omnius 1.0.869 → 1.0.871

package/docs/DISCOVERY.md

@@ -162,7 +162,8 @@ Daemon equivalents are `GET /v1/discovery/bootstrap`, `GET /v1/discovery?q=<inte
 | `api.v1-mcps-name` | /v1/mcps/{name} | Get MCP server details (PT-03) |
 | `api.v1-mcps-name-call` | /v1/mcps/{name}/call | Invoke a tool on an MCP server (PT-03) |
 | `api.v1-media-audio` | /v1/media/audio | Generate sound — body {projectRoot,prompt,request_id?,session_id?,model?,backend?,duration?,seed?} |
-| `api.v1-media-av-analyze` | /v1/media/av/analyze | Analyze a media file into a grounded entity/event/evidence answer (AV entity-comprehension) — body {path\|mediaUri, question?}; reports per-role live-vs-mock adapter status |
+| `api.v1-media-av-analyze` | /v1/media/av/analyze | Analyze actual audio/video with the configured Omni comprehension runtime |
+| `api.v1-media-av-status` | /v1/media/av/status | Inspect configured Omni adapter availability without loading weights |
 | `api.v1-media-file` | /v1/media/file | Stream an exact artifact — query {projectRoot,kind,name} or {scope:'legacy-global',kind,name}; Validate exact project/archive identity, MIME and ETag before acquisition; Delete a selected project artifact or explicit legacy copy and matching metadata |
 | `api.v1-media-gallery` | /v1/media/gallery | Discover existing artifacts in a registered project, or the explicit legacy global archive |
 | `api.v1-media-generations-cancel` | /v1/media/generations/cancel | Request daemon-owned Stop — JSON {projectRoot,request_id\|generation_id,session_id?} |
@@ -435,7 +436,9 @@ Daemon equivalents are `GET /v1/discovery/bootstrap`, `GET /v1/discovery?q=<inte
 | `guide.design-dashboard-todo-uppercase` | Dashboard reconstruction — durable TODO | Updated: 2026-10-16. Contract: styleguide. Scope and sequence: plan. |
 | `guide.design-media-unification-design` | Unified media: project artifacts, shared models, deliberate presentation | Status: implementation contract, 2026-10-16. Follows the delivered dashboard reconstruction (6cfaebbd). Track verification in media-unification-TODO.md. |
 | `guide.design-media-unification-todo-uppercase` | Next phase: media storage and generation interface unification | Requested 2026-10-16. Active after dashboard reconstruction delivery 6cfaebbd. Contract: media unification design. The preceding dashboard receipt does not count as verification of this phase. |
+| `guide.design-omni-analysis-todo-uppercase` | Real Omni analysis | Acceptance: Audio, Video, and Audio/video Analysis must submit actual media to the Omni comprehension runtime. Missing weights or an unavailable runtime must never yield synthetic scene entities, events, or a successful mock answer. |
 | `guide.design-session-presentation-todo-uppercase` | Session media, code and working-state presentation | Requested 2026-10-16 after media generation/store unification. |
+| `guide.design-single-final-response-todo-uppercase` | One final response per run | Requested after the retained generation panel, completion tool arguments, and final receipt displayed the same answer three times, with the final copy losing Markdown structure. |
 | `guide.design-update-operation-cancellation` | Owned update cancellation and restart | The native update dialog stays present while an operation is running. Escape, Ctrl+C and outside clicks do not dismiss it. Its top-right Cancel control sends an explicit request; it shows cancellation pending until the owned work settles. An error remains in the same dialog with a Close action. Ordinary menu dismissal and native frame animation remain unchan |
 | `guide.design-update-session-restoration-todo-uppercase` | Queued next: update lifecycle and exact session restoration | Requested 2026-10-16. Implemented after media unification; source-only delivery, with no real installer or running daemon changes during verification. |
 | `guide.discovery-agent-map` | Agent Map | Bundled Omnius documentation artifact: docs/discovery/agent-map.json. |
@@ -494,7 +497,8 @@ Daemon equivalents are `GET /v1/discovery/bootstrap`, `GET /v1/discovery?q=<inte
 | `guide.proposals-opencode-modules-runner` | Runner | Bundled Omnius documentation artifact: docs/proposals/opencode-modules/runner.ts. |
 | `guide.reference-auth-map` | Authentication And Authorization Map | Omnius has two separate credential boundaries: |
 | `guide.reference-configuration` | Configuration Reference | Configuration is layered from environment, global user settings, project settings, and active TUI state. |
-| `guide.reference-rest-api` | REST API Reference | This is the maintained human inventory for the supported Omnius daemon API. The machine contract is generated by packages/cli/src/api/openapi.ts and served at /openapi.json; every operation in that contract must appear here, and the generated REST block in the root README must match this file byte-for-byte after heading normalization. Browser HTML routes and |
+| `guide.reference-omni-analysis` | Omni media analysis | Omnius uses an explicitly configured Omni adapter for genuine audio and video comprehension. A model name containing -omni does not add audio/video execution to stock Ollama: the adapter must decode the media and run the corresponding model/projector weights. An unavailable runtime is an unavailable capability, never a reason to substitute synthetic observat |
+| `guide.reference-rest-api` | REST API Reference | This is the maintained human inventory for the supported Omnius daemon API. The machine contract is generated by packages/cli/src/api/openapi.ts and served at /openapi.json; every operation in that contract must appear here. The root README links to this inventory and stays focused on the system overview. Browser HTML routes and implementation-only compatibi |
 | `guide.reference-slash-commands` | Slash Commands | This file is generated from packages/cli/src/tui/command-registry.ts. |
 | `guide.research-aiwg-long-horizon-feature-workflow` | AIWG research teams and long-horizon feature delivery | Date: 2026-09-05. Status: design research for consolidation; no runtime implementation in this note. |
 | `guide.research-archived-context-window-attention-model` | Context Window Attention Model | Bundled Omnius documentation artifact: docs/research/_archived/context_window_attention_model.py. |
@@ -559,6 +563,9 @@ Daemon equivalents are `GET /v1/discovery/bootstrap`, `GET /v1/discovery?q=<inte
 | `guide.work-orders-evidence-fallback-model-benchmarks-20261012` | Fallback Model Benchmarks 20261012 | Bundled Omnius documentation artifact: docs/work-orders/evidence/fallback-model-benchmarks-20261012.json. |
 | `guide.work-orders-evidence-fallback-quality-installed-20261012` | Fallback Quality Installed 20261012 | Bundled Omnius documentation artifact: docs/work-orders/evidence/fallback-quality-installed-20261012.json. |
 | `guide.work-orders-evidence-fallback-reply-contracts-installed-20261012` | Fallback Reply Contracts Installed 20261012 | Bundled Omnius documentation artifact: docs/work-orders/evidence/fallback-reply-contracts-installed-20261012.json. |
+| `guide.work-orders-evidence-final-reply-browser-20261016` | Final Reply Browser 20261016 | Bundled Omnius documentation artifact: docs/work-orders/evidence/final-reply-browser-20261016.json. |
+| `guide.work-orders-evidence-final-reply-dark-1440-accepted-final` | Final Reply Dark 1440 Accepted Final | Bundled Omnius documentation artifact: docs/work-orders/evidence/final-reply-dark-1440-accepted-final.png. |
+| `guide.work-orders-evidence-final-reply-light-320-accepted-final` | Final Reply Light 320 Accepted Final | Bundled Omnius documentation artifact: docs/work-orders/evidence/final-reply-light-320-accepted-final.png. |
 | `guide.work-orders-evidence-genuine-opencode-access-repair-20261014` | Genuine Opencode Access Repair 20261014 | Bundled Omnius documentation artifact: docs/work-orders/evidence/genuine-opencode-access-repair-20261014.json. |
 | `guide.work-orders-evidence-inference-device-policy-readonly-20261016` | Inference Device Policy Readonly 20261016 | Bundled Omnius documentation artifact: docs/work-orders/evidence/inference-device-policy-readonly-20261016.json. |
 | `guide.work-orders-evidence-installed-fallback-verification-20261012` | Installed Fallback Verification 20261012 | Bundled Omnius documentation artifact: docs/work-orders/evidence/installed-fallback-verification-20261012.json. |
@@ -569,6 +576,18 @@ Daemon equivalents are `GET /v1/discovery/bootstrap`, `GET /v1/discovery?q=<inte
 | `guide.work-orders-evidence-instrument-80x24` | Instrument 80x24 | Bundled Omnius documentation artifact: docs/work-orders/evidence/instrument-80x24.png. |
 | `guide.work-orders-evidence-instrument-clean-transcript-120x36` | Instrument Clean Transcript 120x36 | Bundled Omnius documentation artifact: docs/work-orders/evidence/instrument-clean-transcript-120x36.png. |
 | `guide.work-orders-evidence-instrument-collapse-120x36` | Instrument Collapse 120x36 | Bundled Omnius documentation artifact: docs/work-orders/evidence/instrument-collapse-120x36.png. |
+| `guide.work-orders-evidence-instrument-completion-live-20261016-completion-failed-partial` | Completion Failed Partial | Bundled Omnius documentation artifact: docs/work-orders/evidence/instrument-completion-live-20261016/completion-failed-partial.png. |
+| `guide.work-orders-evidence-instrument-completion-live-20261016-completion-final-100x30` | Completion Final 100x30 | Bundled Omnius documentation artifact: docs/work-orders/evidence/instrument-completion-live-20261016/completion-final-100x30.png. |
+| `guide.work-orders-evidence-instrument-completion-live-20261016-completion-final-120x36` | Completion Final 120x36 | Bundled Omnius documentation artifact: docs/work-orders/evidence/instrument-completion-live-20261016/completion-final-120x36.png. |
+| `guide.work-orders-evidence-instrument-completion-live-20261016-completion-final-160x48` | Completion Final 160x48 | Bundled Omnius documentation artifact: docs/work-orders/evidence/instrument-completion-live-20261016/completion-final-160x48.png. |
+| `guide.work-orders-evidence-instrument-completion-live-20261016-completion-final-60x20` | Completion Final 60x20 | Bundled Omnius documentation artifact: docs/work-orders/evidence/instrument-completion-live-20261016/completion-final-60x20.png. |
+| `guide.work-orders-evidence-instrument-completion-live-20261016-completion-final-80x24` | Completion Final 80x24 | Bundled Omnius documentation artifact: docs/work-orders/evidence/instrument-completion-live-20261016/completion-final-80x24.png. |
+| `guide.work-orders-evidence-instrument-completion-live-20261016-completion-final-clean` | Completion Final Clean | Bundled Omnius documentation artifact: docs/work-orders/evidence/instrument-completion-live-20261016/completion-final-clean.png. |
+| `guide.work-orders-evidence-instrument-completion-live-20261016-completion-live-clean` | Completion Live Clean | Bundled Omnius documentation artifact: docs/work-orders/evidence/instrument-completion-live-20261016/completion-live-clean.png. |
+| `guide.work-orders-evidence-instrument-completion-live-20261016-completion-paused-partial` | Completion Paused Partial | Bundled Omnius documentation artifact: docs/work-orders/evidence/instrument-completion-live-20261016/completion-paused-partial.png. |
+| `guide.work-orders-evidence-instrument-completion-live-20261016-completion-restored-clean` | Completion Restored Clean | Bundled Omnius documentation artifact: docs/work-orders/evidence/instrument-completion-live-20261016/completion-restored-clean.png. |
+| `guide.work-orders-evidence-instrument-completion-live-20261016-completion-technical-expanded` | Completion Technical Expanded | Bundled Omnius documentation artifact: docs/work-orders/evidence/instrument-completion-live-20261016/completion-technical-expanded.png. |
+| `guide.work-orders-evidence-instrument-completion-live-20261016-report` | Report | Bundled Omnius documentation artifact: docs/work-orders/evidence/instrument-completion-live-20261016/report.json. |
 | `guide.work-orders-evidence-instrument-devices-expanded-120x36` | Instrument Devices Expanded 120x36 | Bundled Omnius documentation artifact: docs/work-orders/evidence/instrument-devices-expanded-120x36.png. |
 | `guide.work-orders-evidence-instrument-divider-collapsed-160x48` | Instrument Divider Collapsed 160x48 | Bundled Omnius documentation artifact: docs/work-orders/evidence/instrument-divider-collapsed-160x48.png. |
 | `guide.work-orders-evidence-instrument-divider-resized-160x48` | Instrument Divider Resized 160x48 | Bundled Omnius documentation artifact: docs/work-orders/evidence/instrument-divider-resized-160x48.png. |
@@ -646,6 +665,7 @@ Daemon equivalents are `GET /v1/discovery/bootstrap`, `GET /v1/discovery?q=<inte
 | `guide.work-orders-evidence-kilo-production-compatibility-20261012` | Kilo Production Compatibility 20261012 | Bundled Omnius documentation artifact: docs/work-orders/evidence/kilo-production-compatibility-20261012.json. |
 | `guide.work-orders-evidence-local-admission-provider-regression-20261014` | Local Admission Provider Regression 20261014 | Bundled Omnius documentation artifact: docs/work-orders/evidence/local-admission-provider-regression-20261014.json. |
 | `guide.work-orders-evidence-local-recovery-production-routes-20261014` | Local Recovery Production Routes 20261014 | Bundled Omnius documentation artifact: docs/work-orders/evidence/local-recovery-production-routes-20261014.json. |
+| `guide.work-orders-evidence-native-completion-presentation-verification-20261016` | Native Completion Presentation Verification 20261016 | Bundled Omnius documentation artifact: docs/work-orders/evidence/native-completion-presentation-verification-20261016.json. |
 | `guide.work-orders-evidence-native-conversation-prompt-audit-20261012` | Native Conversation Prompt Audit 20261012 | Bundled Omnius documentation artifact: docs/work-orders/evidence/native-conversation-prompt-audit-20261012.json. |
 | `guide.work-orders-evidence-native-goal-contract-probe-20261012` | Native Goal Contract Probe 20261012 | Bundled Omnius documentation artifact: docs/work-orders/evidence/native-goal-contract-probe-20261012.json. |
 | `guide.work-orders-evidence-native-interface-state-verification-20261016` | Native Interface State Verification 20261016 | Bundled Omnius documentation artifact: docs/work-orders/evidence/native-interface-state-verification-20261016.json. |
@@ -670,6 +690,13 @@ Daemon equivalents are `GET /v1/discovery/bootstrap`, `GET /v1/discovery?q=<inte
 | `guide.work-orders-evidence-native-tui-semantic-components-20261015` | Native Tui Semantic Components 20261015 | Bundled Omnius documentation artifact: docs/work-orders/evidence/native-tui-semantic-components-20261015.json. |
 | `guide.work-orders-evidence-native-tui-targeted-verification-20261015` | Native Tui Targeted Verification 20261015 | Bundled Omnius documentation artifact: docs/work-orders/evidence/native-tui-targeted-verification-20261015.json. |
 | `guide.work-orders-evidence-native-working-state-verification-20261016` | Native Working State Verification 20261016 | Bundled Omnius documentation artifact: docs/work-orders/evidence/native-working-state-verification-20261016.json. |
+| `guide.work-orders-evidence-omni-analysis-browser-20261017` | Omni Analysis Browser 20261017 | Bundled Omnius documentation artifact: docs/work-orders/evidence/omni-analysis-browser-20261017.json. |
+| `guide.work-orders-evidence-omni-analysis-desktop-controls-20261017` | Omni Analysis Desktop Controls 20261017 | Bundled Omnius documentation artifact: docs/work-orders/evidence/omni-analysis-desktop-controls-20261017.png. |
+| `guide.work-orders-evidence-omni-analysis-desktop-evidence-20261017` | Omni Analysis Desktop Evidence 20261017 | Bundled Omnius documentation artifact: docs/work-orders/evidence/omni-analysis-desktop-evidence-20261017.png. |
+| `guide.work-orders-evidence-omni-analysis-execution-verification-20261017` | Omni Analysis Execution Verification 20261017 | Bundled Omnius documentation artifact: docs/work-orders/evidence/omni-analysis-execution-verification-20261017.json. |
+| `guide.work-orders-evidence-omni-analysis-integration-verification-20261017` | Omni Analysis Integration Verification 20261017 | Bundled Omnius documentation artifact: docs/work-orders/evidence/omni-analysis-integration-verification-20261017.json. |
+| `guide.work-orders-evidence-omni-analysis-phone-controls-20261017` | Omni Analysis Phone Controls 20261017 | Bundled Omnius documentation artifact: docs/work-orders/evidence/omni-analysis-phone-controls-20261017.png. |
+| `guide.work-orders-evidence-omni-analysis-phone-model-20261017` | Omni Analysis Phone Model 20261017 | Bundled Omnius documentation artifact: docs/work-orders/evidence/omni-analysis-phone-model-20261017.png. |
 | `guide.work-orders-evidence-opencode-all-free-audit-20261012` | Opencode All Free Audit 20261012 | Bundled Omnius documentation artifact: docs/work-orders/evidence/opencode-all-free-audit-20261012.json. |
 | `guide.work-orders-evidence-opencode-all-free-installed-verification-20261012` | Opencode All Free Installed Verification 20261012 | Bundled Omnius documentation artifact: docs/work-orders/evidence/opencode-all-free-installed-verification-20261012.json. |
 | `guide.work-orders-evidence-opencode-installed-production-stream-live-20261012` | Opencode Installed Production Stream Live 20261012 | Bundled Omnius documentation artifact: docs/work-orders/evidence/opencode-installed-production-stream-live-20261012.json. |
@@ -720,6 +747,7 @@ Daemon equivalents are `GET /v1/discovery/bootstrap`, `GET /v1/discovery?q=<inte
 | `guide.work-orders-evidence-tray-projects-long-menu` | Tray Projects Long Menu | Bundled Omnius documentation artifact: docs/work-orders/evidence/tray-projects-long-menu.png. |
 | `guide.work-orders-evidence-tray-projects-menu` | Tray Projects Menu | Bundled Omnius documentation artifact: docs/work-orders/evidence/tray-projects-menu.png. |
 | `guide.work-orders-evidence-tui-local-admission-live-20261014` | Tui Local Admission Live 20261014 | Bundled Omnius documentation artifact: docs/work-orders/evidence/tui-local-admission-live-20261014.json. |
+| `guide.work-orders-evidence-tui-response-ownership-verification-20261016` | Tui Response Ownership Verification 20261016 | Bundled Omnius documentation artifact: docs/work-orders/evidence/tui-response-ownership-verification-20261016.json. |
 | `guide.work-orders-evidence-update-operation-cancellation-20261016` | Update Operation Cancellation 20261016 | Bundled Omnius documentation artifact: docs/work-orders/evidence/update-operation-cancellation-20261016.json. |
 | `guide.work-orders-evidence-web-instrument-dark-desktop-20261016` | Web Instrument Dark Desktop 20261016 | Bundled Omnius documentation artifact: docs/work-orders/evidence/web-instrument-dark-desktop-20261016.png. |
 | `guide.work-orders-evidence-web-instrument-dark-phone-20261016` | Web Instrument Dark Phone 20261016 | Bundled Omnius documentation artifact: docs/work-orders/evidence/web-instrument-dark-phone-20261016.png. |

package/docs/design/omni-analysis-TODO.md

@@ -0,0 +1,60 @@
+# Real Omni analysis
+
+Acceptance: Audio, Video, and Audio/video Analysis must submit actual media to
+the Omni comprehension runtime. Missing weights or an unavailable runtime must
+never yield synthetic scene entities, events, or a successful mock answer.
+
+## Findings
+
+- The production AV registry seeded deterministic mock adapters. The browser
+  modes sent identical requests, and any live role labeled the entire result live.
+- The old Python sidecar implements detection/tracking only; it cannot make its
+  advertised semantic roles real merely by downloading weights.
+- The reference `qwen-omni-adapters-main` runtime exposes adapter v1 on `/api/chat`.
+  Its model response echoes the request and is not runtime identity attestation.
+- Read-only inspection found an existing Ornith Omni bridge on GPU 1. This differs
+  from the earlier GPU 0/Qwen instruction. The user selected that existing Ornith/GPU 1 lane for live verification.
+  Actual placement and manifest identity were verified before inference; no service changed.
+
+## Work
+
+- [x] Delegate discovery across browser, execution, and reference runtime.
+- [x] Implement one bounded, cancellable Omni media client with real input
+  conversion, strict adapter/provenance validation, and explicit configuration.
+- [x] Remove implicit production mock fallback; keep explicit offline fixtures.
+- [x] Route the native AV tool and browser modes through the same client.
+- [x] Show model configuration/readiness and distinct transcript/audio/visual
+  evidence; do not claim continuous live capture for a local-file form.
+- [x] Preserve project/session/request identity and same-origin authenticated API.
+- [x] Document shared weight ownership, runtime configuration, and limitations.
+- [x] Verify client, route, frontend, and required chat transport regressions.
+- [x] Exercise the source-bundled browser in a private fixture server.
+- [x] Perform live inference only after exact endpoint/model/GPU verification.
+- [x] Commit scoped source changes and push the tracked main branch.
+
+## Delivery boundaries
+
+Do not overwrite unrelated dirty work, shared build outputs, publishing artifacts,
+or restart the user's running daemon. Test fixtures may simulate the upstream
+contract but must never be reachable as production fallback adapters.
+
+## Verification and remaining model limitations
+
+- Execution: 71 tests across 9 suites; CLI source routes and required chat
+  transport: 76 tests across 5 suites. Final route/browser runtime rerun: 54 tests
+  across 2 suites, including the additional project-alias regression.
+- Private source Chromium: 36 checks across desktop/tablet/phone and both themes.
+- CLI + execution source typecheck passed without shared build output.
+- Seven genuine requests used the approved existing Ornith adapter on GPU 1.
+  Red → blue → red freshness and speech in audio-only/combined video passed.
+- **Model quality remains imperfect:** the deployed Ornith bridge missed a real
+  440 Hz tone, and one combined answer contradicted its correct blue-screen
+  observation. These failures were preserved; no mock answer or alternate model
+  was substituted. Improving those weights is a separate model-quality repair.
+- Publishing and daemon state were preserved. Configure the deployed process as
+  documented in [Omni analysis](../reference/omni-analysis.md).
+
+Receipts:
+[execution](../work-orders/evidence/omni-analysis-execution-verification-20261017.json),
+[browser](../work-orders/evidence/omni-analysis-browser-20261017.json),
+[integration and live results](../work-orders/evidence/omni-analysis-integration-verification-20261017.json).

package/docs/design/single-final-response-TODO.md

@@ -0,0 +1,93 @@
+# One final response per run
+
+Requested after the retained generation panel, completion tool arguments, and
+final receipt displayed the same answer three times, with the final copy losing
+Markdown structure.
+
+## Presentation contract
+
+- Preserve the accepted assistant reply, including paragraphs, lists, indentation,
+  code fences, tables and exact JSON values. Storage summaries remain separate.
+- Show one expanded final answer per run/agent. Do not promote proposed
+  `task_complete` arguments before acceptance.
+- Keep generation handling, retries, raw contracts and operational receipts in
+  compact disclosures. Successful settlement must not leave a second expanded
+  answer; explicit inspection can still reveal retained diagnostics.
+- Preserve real partial output and truthful failed/interrupted states. Do not
+  infer acceptance from a tool name, tool-call arguments, or matching prose.
+- Use stable document ownership rather than deleting nearby matching text.
+- Carry the same accepted reply through JSON mode, browser delivery, persistence
+  and TUI resume. Avoid duplicate native media previews and playback.
+
+## Work
+
+- [x] Parallel review of native generation/completion, main/child event paths,
+  CLI/browser transport, formatting sanitizers, and restoration.
+- [x] Format-preserving user-reply sanitizer and accepted-reply JSON selection.
+- [x] Main/child response ownership and removal of redundant lifecycle output.
+- [x] Settled inference disclosures and a minimal rich final document.
+- [x] Canonical resume excludes successful completion-control copies while
+  retaining rejected completion evidence.
+- [x] Browser waits for accepted output rather than promoting tool arguments.
+- [x] Guard duplicate media rendering/playback owned by native modules.
+- [x] Meaningful regressions, mandatory transport suites, private typecheck and
+  actual terminal fixture verification.
+- [x] Scoped commits and push to `origin/main`; record receipts and limits.
+
+## Boundaries
+
+Keep unrelated dirty work and publishing outputs intact. No model inference,
+model loading, installed-client replacement or production-daemon changes are
+needed to verify this presentation repair. Test fixtures must identify mocked
+inference separately from actual terminal/browser rendering.
+
+## Verified changes
+
+- `66e68437`: canonical session restore keeps one rich assistant reply and omits
+  successful completion-control copies; rejected or unknown outcomes remain
+  collapsed evidence. Old imported copies are retired by exact block identity.
+  Nine session restore tests passed.
+- `c6de96d6`: format-preserving accepted-reply selection across CLI, API,
+  persisted browser sessions and live browser delivery. Removed speculative
+  completion-call promotion and automatic post-answer follow-up inference.
+  Verification: 85 tests/6 suites including mandatory transport checks, 54
+  actual Chromium fixture checks, and CLI no-emit passed.
+  [Browser receipt](../work-orders/evidence/final-reply-browser-20261016.json).
+- `ab17b145`: active technical chatter collapses; settled generation becomes a
+  compact disclosure; final output is a rich document with a small receipt.
+  Fixed blank finalized native Markdown, preserved failed/interrupted partials,
+  and migrated old saved generation panels. Verification: 60 tests/9 suites,
+  12 actual VTE checks across five sizes, and CLI no-emit passed.
+  [Native receipt](../work-orders/evidence/native-completion-presentation-verification-20261016.json).
+- `4a3f1153`: README reduced from 893 to 101 lines of structural overview.
+  Removed free-provider/fallback copy, release detail and repeated inventory;
+  the sync script now retains a short link to the canonical API reference.
+  REST inventory, README sync, manifest, example checks and two endpoint tests
+  passed. Full `docs:check` reports stale generated slash-command documentation;
+  a separate discovery check also reports stale `docs/DISCOVERY.*`. Those
+  unrelated generated files were not overwritten or staged.
+
+Test counts overlap and are not a unique repository-wide total. Live UI checks
+use controlled events and owned fixture files; they do not perform inference.
+
+- `717e54c9`: main and child response ownership preserves the accepted document,
+  fences late events after interruption/reused child views, removes text-match
+  deletion, and avoids duplicate native media preview/playback. Session-context
+  persistence retains the complete formatted reply instead of flattening/capping
+  it at 1,200 characters. Focused lifecycle verification: 97 tests/10 files and
+  CLI no-emit passed. Root integration rerun: 20 tests/4 files and a separate
+  CLI no-emit passed.
+  [Lifecycle receipt](../work-orders/evidence/tui-response-ownership-verification-20261016.json).
+
+## Delivery limits
+
+Completed source commits are pushed to `origin/main`; installed clients,
+services, shared build outputs and publishing artifacts are unchanged.
+Externally launched subprocesses still expose their raw process logs. They are
+not treated as structured accepted-response receipts; the current Omnius child
+prints one corrected final, but arbitrary older/external programs are not
+rewritten or deduplicated heuristically.
+
+The root integration rerun reported a scratch-directory teardown warning from
+an asynchronous identity save; all assertions passed. It did not perform model
+inference. Full documentation drift checks remain limited as recorded above.

package/docs/reference/omni-analysis.md

@@ -0,0 +1,251 @@
+# Omni media analysis
+
+Omnius uses an explicitly configured Omni adapter for genuine audio and video
+comprehension. A model name containing `-omni` does not add audio/video
+execution to stock Ollama: the adapter must decode the media and run the
+corresponding model/projector weights. An unavailable runtime is an unavailable
+capability, never a reason to substitute synthetic observations.
+
+## Runtime and model identity
+
+The supported wire contract is `robit.ollama.omni-adapter.v1`, implemented by
+[qwen-omni-adapters](https://github.com/robit-man/qwen-omni-adapters). Its public
+model is a logical bundle. The legacy full bundle runs separate comprehension,
+language and speech graphs across a semantic-text boundary. The trained audio
+bridge runs the selected language trunk and its combined vision/audio projector
+in one llama.cpp server, with Qwen3-TTS available separately. Neither profile is
+a claim that incompatible hidden states form one monolithic graph.
+
+| Profile | Exact logical tag | Documented artifact size |
+| --- | --- | --- |
+| Qwen audio bridge | `robit/qwen3.8-27b-e03-obliterated-omni-audio-bridge:q4km` | 18.33 GiB |
+| Ornith audio bridge | `robit/ornith-1.5-omni-audio-bridge:q4km` | 8.15 GiB |
+| Legacy full Qwen Omni | `robit/qwen3.8-27b-e03-obliterated-omni:q4km` | Separate full comprehension graph and sidecar |
+
+These are distinct profiles. Selecting Qwen must not silently run Ornith.
+Artifact size is neither peak VRAM nor an admission guarantee.
+
+## Omnius configuration
+
+Configure the daemon/client environment for the already verified deployment:
+
+```bash
+export OMNIUS_OMNI_ADAPTER_URL=http://127.0.0.1:8910
+export OMNIUS_OMNI_MODEL=robit/ornith-1.5-omni-audio-bridge:q4km
+```
+
+This example names Ornith explicitly; use the exact Qwen tag only with an
+endpoint actually deployed with that profile. Setting these variables does not
+download, load or switch the server's model.
+
+| Variable | Behavior |
+| --- | --- |
+| `OMNIUS_OMNI_ADAPTER_URL` | HTTP(S) **base URL**, default `http://127.0.0.1:8910`; omit `/api/chat`, query and fragment |
+| `OMNIUS_OMNI_MODEL` | Required exact logical `-omni` tag; no model is discovered or selected implicitly |
+| `OMNI_OLLAMA_MODEL` | Inherited compatibility model value when `OMNIUS_OMNI_MODEL` is absent |
+| `OMNIUS_OMNI_ADAPTER_TOKEN` | Optional bearer token for an authenticated adapter boundary; keep secret |
+
+An explicitly requested model must match this server-controlled tag. An
+unconfigured, mismatched or unreachable runtime returns a visible error; it
+does not invoke a different model or synthesize evidence. The shared client
+`packages/execution/src/av/omni-comprehension.ts` exposes
+`getOmniAnalysisStatus()` and `analyzeOmniMedia({path, mode, question?, model?,
+signal?})`; its modes are `audio`, `video` and `av`.
+
+The client accepts a regular local media file up to 128 MiB, a finite audio
+duration up to 60 seconds or video duration up to 32 seconds, and a question up
+to 8192 characters. It rejects longer input rather than implicitly clipping it.
+CPU FFmpeg normalization produces 16 kHz PCM16 WAV or 1 fps MP4 fitted within
+640 × 640 pixels while preserving aspect ratio; `video` omits audio and `av`
+includes the source audio when present.
+Normalized media is capped at 32 MiB, adapter JSON at 1 MiB, and each returned
+text field at 128 Ki characters. FFmpeg and ffprobe must already be installed;
+analysis does not install dependencies.
+
+Status includes `modelIdentityVerified: false`: availability is a compatible
+configuration handshake, not weight identity, GPU residency or a completed
+inference proof.
+
+The reference adapter's `/healthz` and `/api/omni/adapter/contract` expose the
+schema and configured stages, **not the identity of loaded weights**. Its
+response `model` echoes the caller's logical tag. The optional
+`adapter.language_backend_model` can be only an internal alias such as
+`local-audio-bridge`. Those fields do not prove that the requested weights ran.
+Bind an endpoint to its operator-verified deployment, model/projector manifest
+digests and actual accelerator placement before interpreting model results.
+
+## Endpoint contract
+
+Use the adapter's own endpoint, not the ordinary Ollama endpoint or the Omnius
+daemon. The reference launcher uses these loopback addresses:
+
+| Address | Purpose |
+| --- | --- |
+| `http://127.0.0.1:8910/api/chat` | Portable nonstreaming Omni requests |
+| `http://127.0.0.1:8910/api/chat/stream` | Adapter NDJSON extension |
+| `http://127.0.0.1:8910/healthz` | Adapter metadata only |
+| `http://127.0.0.1:8910/api/omni/adapter/contract` | Versioned capability/format metadata |
+| `http://127.0.0.1:8901/v1/chat/completions` | Internal llama.cpp worker; not the portable adapter API |
+| `http://127.0.0.1:8920` | Separate authenticated reference portal |
+
+Port `11435` is already used by the Omnius daemon in common installations.
+Some standalone adapter/client defaults also name that port; do not copy those
+defaults over a running Omnius service. Component services bind to loopback.
+Use an authenticated boundary when exposing them beyond the trusted host, and
+never put a portal capability URL or access token in logs or documentation.
+
+Read-only contract checks do not load a model:
+
+```bash
+curl --fail --silent http://127.0.0.1:8910/healthz
+curl --fail --silent http://127.0.0.1:8910/api/omni/adapter/contract
+```
+
+Do not treat successful health checks as successful media inference.
+
+## Requests and results
+
+The portable route requires `stream: false`, an exact `model`, and nonempty
+Ollama-shaped `messages`. Set `think: false` independently of media handling.
+Ordinary analysis requests use text output and `speech_mode: "never"`.
+
+```json
+{
+  "model": "robit/ornith-1.5-omni-audio-bridge:q4km",
+  "messages": [{
+    "role": "user",
+    "content": "Describe the audible events and their uncertainty.",
+    "audios": [{
+      "mime_type": "audio/wav",
+      "encoding": "base64",
+      "data": "<complete 16 kHz mono PCM16 WAV, base64 encoded>"
+    }]
+  }],
+  "omni": {
+    "schema": "robit.ollama.omni-adapter.v1",
+    "task": "describe",
+    "include_audio_from_video": true
+  },
+  "response_modalities": ["text"],
+  "speech_mode": "never",
+  "think": false,
+  "cache_prompt": false,
+  "stream": false
+}
+```
+
+This is a contract example, not a request to run without hardware preflight.
+
+| Task | Executed stages |
+| --- | --- |
+| `describe` | Media comprehension; direct observations |
+| `transcribe` | Audio comprehension; direct transcription |
+| `chat` | Media comprehension, then language analysis; optional speech only if requested |
+| `synthesize` | Speech synthesis from text |
+
+The reference comprehension worker always receives `cache_prompt: false`.
+Multimodal slot caching can otherwise reuse stale embeddings across new media.
+Keep new attachments request-local. Historical transcript/observations can be
+explicitly labeled history; restored previews and old raw bytes must not become
+new current evidence automatically.
+
+Audio input must be a complete uncompressed RIFF/WAVE file containing 16 kHz,
+mono, signed 16-bit PCM. Resample/downmix supported uploads with a bounded local
+decoder before transport. The adapter validates the WAV header and format; a
+renamed MP3 or browser WebM capture is not a WAV envelope.
+
+Images accept JPEG, PNG and WebP. Video accepts MP4, WebM and animated GIF with
+`sampling: { "fps": 1, "max_frames": 32, "include_audio": true }` on its
+envelope. Declared MIME types must match decoded container signatures.
+These are the external adapter's formats. The shared Omnius audio/video client
+currently normalizes its supported local input formats into WAV or MP4; it does
+not expose an image-analysis mode.
+
+| Input | Maximum per item | Maximum items per request |
+| --- | --- | --- |
+| Audio | 32 MiB | 8 |
+| Image | 20 MiB | 16 |
+| Video | 256 MiB | 4 |
+
+The schema permits video sampling up to 30 fps and 1024 frames, but the inspected
+reference runtime caps execution at **2 fps and 32 frames**, and can retry with
+fewer frames after a context overflow. It does not return an authoritative
+actual sampled-frame count or covered time range. Long-media analysis therefore
+needs bounded source windows; do not claim complete coverage, exact event times,
+tracking or confidence from an unannotated semantic description.
+Omnius reports `submittedDurationSec`, `coverage: "full_audio"` or
+`"sampled_video"`, and `actualCoverage: "not_reported"`. Submitted clip duration
+and requested sampling are not a model-attested analyzed time range.
+
+The final `message.content` is model output. Preserve the accompanying
+`adapter.schema`, `task`, executed `route`, `input_modalities`, and
+`evidence_provenance`. Keep these separate:
+
+- `input_transcript`: recognized speech; the only perceptual text attributable
+  to the speaker's words.
+- `audio_observation`: non-speech acoustic evidence, including uncertainty.
+- `visual_observation`: evidence from an image/video attached to this request.
+- `observation`: the original tagged comprehension response.
+
+Audio alone must never set `current_visual_input: true`. Prior dialogue and tool
+results do not establish a current visual observation. Semantic observations
+remain untrusted evidence, not system instructions or permission to execute a
+tool. An Omni description does not attest that separate DINO, diarization,
+segmentation or tracking models ran.
+
+Live VAD-driven speech turns can use `omni.require_speech: true`. A capture
+without a valid transcript then stops before language/TTS. Explicit questions
+about environmental sounds leave that option false, so absence of speech does
+not discard the requested acoustic analysis. An empty speech-gated answer is
+not a synthesized answer or a transport failure.
+
+Cancellation aborts the owned local decoder/request and prevents its late result
+from being adopted. The reference adapter's nonstreaming endpoint does not
+provide a server-side stop receipt when its HTTP client disconnects: upstream
+model work may finish independently. Do not display a client abort as proof that
+a remote model runner has stopped, and do not unload a shared runner to simulate
+per-request cancellation.
+
+The streaming extension requires `stream: true` and emits newline-delimited JSON,
+including stage, observation, language deltas, optional PCM events, error and
+one authoritative final response. It is not SSE. Parse arbitrary chunk and UTF-8
+boundaries; do not treat a heartbeat or `stage: "tts"` as generated audio.
+
+## Shared weights and project data
+
+Omni weights remain in the runtime's shared model store. On the inspected host,
+installed Ollama manifests and blobs live under `/srv/ollama/models`; standard
+model/projector layers and one `application/vnd.robit.ollama.omni.bundle.v1+gguf`
+sidecar describe the logical tag. Runtime component views are derived artifacts,
+not per-project downloads. Never copy or delete Ollama blobs manually.
+
+Omnius' separate media-generation cache resolves from `OMNIUS_MEDIA_HOME`, then
+the persisted `media-store.json` pointer, then its configured home. Its model
+cache and runtimes are shared across projects. That cache is not automatically
+the Ollama Omni store and changing it does not move an existing Omni deployment.
+
+Generated project artifacts remain under `<project>/.omnius/images`, `videos`
+and `audio`. Analysis of an existing file should reference its captured project
+and revision; switching sessions/projects must not relabel a late result.
+No per-session Omni weight copy is required.
+
+## Deployment and validation boundary
+
+Changing or starting CUDA workloads requires the host's GPU broker protocol and
+actual runner-placement verification. Confirm the designated endpoint, exact
+tag and GPU before any inference; do not redirect to another accelerator or a
+remote service after a failure. The external runtime's bootstrap/deploy scripts
+can pull weights, build CUDA binaries and replace services, so they are not
+capability probes and are not part of ordinary Omnius analysis.
+
+An endpoint may serve a different logical bundle than a neighboring checkout's
+`.env` file. Verify the running deployment and actual model/projector manifest
+identity; neither a checked-out configuration nor the response's echoed tag is
+sufficient evidence.
+
+External contract regression sources are `tests/test_omni_adapter.py` for format,
+routing, provenance, no-speech, stale-cache and stream behavior, plus
+`docs/schema/request-v1.schema.json` and `response-v1.schema.json`. Fixture tests
+can validate transport and parsing without running a model. A live acceptance
+receipt must separately name the actual weights/GPU and use distinguishable real
+media, such as red → blue → red frames, rather than asserting a canned answer.

package/docs/reference/rest-api.md

@@ -2,9 +2,9 @@
 
 This is the maintained human inventory for the supported Omnius daemon API. The
 machine contract is generated by `packages/cli/src/api/openapi.ts` and served at
-`/openapi.json`; every operation in that contract must appear here, and the
-generated REST block in the root README must match this file byte-for-byte after
-heading normalization. Browser HTML routes and implementation-only compatibility
+`/openapi.json`; every operation in that contract must appear here. The root
+README links to this inventory and stays focused on the system overview.
+Browser HTML routes and implementation-only compatibility
 bridges are documented separately and are not part of the stable REST contract.
 
 Run the drift check before publishing docs:
@@ -385,22 +385,35 @@ the unified Omnius ASR cache and are not shipped in the npm package.
 
 ## Generative Media
 
-All generation is backed by the unified `~/.omnius` model store and shared venvs (single source of truth — no per-project duplication). Generated files are consolidated into the global gallery at `~/.omnius/media/{images,videos,audio,music}`.
+Model weights and runtimes use the shared `~/.omnius` store. Generated media
+belongs to the invocation project and is available to its terminal and browser
+sessions. Older global-gallery files remain accessible under the explicit
+legacy scope.
 
 | Method | Path | Purpose |
 | --- | --- | --- |
 | `GET` | `/v1/media/models` | List available image/video/audio/music models |
 | `GET` | `/v1/media/store` | Unified store disk usage + reclaimable legacy caches |
+| `GET` | `/v1/media/weights` | Inspect an exact model's cached weights, dependencies, paths, and supported actions |
+| `DELETE` | `/v1/media/weights` | Delete an exact cached dependency with sharing and active-use checks |
+| `POST` | `/v1/media/weights/download` | Start or reattach a weight download without loading a model |
+| `GET` | `/v1/media/weights/jobs/{id}` | Read durable weight-download state and byte progress |
+| `POST` | `/v1/media/weights/jobs/{id}/cancel` | Request cancellation of a daemon-owned weight download |
 | `POST` | `/v1/media/migrate` | Dedup + migrate legacy per-group caches into the unified store |
 | `POST` | `/v1/media/relocate` | Relocate the whole media store (weights/venvs/gallery) to a chosen folder |
 | `GET` | `/v1/media/relocate/status` | Status + progress of the media-store relocation job |
-| `POST` | `/v1/media/av/analyze` | Analyze a media file into a grounded entity/event answer (AV comprehension) |
+| `GET` | `/v1/media/av/status` | Inspect configured Omni adapter availability without loading weights; configuration is not GPU/model identity attestation |
+| `POST` | `/v1/media/av/analyze` | Analyze actual audio/video through the configured Omni runtime, scoped to `projectRoot`; separate transcript/audio/visual evidence, no mock fallback |
 | `POST` | `/v1/media/image` | Generate an image |
 | `POST` | `/v1/media/video` | Generate a video |
 | `POST` | `/v1/media/audio` | Generate a sound effect |
 | `POST` | `/v1/media/music` | Generate music |
-| `GET` | `/v1/media/gallery` | List previously generated media (global, newest first) |
+| `GET` | `/v1/media/generations/status` | Inspect generation state for the selected project |
+| `POST` | `/v1/media/generations/cancel` | Cancel an owned generation operation |
+| `GET` | `/v1/media/gallery` | List media for the selected project or explicit legacy scope |
+| `HEAD` | `/v1/media/file` | Validate an exact media artifact and its current revision |
 | `GET` | `/v1/media/file` | Stream one generated media file |
+| `DELETE` | `/v1/media/file` | Delete an exact scoped artifact with optional revision matching |
 
 Managed TTS `pull` installs the model's runtime prerequisites and weights. It
 does not start inference. Managed TTS `deploy` also verifies the selected CUDA