24` | Media Image 80x24 | Bundled Omnius documentation artifact: docs/work-orders/evidence/instrument-working-live-20261016/media-image-80x24.png. |
+| `guide.work-orders-evidence-instrument-working-live-20261016-media-progress-collapsed` | Media Progress Collapsed | Bundled Omnius documentation artifact: docs/work-orders/evidence/instrument-working-live-20261016/media-progress-collapsed.png. |
+| `guide.work-orders-evidence-instrument-working-live-20261016-media-video-frame-a` | Media Video Frame A | Bundled Omnius documentation artifact: docs/work-orders/evidence/instrument-working-live-20261016/media-video-frame-a.png. |
+| `guide.work-orders-evidence-instrument-working-live-20261016-media-video-frame-b` | Media Video Frame B | Bundled Omnius documentation artifact: docs/work-orders/evidence/instrument-working-live-20261016/media-video-frame-b.png. |
+| `guide.work-orders-evidence-instrument-working-live-20261016-media-voice-autocomplete-junction` | Media Voice Autocomplete Junction | Bundled Omnius documentation artifact: docs/work-orders/evidence/instrument-working-live-20261016/media-voice-autocomplete-junction.png. |
+| `guide.work-orders-evidence-instrument-working-live-20261016-report` | Report | Bundled Omnius documentation artifact: docs/work-orders/evidence/instrument-working-live-20261016/report.json. |
 | `guide.work-orders-evidence-interface-daemon-deployment-20261016` | Interface Daemon Deployment 20261016 | Bundled Omnius documentation artifact: docs/work-orders/evidence/interface-daemon-deployment-20261016.json. |
 | `guide.work-orders-evidence-interface-targeted-verification-20261016-final` | Interface Targeted Verification 20261016 Final | Bundled Omnius documentation artifact: docs/work-orders/evidence/interface-targeted-verification-20261016-final.json. |
 | `guide.work-orders-evidence-keyless-compatibility-20261012` | Keyless Compatibility 20261012 | Bundled Omnius documentation artifact: docs/work-orders/evidence/keyless-compatibility-20261012.json. |
@@ -602,6 +648,7 @@ Daemon equivalents are `GET /v1/discovery/bootstrap`, `GET /v1/discovery?q=<inte
 | `guide.work-orders-evidence-local-recovery-production-routes-20261014` | Local Recovery Production Routes 20261014 | Bundled Omnius documentation artifact: docs/work-orders/evidence/local-recovery-production-routes-20261014.json. |
 | `guide.work-orders-evidence-native-conversation-prompt-audit-20261012` | Native Conversation Prompt Audit 20261012 | Bundled Omnius documentation artifact: docs/work-orders/evidence/native-conversation-prompt-audit-20261012.json. |
 | `guide.work-orders-evidence-native-goal-contract-probe-20261012` | Native Goal Contract Probe 20261012 | Bundled Omnius documentation artifact: docs/work-orders/evidence/native-goal-contract-probe-20261012.json. |
+| `guide.work-orders-evidence-native-interface-state-verification-20261016` | Native Interface State Verification 20261016 | Bundled Omnius documentation artifact: docs/work-orders/evidence/native-interface-state-verification-20261016.json. |
 | `guide.work-orders-evidence-native-reconciliation-readonly-live-20261014` | Native Reconciliation Readonly Live 20261014 | Bundled Omnius documentation artifact: docs/work-orders/evidence/native-reconciliation-readonly-live-20261014.json. |
 | `guide.work-orders-evidence-native-session-lifecycle-verification-20261016` | Native Session Lifecycle Verification 20261016 | Bundled Omnius documentation artifact: docs/work-orders/evidence/native-session-lifecycle-verification-20261016.json. |
 | `guide.work-orders-evidence-native-session-regression-verification-20261016` | Native Session Regression Verification 20261016 | Bundled Omnius documentation artifact: docs/work-orders/evidence/native-session-regression-verification-20261016.json. |
@@ -622,6 +669,7 @@ Daemon equivalents are `GET /v1/discovery/bootstrap`, `GET /v1/discovery?q=<inte
 | `guide.work-orders-evidence-native-tui-pty-live-20261015` | Native Tui Pty Live 20261015 | Bundled Omnius documentation artifact: docs/work-orders/evidence/native-tui-pty-live-20261015.json. |
 | `guide.work-orders-evidence-native-tui-semantic-components-20261015` | Native Tui Semantic Components 20261015 | Bundled Omnius documentation artifact: docs/work-orders/evidence/native-tui-semantic-components-20261015.json. |
 | `guide.work-orders-evidence-native-tui-targeted-verification-20261015` | Native Tui Targeted Verification 20261015 | Bundled Omnius documentation artifact: docs/work-orders/evidence/native-tui-targeted-verification-20261015.json. |
+| `guide.work-orders-evidence-native-working-state-verification-20261016` | Native Working State Verification 20261016 | Bundled Omnius documentation artifact: docs/work-orders/evidence/native-working-state-verification-20261016.json. |
 | `guide.work-orders-evidence-opencode-all-free-audit-20261012` | Opencode All Free Audit 20261012 | Bundled Omnius documentation artifact: docs/work-orders/evidence/opencode-all-free-audit-20261012.json. |
 | `guide.work-orders-evidence-opencode-all-free-installed-verification-20261012` | Opencode All Free Installed Verification 20261012 | Bundled Omnius documentation artifact: docs/work-orders/evidence/opencode-all-free-installed-verification-20261012.json. |
 | `guide.work-orders-evidence-opencode-installed-production-stream-live-20261012` | Opencode Installed Production Stream Live 20261012 | Bundled Omnius documentation artifact: docs/work-orders/evidence/opencode-installed-production-stream-live-20261012.json. |
@@ -631,10 +679,23 @@ Daemon equivalents are `GET /v1/discovery/bootstrap`, `GET /v1/discovery?q=<inte
 | `guide.work-orders-evidence-opencode-step-rate-limited-diagnostic-20261012` | Opencode Step Rate Limited Diagnostic 20261012 | Bundled Omnius documentation artifact: docs/work-orders/evidence/opencode-step-rate-limited-diagnostic-20261012.json. |
 | `guide.work-orders-evidence-ovh-production-compatibility-20261012` | Ovh Production Compatibility 20261012 | Bundled Omnius documentation artifact: docs/work-orders/evidence/ovh-production-compatibility-20261012.json. |
 | `guide.work-orders-evidence-ovh-structured-context-compatibility-20261012` | Ovh Structured Context Compatibility 20261012 | Bundled Omnius documentation artifact: docs/work-orders/evidence/ovh-structured-context-compatibility-20261012.json. |
+| `guide.work-orders-evidence-project-media-browser-20261016-dark-1440-image-output` | Dark 1440 Image Output | Bundled Omnius documentation artifact: docs/work-orders/evidence/project-media-browser-20261016/dark-1440-image-output.png. |
+| `guide.work-orders-evidence-project-media-browser-20261016-dark-360-image-output` | Dark 360 Image Output | Bundled Omnius documentation artifact: docs/work-orders/evidence/project-media-browser-20261016/dark-360-image-output.png. |
+| `guide.work-orders-evidence-project-media-browser-20261016-light-1440-image-output` | Light 1440 Image Output | Bundled Omnius documentation artifact: docs/work-orders/evidence/project-media-browser-20261016/light-1440-image-output.png. |
+| `guide.work-orders-evidence-project-media-browser-20261016-report` | Report | Bundled Omnius documentation artifact: docs/work-orders/evidence/project-media-browser-20261016/report.json. |
+| `guide.work-orders-evidence-project-media-unification-20261016` | Project Media Unification 20261016 | Bundled Omnius documentation artifact: docs/work-orders/evidence/project-media-unification-20261016.json. |
 | `guide.work-orders-evidence-public-review-after-20261012` | Public Review After 20261012 | Bundled Omnius documentation artifact: docs/work-orders/evidence/public-review-after-20261012.json. |
 | `guide.work-orders-evidence-public-review-before-20261012` | Public Review Before 20261012 | Bundled Omnius documentation artifact: docs/work-orders/evidence/public-review-before-20261012.json. |
+| `guide.work-orders-evidence-session-native-restore-followup-20261016` | Session Native Restore Followup 20261016 | Bundled Omnius documentation artifact: docs/work-orders/evidence/session-native-restore-followup-20261016.json. |
 | `guide.work-orders-evidence-session-tabs-installation-20261016` | Session Tabs Installation 20261016 | Bundled Omnius documentation artifact: docs/work-orders/evidence/session-tabs-installation-20261016.json. |
 | `guide.work-orders-evidence-session-tabs-package-verification-20261016` | Session Tabs Package Verification 20261016 | Bundled Omnius documentation artifact: docs/work-orders/evidence/session-tabs-package-verification-20261016.json. |
+| `guide.work-orders-evidence-session-transcript-browser-20261016` | Session Transcript Browser 20261016 | Bundled Omnius documentation artifact: docs/work-orders/evidence/session-transcript-browser-20261016.json. |
+| `guide.work-orders-evidence-session-transcript-dark-1440-session-code` | Session Transcript Dark 1440 Session Code | Bundled Omnius documentation artifact: docs/work-orders/evidence/session-transcript-dark-1440-session-code.png. |
+| `guide.work-orders-evidence-session-transcript-dark-1440-session-image` | Session Transcript Dark 1440 Session Image | Bundled Omnius documentation artifact: docs/work-orders/evidence/session-transcript-dark-1440-session-image.png. |
+| `guide.work-orders-evidence-session-transcript-dark-1440-session-working` | Session Transcript Dark 1440 Session Working | Bundled Omnius documentation artifact: docs/work-orders/evidence/session-transcript-dark-1440-session-working.png. |
+| `guide.work-orders-evidence-session-transcript-light-320-session-code` | Session Transcript Light 320 Session Code | Bundled Omnius documentation artifact: docs/work-orders/evidence/session-transcript-light-320-session-code.png. |
+| `guide.work-orders-evidence-session-transcript-light-320-session-image` | Session Transcript Light 320 Session Image | Bundled Omnius documentation artifact: docs/work-orders/evidence/session-transcript-light-320-session-image.png. |
+| `guide.work-orders-evidence-session-transcript-light-320-session-working` | Session Transcript Light 320 Session Working | Bundled Omnius documentation artifact: docs/work-orders/evidence/session-transcript-light-320-session-working.png. |
 | `guide.work-orders-evidence-source-hierarchy-installed-20261013` | Source Hierarchy Installed 20261013 | Bundled Omnius documentation artifact: docs/work-orders/evidence/source-hierarchy-installed-20261013.json. |
 | `guide.work-orders-evidence-telegram-all-free-live-20261013` | Telegram All Free Live 20261013 | Bundled Omnius documentation artifact: docs/work-orders/evidence/telegram-all-free-live-20261013.json. |
 | `guide.work-orders-evidence-telegram-completion-review-live-20261013` | Telegram Completion Review Live 20261013 | Bundled Omnius documentation artifact: docs/work-orders/evidence/telegram-completion-review-live-20261013.json. |
@@ -645,6 +706,7 @@ Daemon equivalents are `GET /v1/discovery/bootstrap`, `GET /v1/discovery?q=<inte
 | `guide.work-orders-evidence-terminal-review-contract-probe-20261012` | Terminal Review Contract Probe 20261012 | Bundled Omnius documentation artifact: docs/work-orders/evidence/terminal-review-contract-probe-20261012.json. |
 | `guide.work-orders-evidence-terminal-review-error-probe-20261012` | Terminal Review Error Probe 20261012 | Bundled Omnius documentation artifact: docs/work-orders/evidence/terminal-review-error-probe-20261012.json. |
 | `guide.work-orders-evidence-terminal-review-schema-repair-probe-20261012` | Terminal Review Schema Repair Probe 20261012 | Bundled Omnius documentation artifact: docs/work-orders/evidence/terminal-review-schema-repair-probe-20261012.json. |
+| `guide.work-orders-evidence-tool-event-presentation-verification-20261016` | Tool Event Presentation Verification 20261016 | Bundled Omnius documentation artifact: docs/work-orders/evidence/tool-event-presentation-verification-20261016.json. |
 | `guide.work-orders-evidence-tray-checked-menu-final` | Tray Checked Menu Final | Bundled Omnius documentation artifact: docs/work-orders/evidence/tray-checked-menu-final.png. |
 | `guide.work-orders-evidence-tray-native-host` | Tray Native Host | Bundled Omnius documentation artifact: docs/work-orders/evidence/tray-native-host.png. |
 | `guide.work-orders-evidence-tray-native-host-checking` | Tray Native Host Checking | Bundled Omnius documentation artifact: docs/work-orders/evidence/tray-native-host-checking.png. |
@@ -658,6 +720,7 @@ Daemon equivalents are `GET /v1/discovery/bootstrap`, `GET /v1/discovery?q=<inte
 | `guide.work-orders-evidence-tray-projects-long-menu` | Tray Projects Long Menu | Bundled Omnius documentation artifact: docs/work-orders/evidence/tray-projects-long-menu.png. |
 | `guide.work-orders-evidence-tray-projects-menu` | Tray Projects Menu | Bundled Omnius documentation artifact: docs/work-orders/evidence/tray-projects-menu.png. |
 | `guide.work-orders-evidence-tui-local-admission-live-20261014` | Tui Local Admission Live 20261014 | Bundled Omnius documentation artifact: docs/work-orders/evidence/tui-local-admission-live-20261014.json. |
+| `guide.work-orders-evidence-update-operation-cancellation-20261016` | Update Operation Cancellation 20261016 | Bundled Omnius documentation artifact: docs/work-orders/evidence/update-operation-cancellation-20261016.json. |
 | `guide.work-orders-evidence-web-instrument-dark-desktop-20261016` | Web Instrument Dark Desktop 20261016 | Bundled Omnius documentation artifact: docs/work-orders/evidence/web-instrument-dark-desktop-20261016.png. |
 | `guide.work-orders-evidence-web-instrument-dark-phone-20261016` | Web Instrument Dark Phone 20261016 | Bundled Omnius documentation artifact: docs/work-orders/evidence/web-instrument-dark-phone-20261016.png. |
 | `guide.work-orders-evidence-web-instrument-dashboard-live-20261016` | Web Instrument Dashboard Live 20261016 | Bundled Omnius documentation artifact: docs/work-orders/evidence/web-instrument-dashboard-live-20261016.json. |
@@ -787,6 +850,7 @@ Daemon equivalents are `GET /v1/discovery/bootstrap`, `GET /v1/discovery?q=<inte
 | `guide.work-orders-runtime-health-remediation-wo-57-telegram-delivery-truth-and-recovery-uppercase` | WO-57: Telegram delivery truth, reminder authority, and bounded recovery | Status: REQ-TDT-019 and the REQ-TDT-016 lease correction were delivered in cdf81ffd; the 23-file Case Theory acceptance run then exposed the terminal same-response contract mismatch tracked by REQ-TDT-020. Its source repair was delivered in 1b451bc8; publication, redeployment, live acceptance, and the pre-existing full-suite debt recorded below remain open.  |
 | `guide.work-orders-runtime-health-remediation-wo-58-agent-scoped-footer-observability-uppercase` | WO-58 — Agent-scoped footer observability | Status: source delivered in 8a81eab6; deployment acceptance pending |
 | `guide.work-orders-runtime-health-remediation-wo-59-telegram-restart-edit-crash-uppercase` | WO-59: Telegram restart edit crash and terminal-intake monotonicity | Status: COMPLETE — implemented, verified, and pushed in 9fadef51 Priority: P0 Incident: October 3, 2026, telegramtest TUI exits immediately while loading the OMNIUS Telegram session Owner: Omnius Telegram durable-intake runtime Depends on: WO-57 Completion rule: Mark a checkbox complete only when its code anchor and deterministic evidence exist. Do not delet |
+| `guide.work-orders-session-transcript-browser-20261016` | Session transcript media, code and action states | The browser now uses one renderer for restored sessions and live tool events. Tool calls, their measured progress, diagnostics, validated artifacts and the final assistant answer remain under their original turn. Exact action IDs pair parallel work; duplicate or late events cannot change a terminal outcome. Legacy results pair by name only when one unmatched |
 | `guide.work-orders-telegram-dmn-wo-22-dmn-outreach-and-learning-uppercase` | WO-22: DMN outreach, DM sharing, and outcome learning | On 2026-09-03 at 17:07 PDT the bot posted in the OMNIUS group without being addressed. The operator asked whether this was self-induced reflection. |
 | `guide.work-orders-telegram-dropbear-context-rca-workorder` | Telegram Dropbear Context Engineering RCA Work Order | Observed run: /home/roko/Documents/Projects/Adjacent/telegramtest/.omnius, run id 1782873796963-i5r7mv. |
 | `guide.work-orders-telegram-progress-browser-20261011-readme-uppercase` | Telegram progress and browser-to-desktop repair | Status: complete — implemented, verified offline, and delivered to origin/main Requested: 2026-10-11 Baseline: f1b2d5f9 on origin/main |

package/docs/design/media-unification-TODO.md

@@ -1,58 +1,103 @@
 # Next phase: media storage and generation interface unification
 
-Requested 2026-10-16. Queued after the current browser dashboard reconstruction;
-do not divert the current delivery into this work. These items are not implemented
-or verified by the dashboard reconstruction receipt.
+Requested 2026-10-16. Active after dashboard reconstruction delivery `6cfaebbd`.
+Contract: [media unification design](media-unification-design.md). The preceding
+dashboard receipt does not count as verification of this phase.
 
 ## Storage contract
 
-- [ ] Trace browser, TUI, tool and session generation/output paths for image,
+- [x] Trace browser, TUI, tool and session generation/output paths for image,
   video, audio and music before choosing a migration strategy.
-- [ ] Share model weights across Omnius sessions and project locations through
+- [x] Share model weights across Omnius sessions and project locations through
   one configured model store; expose its actual path consistently.
-- [ ] Scope generated outputs to the directory/project where generation was
+- [x] Scope generated outputs to the directory/project where generation was
   invoked. Browser and TUI sessions in that same location must discover the same
   artifacts, without copying them into divergent galleries.
-- [ ] Carry explicit project identity through browser generation, jobs, gallery,
+- [x] Carry explicit project identity through browser generation, jobs, gallery,
   preview, download and deletion. Preserve authenticated validation receipts.
-- [ ] Define compatibility/discovery for existing project outputs and global
+- [x] Define compatibility/discovery for existing project outputs and global
   gallery copies; never silently move or delete existing user artifacts.
-- [ ] Show the output directory and exact artifact location in both interfaces.
-- [ ] Test two sessions sharing one project and two separate projects sharing
+- [x] Show the output directory and exact artifact location in both interfaces.
+- [x] Test two sessions sharing one project and two separate projects sharing
   weights but keeping generated artifacts scoped.
 
 ## Uniform generation modules
 
-- [ ] Use one deliberate interaction pattern for LLM and media model selection,
+- [x] Use one deliberate interaction pattern for LLM and media model selection,
   download, readiness/deployment, generation, stop, failure and output actions.
-- [ ] Replace transcript floods with a single updating generation module tied to
+- [x] Replace transcript floods with a single updating generation module tied to
   its parent turn. Keep raw diagnostics and warnings in an explicit expansion.
-- [ ] Parse progress semantically: download bytes, model loading, inference
+- [x] Parse progress semantically: download bytes, model loading, inference
   steps, saving and completion. Do not label deprecation warnings or inference
   progress bars as model downloads.
-- [ ] Keep download-only and GPU deployment separate, with truthful status and
+- [x] Keep download-only and GPU deployment separate, with truthful status and
   existing broker coordination and live inference hardware gates.
-- [ ] Provide responsive media previews sized from available content width,
+- [x] Provide responsive media previews sized from available content width,
   including after terminal resize and sidebar dragging; retain aspect ratio.
-- [ ] Support click/Open actions and a subtle hover Open affordance, plus
+- [x] Support click/Open actions and a subtle hover Open affordance, plus
   keyboard access and clear local file handling.
-- [ ] Investigate OpenTUI audio streaming APIs for generated audio playback and
+- [x] Investigate OpenTUI audio streaming APIs for generated audio playback and
   visualization: https://opentui.com/docs/application-apis/audio-streaming/.
-- [ ] Implement video playback via updating frames using the same media module,
+- [x] Implement video playback via updating frames using the same media module,
   with bounded work, explicit play/pause and cleanup when hidden or closed.
-- [ ] Match browser preview sizing and media controls to these same artifact and
+- [x] Match browser preview sizing and media controls to these same artifact and
   lifecycle semantics; avoid tiny fixed-size centered output previews.
 
 ## Verification and delivery
 
-- [ ] Update the design contract before edits, recording ownership, migration,
+- [x] Update the design contract before edits, recording ownership, migration,
   progress, preview and playback semantics.
-- [ ] Test storage identity, legacy discovery, concurrency, cancellation,
+- [x] Test storage identity, legacy discovery, concurrency, cancellation,
   authorization, deletion scope and failure recovery with isolated fixtures.
-- [ ] Exercise TUI progress and resize/playback live without allocating models.
-- [ ] Exercise browser project switching, responsive output, playback and file
+- [x] Exercise TUI progress and resize/playback live without allocating models.
+- [x] Exercise browser project switching, responsive output, playback and file
   actions using isolated media fixtures and the mandatory transport tests.
-- [ ] Run actual inference only after the existing exact endpoint/model/GPU
-  preflight gate; report fixture tests separately from real inference.
-- [ ] Make scoped verified commits and push the tracked branch. Leave publishing
+- [x] Keep real inference behind the existing endpoint/model/GPU gate. This
+  phase used isolated media and subprocess fixtures; no inference or model loads ran.
+- [x] Make scoped verified commits and push the tracked branch. Leave publishing
   to the user unless subsequently instructed otherwise.
+
+## Progress log
+
+- Dashboard source delivery completed first through `6cfaebbd` on `origin/main`.
+- `0a6e9ada`: shared incremental media progress framing and owned image-worker
+  cancellation pushed. 67 tests across eight execution suites passed, including
+  real disposable Node subprocess Stop/timeout checks. No inference ran.
+- Current backend work replaces browser global work/copy behavior with explicit
+  registered-project identity and a labeled legacy gallery scope. Shared weights
+  stay in their configured store. Alias canonicalization is being repaired so
+  configured symlink roots share one lease.
+- Current terminal work retains one invocation module with bounded diagnostics,
+  responsive previews and local playback. Native model modules separate selection,
+  file-only download and preparation; their six isolated control tests pass.
+- Media artifact persistence round-trip: five disk-state tests pass. This is
+  media-block compatibility, not a claim that the queued full session-restoration
+  overhaul is complete.
+- Include the newly reported disconnected sidebar rule through suggestions,
+  scrolling and enabled Voice rows in this phase's terminal validation.
+- Queued after this phase: [update and session restoration](update-session-restoration-TODO.md).
+
+## Delivery
+
+- Source commits pushed to `origin/main`: backend `8bb0be44`, browser
+  `e7a7bd64`, invocation cancellation `faa21628`, native modules `2fe72f09`.
+- Browser: 171 live isolated-fixture checks, dark/light at 360/768/1440px;
+  project-switch ownership, stopping until daemon settlement, separate legacy
+  archive, scrolling detail modal and full-width output verified.
+  [Browser report](../work-orders/evidence/project-media-browser-20261016/report.json).
+  One expected HTTP 502 console entry is the deliberately cancelled generation;
+  no page exceptions or external requests.
+- Backend: 122 tests across 11 suites including the mandatory transport gate;
+  [receipt](../work-orders/evidence/project-media-unification-20261016.json).
+- Native media: 13 tests across 5 suites, plus 12 genuine VTE checks with CPU
+  fixture files, silent audio mixing and bounded video frames;
+  [receipt](../work-orders/evidence/instrument-media-verification-20261016.json).
+- Additional root integration: model controls + disk persistence 11 tests;
+  invocation cancellation 6; adapter context/lifecycle/receipt 8. Counts overlap
+  other receipts and must not be summed as a unique total. Private CLI and
+  execution typechecks passed.
+- Source only: no shared build, package publication, live daemon restart, real
+  model download, inference, or deletion of user media was performed.
+- Follow-up user request: browser session transcript media previews, scoped code
+  highlighting, and clearer action-chain working states tracked in
+  [session presentation TODO](session-presentation-TODO.md).

package/docs/design/media-unification-design.md

@@ -0,0 +1,89 @@
+# Unified media: project artifacts, shared models, deliberate presentation
+
+Status: implementation contract, 2026-10-16. Follows the delivered dashboard
+reconstruction (`6cfaebbd`). Track verification in `media-unification-TODO.md`.
+
+## Ownership and discovery
+
+Model weights and runtimes remain in the existing configured shared media store.
+Changing projects or opening another session must not create a second model cache.
+Generated images belong to `<project>/.omnius/images`, video to `.omnius/videos`,
+and sound/music to `.omnius/audio`, matching the existing execution tools.
+
+Browser requests capture the selected project when the operation starts. The
+daemon resolves that identity through the project registry; a request cannot
+substitute an arbitrary filesystem root. Generation, gallery, preview, download
+and deletion carry the same captured identity. Switching projects while a job or
+preview is pending must not attach its result to the new project's gallery.
+
+Existing project artifacts are discoverable without import or duplication.
+Metadata sidecars enrich records but cannot redirect file access outside the
+project. File operations validate actual containment, supported extensions and
+regular files, rejecting symlinks/traversal. Existing global gallery copies stay
+available through an explicitly labeled legacy scope; they are not moved or
+deleted automatically. Deletion confirmations state the actual selected artifact
+and scope. Shared weight deletion remains a separate control.
+
+The REST project registry is an access boundary: admin scope is required to
+register, rename or unregister roots, and to write project preferences that
+create discovery sentinels. Switching an existing registered project and listing
+or scanning projects remain read operations; scanning does not register its
+results. `registerIfMissing` on project switching requires admin scope. Local
+trusted project discovery remains separate from these REST operations.
+
+Media APIs require the captured `projectRoot`; they never fall back to the
+daemon's current project. Project-root aliases resolve to the same physical
+artifact identity. Optional known `session_id` values must belong to that
+project. New requests carry a bounded `request_id` alongside the server's
+`generation_id`, and all terminal receipts retain that identity. Preview and
+deletion accept `If-Match` against the inspected artifact revision; video
+deletion also removes its exact derived regular thumbnail, never a path supplied
+by a sidecar. Legacy global gallery access requires `scope=legacy-global` and
+does not accept a project attribution.
+
+Configured shared-store root aliases resolve to one physical lease. Nested cache
+and lease-file symlinks are rejected. The existing conservative store lease
+serializes generation with weight/cache mutation because generation can download
+or evict weights; it does not add a per-project model cache. Stop receipts remain
+`stopping` until the owned invocation actually settles. Generation status records
+are bounded in daemon memory and do not survive a daemon restart.
+
+## Generation lifecycle
+
+One invocation has one updating module in its parent turn. The module shows kind,
+model, a single current phase and measured progress, then output controls. It
+does not append every subprocess line to the transcript. Raw warnings and bounded
+diagnostics live in an explicit disclosure. Download, runtime setup, loading,
+inference steps and saving are distinct phases. Unknown progress stays unknown.
+Heartbeat updates preserve the latest meaningful phase; they do not regress from
+inference to a stale “downloading/loading” label. Subprocess records must survive
+split lines and UTF-8 chunks.
+
+Model browsing uses the existing nested module pattern. Selecting weights,
+downloading files, deploying a runner and generating output are distinct actions;
+their state labels must describe actual behavior. Existing broker and live
+inference hardware gates still apply. No visual test should load a model.
+
+## Media presentation
+
+Image/video previews derive dimensions from the available content width and
+aspect ratio. Sidebar dragging and terminal/browser resizing update that fit.
+Opening media is an explicit clickable preview or Open action, with keyboard
+access and a quiet hover treatment. File location is available in the module,
+not repeatedly injected as log lines. The browser uses the same artifact identity
+and exposes preview, download and scoped delete actions together.
+
+Generated audio uses OpenTUI's native audio stream API with bounded PCM decoding
+when the file format requires it, and measured waveform/progress visualization.
+OpenTUI streaming has no pause/resume API; file transport must implement any such
+control explicitly by disposing and restarting at a captured position. Decoder,
+stream, timer and device cleanup belongs to the module lifecycle.
+
+Video updates the native image frame while playing, at a bounded cadence. Only
+active visible playback does decoding work; pause, navigation, removal and exit
+must stop owned decoder processes/timers. Playback failures stay inside the media
+module with a usable Open fallback. Tests exercise real fixture decoding and
+native rendering without claiming audible output or actual model inference.
+
+Reference: https://opentui.com/docs/application-apis/audio-streaming/ (checked
+against the installed `@opentui/core` 0.6.6 audio declarations).

package/docs/design/session-presentation-TODO.md

@@ -0,0 +1,55 @@
+# Session media, code and working-state presentation
+
+Requested 2026-10-16 after media generation/store unification.
+
+- [x] Trace browser live/restored session renderer and existing receipt-validated media acquisition.
+- [x] Trace native selected-view activity, action tree, semantic progress and terminal receipts.
+- [x] Render responsive image/video/audio previews in browser session messages/tool actions using project-scoped authenticated HEAD/If-Match/blob acquisition.
+- [x] Preserve explicit paths and validated Open/Download controls; do not activate unvalidated filesystem or external links.
+- [x] Scope syntax token styles to code blocks, fix language aliases/fences and prevent style bleed.
+- [x] Share live/restored action rendering; one parent-turn operation with truthful current phase, measured progress, elapsed time and expandable diagnostics.
+- [x] Match selected child/main activity in the TUI and update stable action nodes across behavior chains without transcript spam.
+- [x] Reject stale/out-of-order receipts, retain daemon Stop ownership and avoid invented progress percentages.
+- [x] Run mocked transport suites, actual browser viewport fixtures, native operation fixtures and typechecks.
+- [x] Commit/push scoped verified source and record exact evidence without touching publishing outputs.
+
+## Progress
+
+- `78e8fd2f`: native working actions retained in parent-turn groups; selected
+  agent owns its footer state. Results/diagnostics collapse, JSON keeps exact
+  values, and one active-only timer replaces only changed groups. Unknown
+  receipts say Returned; blocked/failed/interrupted states remain distinct.
+- Native verification: 45 tests/8 suites, private CLI typecheck, 14 actual VTE
+  checks/14 PNGs. [Receipt](../work-orders/evidence/native-working-state-verification-20261016.json).
+- `a3a03fe6`: source processing progress carries the owning action ID; 13
+  isolated runner tests passed using mocked inference.
+- `0bb6604c`: browser session renderer shares live/restored parent-turn modules with
+  responsive authenticated image/video/audio previews, scoped syntax, lossless
+  JSON display and exact-original Copy. Explicit artifact sets stay authoritative
+  through producer, persistence and both frontends; old paths cannot revive a
+  rejected receipt. Local cached history uses the same renderer. Project
+  hydration rejects stale responses and preserves an explicit newer session
+  selection or New action. Browser verification: 105 tests/7 suites, private
+  CLI no-emit, and 48 actual Chromium fixture checks across 320/768/1440 in
+  both themes passed. [Work order](../work-orders/session-transcript-browser-20261016.md)
+  and [live report](../work-orders/evidence/session-transcript-browser-20261016.json).
+- `43bd1efb`: structured CLI/SSE/persisted events retain exact action IDs, source phases,
+  measured progress and complete redacted results. Model context compaction now
+  returns a separate projection without erasing visible session history.
+  Backend verification: 88 tests/9 files, including the mandatory transport
+  gates, genuine scratch-file reading and child-process framing; CLI no-emit
+  passed. [Receipt](../work-orders/evidence/tool-event-presentation-verification-20261016.json).
+- `fe064023`: canonical browser-to-native restore supports intentional project aliases,
+  validated media blocks and lossless JSON. Native action details use the full
+  operator result independently of clipped model content. Follow-up verification:
+  21 tests/3 suites and private CLI no-emit passed. [Receipt](../work-orders/evidence/session-native-restore-followup-20261016.json).
+- No installed daemon, publishing output, model inference or GPU workload is
+  modified by this source delivery. Fixture checks are not a live-model claim.
+
+## Delivery
+
+Scoped verified commits are delivered on `origin/main`. Counts above overlap
+and must not be summed as a unique workspace total. Chromium uses actual
+production source with controlled session/media/working-state fixtures; no
+real inference or installed-client rollout is claimed. Publishing outputs and
+unrelated changes were preserved.

package/docs/design/update-operation-cancellation.md

@@ -0,0 +1,40 @@
+# Owned update cancellation and restart
+
+The native update dialog stays present while an operation is running. Escape,
+Ctrl+C and outside clicks do not dismiss it. Its top-right Cancel control sends
+an explicit request; it shows cancellation pending until the owned work settles.
+An error remains in the same dialog with a Close action. Ordinary menu dismissal
+and native frame animation remain unchanged for other dialogs.
+
+The initiating client creates a private cancellation capability. Durable update
+state contains only its hash. Cancellation requests carry the exact operation
+identity and require the capability; clients adopting an existing shared update
+receive progress without cancellation authority. The worker observes a private,
+operation-specific request file, aborts its own installer process group, waits for
+process close, and attempts recovery of a daemon it quiesced. Status remains
+`running` during `cancelling` and `recovering`, then becomes `cancelled`. No UI
+client signals an arbitrary recorded PID. Interrupted package changes are
+retained; cancellation never claims package rollback. A recovery failure remains
+explicit in the terminal receipt.
+
+Quick Update waits for durable terminal settlement rather than treating a polling
+timeout as proof of termination. A cancelled transaction does not restart the
+client. Safe task admission, checkpointing, failure resume and the acknowledged
+verified launcher handoff stay in the shared restart flow. The replacement keeps
+the current configuration, environment, arguments, working directory and session
+identity; native interface and transcript persistence are separate checkpoints.
+
+`/update full` is now an alias for the coordinated package, daemon and indicator
+transaction. It no longer automatically updates Ollama, Python, Cloudflared or
+subordinate packages, or deletes global package directories and daemon artifacts.
+Explicit `/update deps`, `/update rebuild`, `/update python`, individual dependency
+menu actions and `/update ollama` remain available. Owned npm/pip maintenance
+commands use the same process-group cancellation mechanism. Interactive privilege
+and system-runtime setup prompts temporarily borrow the terminal through the
+existing explicit handoff; these prompts keep their own terminal controls.
+
+Verification uses scratch state directories, injected installers/service receipts,
+actual native renderer input and harmless Node process groups. It does not install
+an Omnius release, change services, load models or exercise CUDA. POSIX process
+group escalation is tested locally; Windows uses its owned PID's task tree via
+`taskkill`, with a direct-child fallback if that command is unavailable.

package/docs/design/update-session-restoration-TODO.md

@@ -0,0 +1,67 @@
+# Queued next: update lifecycle and exact session restoration
+
+Requested 2026-10-16. Implemented after media unification; source-only delivery,
+with no real installer or running daemon changes during verification.
+
+- [x] Make the update modal non-dismissible by outside click while an update is
+  running. Ordinary modal dismissal must not hide or retire the operation.
+- [x] Provide an explicit top-right Cancel button. Cancellation must stop the
+  owned update operation safely and reflect its actual outcome; do not equate
+  hiding the modal with cancelling the update.
+- [x] Define behavior for Escape and other close shortcuts consistently with
+  the non-dismissible running-update state.
+- [x] Capture the exact interface/session state before update and restore it
+  after reload/restart: active project, session/tabs and selected agent,
+  transcript content and scroll position, draft/cursor, sidebar/layout,
+  expanded sections and other meaningful view state.
+- [x] Resume old sessions from their complete persisted message/tool/media
+  history and saved interface state. Do not substitute a summary for the
+  visible conversation. Model-context compaction and visible history are
+  separate concerns.
+- [x] Identify legacy sessions with incomplete saved history and report actual
+  availability honestly; never invent missing turns.
+- [x] Verify running-update outside-click rejection, explicit cancellation,
+  restart restoration and old-session full-history reconstruction with
+  isolated fixtures plus live terminal interaction tests.
+- [x] Commit and push verified changes, preserving the user's publishing work.
+
+Additional reproduction: the browser dashboard loads the session transcript, but
+resuming that same saved session in the TUI does not restore it. Trace both
+loaders against the same saved session and verify full-history parity.
+
+## Delivery and verification
+
+- `d0832d2b`: versioned native presentation snapshots, all retained agent views,
+  selected view, per-view scroll/disclosures, sidebar geometry, instrument
+  expansions, tab overflow and focus. Expired media Stop actions are removed;
+  unfinished saved media appears Interrupted, while saved artifacts still play.
+- `c1ac73ea`: startup and `/resume` restore the available full visual history,
+  including browser-origin structured conversations and later native
+  continuation. Model context remains separately bounded. Update checkpoints
+  preserve ordered open tabs, empty/unsent drafts and exact UTF-16 cursor,
+  without reviving arbitrary work or overwriting pending-task/queue authority.
+- `f56f935a`: running update modal rejects outside/Escape dismissal, explicit
+  top-right Cancel belongs to its originating operation, and terminal status
+  waits for child settlement/recovery. Shared update followers cannot cancel
+  another client's operation. Full package update now uses the verified Quick
+  package/daemon/indicator transaction; explicit maintenance commands remain.
+- Native presentation: 47 tests/7 suites, plus 13 real VTE checks/12 PNGs with
+  fresh frontend reconstruction from a disk checkpoint.
+  [Receipt](../work-orders/evidence/native-interface-state-verification-20261016.json).
+- Full-history resume: 52 tests/8 suites, including actual disk documents and
+  production interactive closure execution.
+- Root update checkpoint integration: 40 tests/2 suites, including ordered
+  unsent tabs, active agent preservation and pending/queued authority isolation.
+- Updater cancellation: 179 tests/14 suites, including actual harmless
+  subprocess-group termination and native modal interaction.
+  [Receipt](../work-orders/evidence/update-operation-cancellation-20261016.json).
+- Counts overlap across receipts; do not add them as a unique total. Private
+  CLI typechecks passed. Workspace dependency artifacts briefly disappeared
+  during the user's concurrent publishing build; affected tests were rerun
+  after those outputs returned. No shared build was performed by this task.
+- Existing missing/truncated legacy history cannot be invented. Execution
+  callbacks and external editor processes are not serialized; restored agent
+  displays do not assert that a previous worker is still running.
+
+- `a20ec6cf`: returned operation capability must match before Cancel is offered;
+  a failed installer/recovery receipt remains a failure after a Stop request.