omnius 1.0.873 → 1.0.875

package/docs/DISCOVERY.md

@@ -316,7 +316,7 @@ Daemon equivalents are `GET /v1/discovery/bootstrap`, `GET /v1/discovery?q=<inte
 | `command.docs` | Open the documentation overview | Print the human-readable Omnius documentation and discovery entrypoints. |
 | `command.dream` | /dream | Start dream mode - creative idle exploration (writes to .omnius/dreams/) |
 | `command.emojis` | /emojis | Toggle emoji rendering in TUI messages |
-| `command.endpoint` | /endpoint | Show current endpoint |
+| `command.endpoint` | /endpoint | Select an endpoint or provider |
 | `command.evaluate` | /evaluate | Evaluate last completed task (LLM quality scoring) |
 | `command.expose` | /expose | Expose local inference via libp2p (default) |
 | `command.fallback` | /fallback | Show remote inference fallback mode |
@@ -340,6 +340,7 @@ Daemon equivalents are `GET /v1/discovery/bootstrap`, `GET /v1/discovery?q=<inte
 | `command.livechat` | /livechat | Alias for /live chat, used by the top live button |
 | `command.mcp` | /mcp | Show MCP server/tool status and controls |
 | `command.memory` | /memory | Open the interactive memory pixel map and provenance trace |
+| `command.mesh` | /mesh | Inspect trusted inference mesh routing and public identity |
 | `command.metabolize` | /metabolize | Run memory maintenance: import deferred memory, prune episodes, compact graph stores |
 | `command.metrics` | /metrics | Show runtime metrics: tokens, context window, throughput, and tool usage |
 | `command.model` | /model | Select from available models |
@@ -461,12 +462,14 @@ Daemon equivalents are `GET /v1/discovery/bootstrap`, `GET /v1/discovery?q=<inte
 | `guide.guides-agent-integration` | Agent And Service Integration | An integration should discover Omnius at runtime instead of encoding a partial provider or tool list. |
 | `guide.guides-bring-your-own-inference` | Bring Your Own Inference | Omnius routes local and hosted models through an explicit provider descriptor. The descriptor determines the wire protocol, URL paths, authentication headers, and supported operations. It is the source of truth used by setup, model discovery, TUI runs, REST chat, summaries, voice, Telegram, sponsors, and endpoint probes. |
 | `guide.guides-dashboard` | Web Dashboard | The Omnius daemon serves a zero-build, self-contained dashboard from the same origin as the REST API. Start it with omnius serve, then open http://127.0.0.1:11435/. The interface uses Omnius's compact NOCLIP-derived style kit and shared responsive observability-card grids; the route registry in packages/cli/src/api/web-ui.ts is the source of truth for pages  |
+| `guide.guides-endpoint-requirements` | Endpoint names and requirements | Checked against official provider documentation on 2026-10-17. This is a configuration matrix, not a claim of account access or successful inference. Provider models and access policies can change; use the authenticated model picker for your account. Selecting an endpoint must not silently choose a paid model. |
 | `guide.guides-long-horizon-feature-workflow` | Long-horizon feature work | Implementation, acceptance cases and delivery records are tracked in WO-01. |
 | `guide.guides-media-generation` | Media Generation | Omnius exposes media generation through TUI commands, tools, Telegram creative workflows, and sponsor media endpoints. |
 | `guide.guides-osint-research` | Categorized OSINT research | Omnius ships a local, searchable snapshot of the OSINT4ALL Start.me page. It uses the same compact discovery pattern as AIWG skills: |
 | `guide.guides-pdf-collections` | Large PDF collections | Ask Omnius to process the collection in ordinary language, specifying the result you need: search, ordering, original-page manipulation, summary, or extraction. For example: “Review every supplied PDF, extract each recorded duration with its source page, order the documents by the invoice date, and deliver the complete results.” A field's meaning, units, mis |
 | `guide.guides-realtime` | Realtime Conversations | Realtime mode is for short, natural, back-and-forth spoken conversation behind ASR and TTS. |
 | `guide.guides-sponsor-and-cohere` | Sponsor And COHERE Mesh | Sponsor and COHERE let Omnius share inference capacity across peers. Sponsor mode is explicit provider/consumer sharing. COHERE is a distributed cognitive inference mesh. |
+| `guide.guides-sponsored-inference-mesh` | Sponsored inference mesh | Omnius can route generation to explicitly trusted sponsors. A sponsor enables specific models, capacity and quotas; other trusted Omnius instances can use that capacity for their main agents, delegates and helpers through the same configured inference endpoint. Tools execute at the requesting instance. The sponsor runs generation only and does not receive a  |
 | `guide.guides-system-tray` | System Tray Indicator | Omnius ships a native per-login tray indicator for Linux, macOS, and Windows on x64 hosts. It is separate from the REST daemon: closing the indicator never stops the daemon, and the daemon remains usable in headless sessions. |
 | `guide.guides-telegram` | Telegram Bridge | The Telegram bridge is a scoped public ingress and egress layer. It supports admin DMs, admin group mode, public group mode, media intake, generated artifact return, scoped memory, and persona documents. |
 | `guide.guides-tools-and-web-search` | Tools And Web Search | Omnius has two related tool surfaces: |
@@ -558,19 +561,32 @@ Daemon equivalents are `GET /v1/discovery/bootstrap`, `GET /v1/discovery?q=<inte
 | `guide.work-orders-evidence-browser-controls-deployment-20261016` | Browser Controls Deployment 20261016 | Bundled Omnius documentation artifact: docs/work-orders/evidence/browser-controls-deployment-20261016.json. |
 | `guide.work-orders-evidence-browser-controls-package-verification-20261016` | Browser Controls Package Verification 20261016 | Bundled Omnius documentation artifact: docs/work-orders/evidence/browser-controls-package-verification-20261016.json. |
 | `guide.work-orders-evidence-builtin-provider-authorized-access-audit-20261014` | Builtin Provider Authorized Access Audit 20261014 | Bundled Omnius documentation artifact: docs/work-orders/evidence/builtin-provider-authorized-access-audit-20261014.json. |
+| `guide.work-orders-evidence-chat-session-document-revision-20261017` | Chat Session Document Revision 20261017 | Bundled Omnius documentation artifact: docs/work-orders/evidence/chat-session-document-revision-20261017.json. |
+| `guide.work-orders-evidence-chat-session-legacy-document-20261017` | Chat Session Legacy Document 20261017 | Bundled Omnius documentation artifact: docs/work-orders/evidence/chat-session-legacy-document-20261017.json. |
+| `guide.work-orders-evidence-chat-session-live-sidecar-20261017` | Chat Session Live Sidecar 20261017 | Bundled Omnius documentation artifact: docs/work-orders/evidence/chat-session-live-sidecar-20261017.json. |
+| `guide.work-orders-evidence-chat-session-shared-store-20261017` | Chat Session Shared Store 20261017 | Bundled Omnius documentation artifact: docs/work-orders/evidence/chat-session-shared-store-20261017.json. |
 | `guide.work-orders-evidence-computer-use-runtime-readiness-20261014` | Computer Use Runtime Readiness 20261014 | Bundled Omnius documentation artifact: docs/work-orders/evidence/computer-use-runtime-readiness-20261014.json. |
 | `guide.work-orders-evidence-dashboard-browser-reconstruction-20261016` | Dashboard Browser Reconstruction 20261016 | Bundled Omnius documentation artifact: docs/work-orders/evidence/dashboard-browser-reconstruction-20261016.json. |
 | `guide.work-orders-evidence-dashboard-media-management-20261016` | Dashboard Media Management 20261016 | Bundled Omnius documentation artifact: docs/work-orders/evidence/dashboard-media-management-20261016.json. |
 | `guide.work-orders-evidence-desktop-indicator-registration-20261016` | Desktop Indicator Registration 20261016 | Bundled Omnius documentation artifact: docs/work-orders/evidence/desktop-indicator-registration-20261016.json. |
+| `guide.work-orders-evidence-endpoint-completion-verification-20261017` | Endpoint Completion Verification 20261017 | Bundled Omnius documentation artifact: docs/work-orders/evidence/endpoint-completion-verification-20261017.json. |
+| `guide.work-orders-evidence-endpoint-source-verification-20261017` | Endpoint Source Verification 20261017 | Bundled Omnius documentation artifact: docs/work-orders/evidence/endpoint-source-verification-20261017.json. |
+| `guide.work-orders-evidence-expanded-variant-repair-20261017` | Expanded Variant Repair 20261017 | Bundled Omnius documentation artifact: docs/work-orders/evidence/expanded-variant-repair-20261017.json. |
 | `guide.work-orders-evidence-fallback-contract-cooldown-before-20261013` | Fallback Contract Cooldown Before 20261013 | Bundled Omnius documentation artifact: docs/work-orders/evidence/fallback-contract-cooldown-before-20261013.json. |
 | `guide.work-orders-evidence-fallback-model-benchmarks-20261012` | Fallback Model Benchmarks 20261012 | Bundled Omnius documentation artifact: docs/work-orders/evidence/fallback-model-benchmarks-20261012.json. |
 | `guide.work-orders-evidence-fallback-quality-installed-20261012` | Fallback Quality Installed 20261012 | Bundled Omnius documentation artifact: docs/work-orders/evidence/fallback-quality-installed-20261012.json. |
 | `guide.work-orders-evidence-fallback-reply-contracts-installed-20261012` | Fallback Reply Contracts Installed 20261012 | Bundled Omnius documentation artifact: docs/work-orders/evidence/fallback-reply-contracts-installed-20261012.json. |
+| `guide.work-orders-evidence-final-presentation-native-20261017` | Final Presentation Native 20261017 | Bundled Omnius documentation artifact: docs/work-orders/evidence/final-presentation-native-20261017.json. |
+| `guide.work-orders-evidence-final-presentation-native-20261017-final-160x48` | Final 160x48 | Bundled Omnius documentation artifact: docs/work-orders/evidence/final-presentation-native-20261017/final-160x48.txt. |
+| `guide.work-orders-evidence-final-presentation-native-20261017-final-60x20` | Final 60x20 | Bundled Omnius documentation artifact: docs/work-orders/evidence/final-presentation-native-20261017/final-60x20.txt. |
+| `guide.work-orders-evidence-final-presentation-native-20261017-report` | Report | Bundled Omnius documentation artifact: docs/work-orders/evidence/final-presentation-native-20261017/report.json. |
+| `guide.work-orders-evidence-final-presentation-native-20261017-rich-final-160x48` | Rich Final 160x48 | Bundled Omnius documentation artifact: docs/work-orders/evidence/final-presentation-native-20261017/rich-final-160x48.txt. |
 | `guide.work-orders-evidence-final-reply-browser-20261016` | Final Reply Browser 20261016 | Bundled Omnius documentation artifact: docs/work-orders/evidence/final-reply-browser-20261016.json. |
 | `guide.work-orders-evidence-final-reply-dark-1440-accepted-final` | Final Reply Dark 1440 Accepted Final | Bundled Omnius documentation artifact: docs/work-orders/evidence/final-reply-dark-1440-accepted-final.png. |
 | `guide.work-orders-evidence-final-reply-light-320-accepted-final` | Final Reply Light 320 Accepted Final | Bundled Omnius documentation artifact: docs/work-orders/evidence/final-reply-light-320-accepted-final.png. |
 | `guide.work-orders-evidence-genuine-opencode-access-repair-20261014` | Genuine Opencode Access Repair 20261014 | Bundled Omnius documentation artifact: docs/work-orders/evidence/genuine-opencode-access-repair-20261014.json. |
 | `guide.work-orders-evidence-inference-device-policy-readonly-20261016` | Inference Device Policy Readonly 20261016 | Bundled Omnius documentation artifact: docs/work-orders/evidence/inference-device-policy-readonly-20261016.json. |
+| `guide.work-orders-evidence-inference-route-attempts-20261017` | Inference Route Attempts 20261017 | Bundled Omnius documentation artifact: docs/work-orders/evidence/inference-route-attempts-20261017.json. |
 | `guide.work-orders-evidence-installed-fallback-verification-20261012` | Installed Fallback Verification 20261012 | Bundled Omnius documentation artifact: docs/work-orders/evidence/installed-fallback-verification-20261012.json. |
 | `guide.work-orders-evidence-instrument-100x30` | Instrument 100x30 | Bundled Omnius documentation artifact: docs/work-orders/evidence/instrument-100x30.png. |
 | `guide.work-orders-evidence-instrument-120x36` | Instrument 120x36 | Bundled Omnius documentation artifact: docs/work-orders/evidence/instrument-120x36.png. |
@@ -668,6 +684,8 @@ Daemon equivalents are `GET /v1/discovery/bootstrap`, `GET /v1/discovery?q=<inte
 | `guide.work-orders-evidence-kilo-production-compatibility-20261012` | Kilo Production Compatibility 20261012 | Bundled Omnius documentation artifact: docs/work-orders/evidence/kilo-production-compatibility-20261012.json. |
 | `guide.work-orders-evidence-local-admission-provider-regression-20261014` | Local Admission Provider Regression 20261014 | Bundled Omnius documentation artifact: docs/work-orders/evidence/local-admission-provider-regression-20261014.json. |
 | `guide.work-orders-evidence-local-recovery-production-routes-20261014` | Local Recovery Production Routes 20261014 | Bundled Omnius documentation artifact: docs/work-orders/evidence/local-recovery-production-routes-20261014.json. |
+| `guide.work-orders-evidence-mesh-source-verification-20261017` | Mesh Source Verification 20261017 | Bundled Omnius documentation artifact: docs/work-orders/evidence/mesh-source-verification-20261017.json. |
+| `guide.work-orders-evidence-mesh-transport-verification-20261017` | Mesh Transport Verification 20261017 | Bundled Omnius documentation artifact: docs/work-orders/evidence/mesh-transport-verification-20261017.json. |
 | `guide.work-orders-evidence-native-completion-presentation-verification-20261016` | Native Completion Presentation Verification 20261016 | Bundled Omnius documentation artifact: docs/work-orders/evidence/native-completion-presentation-verification-20261016.json. |
 | `guide.work-orders-evidence-native-conversation-prompt-audit-20261012` | Native Conversation Prompt Audit 20261012 | Bundled Omnius documentation artifact: docs/work-orders/evidence/native-conversation-prompt-audit-20261012.json. |
 | `guide.work-orders-evidence-native-goal-contract-probe-20261012` | Native Goal Contract Probe 20261012 | Bundled Omnius documentation artifact: docs/work-orders/evidence/native-goal-contract-probe-20261012.json. |
@@ -702,6 +720,7 @@ Daemon equivalents are `GET /v1/discovery/bootstrap`, `GET /v1/discovery?q=<inte
 | `guide.work-orders-evidence-omni-analysis-phone-model-20261017` | Omni Analysis Phone Model 20261017 | Bundled Omnius documentation artifact: docs/work-orders/evidence/omni-analysis-phone-model-20261017.png. |
 | `guide.work-orders-evidence-opencode-all-free-audit-20261012` | Opencode All Free Audit 20261012 | Bundled Omnius documentation artifact: docs/work-orders/evidence/opencode-all-free-audit-20261012.json. |
 | `guide.work-orders-evidence-opencode-all-free-installed-verification-20261012` | Opencode All Free Installed Verification 20261012 | Bundled Omnius documentation artifact: docs/work-orders/evidence/opencode-all-free-installed-verification-20261012.json. |
+| `guide.work-orders-evidence-opencode-endpoint-regression-20261017` | Opencode Endpoint Regression 20261017 | Bundled Omnius documentation artifact: docs/work-orders/evidence/opencode-endpoint-regression-20261017.json. |
 | `guide.work-orders-evidence-opencode-installed-production-stream-live-20261012` | Opencode Installed Production Stream Live 20261012 | Bundled Omnius documentation artifact: docs/work-orders/evidence/opencode-installed-production-stream-live-20261012.json. |
 | `guide.work-orders-evidence-opencode-production-cascade-live-20261012` | Opencode Production Cascade Live 20261012 | Bundled Omnius documentation artifact: docs/work-orders/evidence/opencode-production-cascade-live-20261012.json. |
 | `guide.work-orders-evidence-opencode-production-compatibility-20261012` | Opencode Production Compatibility 20261012 | Bundled Omnius documentation artifact: docs/work-orders/evidence/opencode-production-compatibility-20261012.json. |
@@ -714,8 +733,12 @@ Daemon equivalents are `GET /v1/discovery/bootstrap`, `GET /v1/discovery?q=<inte
 | `guide.work-orders-evidence-project-media-browser-20261016-light-1440-image-output` | Light 1440 Image Output | Bundled Omnius documentation artifact: docs/work-orders/evidence/project-media-browser-20261016/light-1440-image-output.png. |
 | `guide.work-orders-evidence-project-media-browser-20261016-report` | Report | Bundled Omnius documentation artifact: docs/work-orders/evidence/project-media-browser-20261016/report.json. |
 | `guide.work-orders-evidence-project-media-unification-20261016` | Project Media Unification 20261016 | Bundled Omnius documentation artifact: docs/work-orders/evidence/project-media-unification-20261016.json. |
+| `guide.work-orders-evidence-project-session-delete-shared-state-20261017` | Project Session Delete Shared State 20261017 | Bundled Omnius documentation artifact: docs/work-orders/evidence/project-session-delete-shared-state-20261017.json. |
 | `guide.work-orders-evidence-public-review-after-20261012` | Public Review After 20261012 | Bundled Omnius documentation artifact: docs/work-orders/evidence/public-review-after-20261012.json. |
 | `guide.work-orders-evidence-public-review-before-20261012` | Public Review Before 20261012 | Bundled Omnius documentation artifact: docs/work-orders/evidence/public-review-before-20261012.json. |
+| `guide.work-orders-evidence-public-session-live-20261017` | Public Session Live 20261017 | Bundled Omnius documentation artifact: docs/work-orders/evidence/public-session-live-20261017.json. |
+| `guide.work-orders-evidence-session-live-sidecar-profile-20261017` | Session Live Sidecar Profile 20261017 | Bundled Omnius documentation artifact: docs/work-orders/evidence/session-live-sidecar-profile-20261017.json. |
+| `guide.work-orders-evidence-session-live-write-profile-20261017` | Session Live Write Profile 20261017 | Bundled Omnius documentation artifact: docs/work-orders/evidence/session-live-write-profile-20261017.json. |
 | `guide.work-orders-evidence-session-native-restore-followup-20261016` | Session Native Restore Followup 20261016 | Bundled Omnius documentation artifact: docs/work-orders/evidence/session-native-restore-followup-20261016.json. |
 | `guide.work-orders-evidence-session-tabs-installation-20261016` | Session Tabs Installation 20261016 | Bundled Omnius documentation artifact: docs/work-orders/evidence/session-tabs-installation-20261016.json. |
 | `guide.work-orders-evidence-session-tabs-package-verification-20261016` | Session Tabs Package Verification 20261016 | Bundled Omnius documentation artifact: docs/work-orders/evidence/session-tabs-package-verification-20261016.json. |
@@ -727,6 +750,7 @@ Daemon equivalents are `GET /v1/discovery/bootstrap`, `GET /v1/discovery?q=<inte
 | `guide.work-orders-evidence-session-transcript-light-320-session-image` | Session Transcript Light 320 Session Image | Bundled Omnius documentation artifact: docs/work-orders/evidence/session-transcript-light-320-session-image.png. |
 | `guide.work-orders-evidence-session-transcript-light-320-session-working` | Session Transcript Light 320 Session Working | Bundled Omnius documentation artifact: docs/work-orders/evidence/session-transcript-light-320-session-working.png. |
 | `guide.work-orders-evidence-source-hierarchy-installed-20261013` | Source Hierarchy Installed 20261013 | Bundled Omnius documentation artifact: docs/work-orders/evidence/source-hierarchy-installed-20261013.json. |
+| `guide.work-orders-evidence-sticky-catalog-candidate-release-20261017` | Sticky Catalog Candidate Release 20261017 | Bundled Omnius documentation artifact: docs/work-orders/evidence/sticky-catalog-candidate-release-20261017.json. |
 | `guide.work-orders-evidence-task-observability-state-verification-20261017` | Task Observability State Verification 20261017 | Bundled Omnius documentation artifact: docs/work-orders/evidence/task-observability-state-verification-20261017.json. |
 | `guide.work-orders-evidence-telegram-all-free-live-20261013` | Telegram All Free Live 20261013 | Bundled Omnius documentation artifact: docs/work-orders/evidence/telegram-all-free-live-20261013.json. |
 | `guide.work-orders-evidence-telegram-completion-review-live-20261013` | Telegram Completion Review Live 20261013 | Bundled Omnius documentation artifact: docs/work-orders/evidence/telegram-completion-review-live-20261013.json. |
@@ -996,6 +1020,7 @@ Daemon equivalents are `GET /v1/discovery/bootstrap`, `GET /v1/discovery?q=<inte
 | `provider.groq` | Groq | Groq hosted inference through its OpenAI-compatible API. |
 | `provider.hyperbolic` | Hyperbolic | Hyperbolic hosted models through an OpenAI-compatible API. |
 | `provider.lmstudio` | LM Studio | A local OpenAI-compatible LM Studio server, normally on port 1234. |
+| `provider.mesh` | Sponsored inference mesh | Sponsored inference mesh inference through openai-chat. |
 | `provider.mistral` | Mistral AI | Mistral hosted models through an OpenAI-compatible API. |
 | `provider.nvidia` | NVIDIA NIM | NVIDIA-hosted NIM models through an OpenAI-compatible API. |
 | `provider.ollama` | Ollama | Local Ollama inference using native Ollama model, chat, generate, and embeddings paths. |

package/docs/guides/endpoint-requirements.md

@@ -0,0 +1,33 @@
+# Endpoint names and requirements
+
+Checked against official provider documentation on 2026-10-17. This is a configuration matrix, not a claim of account access or successful inference. Provider models and access policies can change; use the authenticated model picker for your account. Selecting an endpoint must not silently choose a paid model.
+
+Type `/endpoint` to inspect choices or `/endpoint <name>` for a registered provider. Names and aliases are case-insensitive. An existing configured endpoint for the same provider retains its custom URL/port and exact-scope credentials. Switching providers clears the old credential/key pool; required missing keys use the existing secret input. Explicit URLs and custom protocol configuration remain available.
+
+For example, use `/endpoint ollama`, `/endpoint openai`, `/endpoint claude` or `/endpoint gemini`. Type a prefix such as `/endpoint cl` and choose a suggestion with Tab or the pointer; completion fills the input without connecting. Enter applies the command. Add `--local` to save an endpoint only for the current project. Required keys are entered through the secret prompt, rather than placed in the command history.
+
+| Name / aliases | Default base URL | Protocol and credential requirement | Official source |
+| --- | --- | --- | --- |
+| `ollama` | `http://127.0.0.1:11434` | Native Ollama. Local API has no default authentication; an authenticated proxy may require its own token. Server and selected model must exist. Cloud models have separate Ollama sign-in/key requirements. | [Authentication](https://docs.ollama.com/api/authentication) |
+| `lmstudio`, `lm-studio` | `http://127.0.0.1:1234/v1` | OpenAI-compatible local server; start its server and select a model. Send a bearer token when server authentication is enabled. | [Compatibility](https://lmstudio.ai/docs/developer/openai-compat), [authentication](https://lmstudio.ai/docs/developer/core/authentication) |
+| `vllm`, `v-llm` | `http://127.0.0.1:8000/v1` | OpenAI-compatible serving endpoint. Use the server's bearer key if configured; exact model, chat template and tool parser depend on that deployment. Setup does not start a CUDA service. | [Server](https://docs.vllm.ai/en/latest/serving/online_serving/openai_compatible_server/), [server flags](https://docs.vllm.ai/en/latest/cli/serve/) |
+| `openai` | `https://api.openai.com/v1` | OpenAI Chat Completions; your API bearer credential and authorized model. Organization/project selection can require additional account-scoping headers. | [API authentication](https://developers.openai.com/api/reference/overview), [chat API](https://developers.openai.com/api/reference/resources/chat/subresources/completions/methods/create) |
+| `anthropic`, `claude` | `https://api.anthropic.com/v1` | Anthropic Messages; `x-api-key` plus `anthropic-version: 2023-06-01`. This preset uses workspace-bound API keys; multi-workspace keys require an additional workspace header and are not implied by entering a key alone. | [API overview](https://platform.claude.com/docs/en/api/overview) |
+| `gemini`, `google`, `google-ai` | `https://generativelanguage.googleapis.com/v1beta/openai` | Gemini's OpenAI-compatible API, with your Gemini API key as bearer credential; not its distinct native request schema. | [OpenAI compatibility](https://ai.google.dev/gemini-api/docs/openai) |
+| `openrouter` | `https://openrouter.ai/api/v1` | OpenAI-compatible bearer API key. Referral/title headers are optional. Account credit/limits and selected model pricing remain authoritative. | [Authentication](https://openrouter.ai/docs/api_reference/authentication) |
+| `groq` | `https://api.groq.com/openai/v1` | OpenAI-compatible API with your Groq API key. Provider compatibility and model capabilities still apply. | [Compatibility](https://console.groq.com/docs/openai) |
+| `deepinfra` | `https://api.deepinfra.com/v1/openai` | OpenAI-compatible API with your DeepInfra token and an exact catalog model. | [Chat API](https://docs.deepinfra.com/chat/overview) |
+| `fireworks`, `fireworks-ai` | `https://api.fireworks.ai/inference/v1` | OpenAI-compatible API with bearer API key and accessible model/deployment. | [Chat endpoint](https://docs.fireworks.ai/api-reference/post-chatcompletions), [authentication](https://docs.fireworks.ai/api-reference/introduction) |
+| `together`, `together-ai` | `https://api.together.ai/v1` | OpenAI-compatible API with your Together API key. Recognize previously saved `api.together.xyz` URLs without silently replacing an explicit configured endpoint. | [Compatibility](https://docs.together.ai/docs/inference/openai-compatibility) |
+| `chutes`, `chutes-ai` | `https://llm.chutes.ai/v1` | OpenAI-compatible API with bearer Chutes key. Use concrete catalog model IDs; saved routing aliases need account-side configuration. | [Agent connection requirements](https://chutes.ai/agents/connect) |
+| `mistral`, `mistral-ai` | `https://api.mistral.ai/v1` | OpenAI-compatible chat API and your Mistral bearer API key; account mode, model access and rate limits apply. | [API key setup](https://docs.mistral.ai/getting-started/quickstarts/studio/activate-and-generate-api-key) |
+| `cerebras` | `https://api.cerebras.ai/v1` | OpenAI-compatible API with your Cerebras key. Shared inference uses exact model IDs; dedicated inference can use an endpoint ID. | [Compatibility](https://inference-docs.cerebras.ai/resources/openai) |
+| `sambanova`, `samba-nova` | `https://api.sambanova.ai/v1` | SambaCloud OpenAI-compatible bearer API key. Dedicated endpoints may use a different base URL; legacy SambaStudio APIs have different requirements and are not this preset. | [Official integration](https://docs.sambanova.ai/docs/en/integrations/vscode) |
+| `nvidia`, `nvidia-nim`, `nim` | `https://integrate.api.nvidia.com/v1` | NVIDIA hosted OpenAI-compatible chat API and bearer NVIDIA API key with model access/credit. Self-hosted NIM endpoints are explicitly configured URLs. | [Hosted chat reference](https://docs.api.nvidia.com/nim/reference/stepfun-ai-step-5-preview-infer) |
+| `builtin-free` | `https://opencode.ai/inference/openai/v1` | Published public access remains subject to provider permission. Discovery is separately pinned to `/inference/v1/models`. Current independent Omnius and genuine OpenCode controls returned403; catalog membership does not establish usable generation. | [Inference API](https://opencode.ai/v2/docs/console/api/inference/) |
+| `mesh` | Configured loopback gateway; default `http://127.0.0.1:11436/v1` | Omnius OpenAI-compatible sponsored inference. On explicit selection, read the enabled owner-private default mesh configuration and its gateway token. Existing explicitly configured mesh URLs retain their own credential scope. The gateway must already be running; endpoint selection starts no service. | [Setup and trust boundaries](sponsored-inference-mesh.md) |
+| `hyperbolic` | Retired serverless preset | Official documentation says the old inference API and playground are retired, and old requests fail even with valid keys. Do not offer this as a working shortcut. Operator-hosted replacement servers use an explicit custom URL/protocol. | [Retirement notice](https://www.hyperbolic.ai/docs/faq/inference-models) |
+
+Custom endpoints require a URL and an explicit supported protocol when detection is ambiguous: `ollama`, `openai-chat`, or `anthropic-messages`. A local server's optional bearer authentication is not a reason to discard a supplied credential. No API key is inferred from a different provider, and endpoint discovery does not perform generation, model downloads or hardware deployment.
+
+The standard presets cover the auth forms above. They do not claim every provider's OAuth, federation, multi-workspace, tenant or administrative API is implemented. Configure a supported scoped API credential or an explicitly authorized compatible gateway for those deployments.

package/docs/guides/sponsored-inference-mesh.md

@@ -0,0 +1,84 @@
+# Sponsored inference mesh
+
+Omnius can route generation to explicitly trusted sponsors. A sponsor enables specific models, capacity and quotas; other trusted Omnius instances can use that capacity for their main agents, delegates and helpers through the same configured inference endpoint. Tools execute at the requesting instance. The sponsor runs generation only and does not receive a new conversation in its transcript.
+
+This transport does not repair OpenCode service access. Provider authentication, access restrictions and quotas remain authoritative. Requests are never repeated on another sponsor after a dispatch, a partial response or a provider denial.
+
+## Trust and privacy
+
+Each instance keeps a persistent private identity and shares its public peer ID. Operators exchange peer IDs and reachable multiaddresses through a trusted channel. Both ends explicitly allow the other identity. There is no public peer autodial or open inference proxy.
+
+Noise authenticates and encrypts the application stream, including through configured libp2p circuit relays. A relay can observe addressing, timing and sizes. The selected sponsor and inference provider receive plaintext. Local administrators can access their own running process and keys. See the primary [Noise specification](https://github.com/libp2p/specs/blob/master/noise/README.md) and [circuit relay protocol](https://libp2p.io/docs/circuit-relay/).
+
+The Tracker repository informed the routing, framing, lifetime and capacity patterns. The first runtime supports direct TCP, secure WebSockets and explicitly configured circuit relays. Other Tracker carriers are inventoried in `.aiwg/planning/sponsored-inference-mesh-20261017/` but are not implemented here. No GitHub Pages deployment or browser engine is required.
+
+## Configure an instance
+
+Run `omnius mesh init`. This creates disabled configuration and a private identity in the Omnius config directory under `mesh/`. It prints the configuration path and public peer ID, never the private key or gateway token. Alternatively use a private dedicated directory:
+
+```sh
+omnius mesh init --config /private/omnius-mesh/config.json
+omnius mesh identity --config /private/omnius-mesh/config.json
+```
+
+The directory must be owner-only (`0700`); configuration, identity and ledger are private files (`0600`). Initialization refuses to overwrite existing configuration. Preserve the identity across restarts. Replacing it requires peers to deliberately trust the replacement.
+
+Edit the private configuration before enabling it. The following is a schema example; replace the peer IDs, addresses and model with actual operator-approved values. Keep the random `gatewayToken` generated by initialization.
+
+```json
+{
+  "version": 1,
+  "enabled": true,
+  "gatewayPort": 11436,
+  "gatewayToken": "KEEP_THE_PRIVATE_RANDOM_TOKEN_CREATED_BY_INIT",
+  "listenAddresses": ["/ip4/0.0.0.0/tcp/4010"],
+  "relayAddresses": [],
+  "peers": [
+    { "peerId": "TRUSTED_SPONSOR_PEER_ID", "addresses": ["/dns4/sponsor.example/tcp/4010/p2p/TRUSTED_SPONSOR_PEER_ID"] }
+  ],
+  "allowedRequesters": ["TRUSTED_ORIGIN_PEER_ID"],
+  "offers": [
+    {
+      "id": "local-approved-model",
+      "model": "EXACT_APPROVED_MODEL_TAG",
+      "endpoint": "http://127.0.0.1:11434",
+      "protocol": "ollama",
+      "admission": "managed-ollama",
+      "contextTokens": 32768,
+      "maxOutputTokens": 4096,
+      "capacity": 1,
+      "maxRequestsPerMinute": 10,
+      "maxTokensPerDay": 100000
+    }
+  ]
+}
+```
+
+An origin-only instance leaves `offers` empty. A sponsor-only instance may leave `peers` empty, but must list permitted origin IDs in `allowedRequesters`. Discovery advertises only opaque offer IDs, model identifiers, expiry and declared capacity. Provider endpoints and keys stay local.
+
+Local sponsorship requires the discovered managed Ollama broker endpoint. Before enabling actual accelerator-backed work, follow the repository's GPU reservation and exact model-placement preflight. Starting the mesh does not load/download a model. Declaring capacity is not proof of GPU placement.
+
+For an authorized remote provider use `admission: "remote-authorized"`, an HTTPS endpoint and an explicit protocol (`ollama`, `openai-chat`, or `anthropic-messages`). Set `apiKeyEnv` to a host environment variable containing your own provider key when required. The configuration stores the variable name, and discovery never transmits the key. Endpoints with credentials in the URL, query strings or fragments are rejected.
+
+## Run and use it
+
+```sh
+omnius mesh start --config /private/omnius-mesh/config.json
+omnius mesh status --config /private/omnius-mesh/config.json
+```
+
+Run the first command in an owned foreground process or your normal supervisor. It prints actual listen addresses and the loopback gateway URL. The gateway binds only `127.0.0.1` and requires the private generated bearer token. It rejects browser Origin requests; browser chat continues through its existing authenticated daemon.
+
+Use `/endpoint mesh` to select the enabled default private mesh configuration. This resolves its exact loopback port and gateway token only after selection; typing suggestions never reads credentials. Then choose an advertised model with `/model`. An already configured custom mesh URL keeps its own credentials; the default token is never copied to another host. For a dedicated `--config` instance, explicitly configure its printed gateway URL, protocol `openai-chat` and its own private `gatewayToken`. Configure the browser daemon with the same endpoint. Main and child generation then use the same mesh route policy; the gateway never calls daemon `/v1/chat`.
+
+For peers behind NAT, configure an operator-controlled reachable circuit relay and exchange the resulting full circuit multiaddress. Relay trust does not grant inference permission. No public relay is selected automatically.
+
+`mesh status` shows bounded discovery, selection, admission and terminal metadata. It excludes prompts, completions, tool arguments and provider secrets. `/v1/models` is passive discovery and does not generate tokens. A missing model/capacity or a provider error is explicit.
+
+Stop the owned mesh process with SIGINT/SIGTERM. It stops admission, cancels owned calls and closes its transport. Configuration changes, including trusted peers and offers, take effect after a controlled restart. Do not remove or edit a live ledger/ownership file. Abrupt process death can leave an ownership lock; verify the recorded owner has exited before explicit offline recovery. Never delete the ledger to recover a lock: its metadata prevents interrupted requests from executing again after restart.
+
+The ledger reserves prompt-plus-maximum-output token estimates conservatively before dispatch and retains bounded request metadata. Failed/cancelled requests can still consume reservation; this favors respecting operator budgets. Once replay-history capacity is full, sponsorship fails closed until the operator performs a deliberate retention/reset procedure while stopped. Completed content is not stored in this ledger.
+
+## Verification limits
+
+Source acceptance uses genuine loopback peer transports and fixture providers, not CUDA or paid inference. These tests establish transport, framing and lifecycle behavior; they do not establish that any external provider will accept a request, that a GPU is correctly placed, or that all Tracker relay carriers have been ported.

package/docs/work-orders/evidence/chat-session-document-revision-20261017.json

@@ -0,0 +1,57 @@
+{
+  "schema": "omnius.chat-session-document-revision-verification.v1",
+  "recordedAt": "2026-10-17",
+  "scope": "Separate semantic document commits from live/title/token metadata for bounded shared frontend refresh.",
+  "behavior": {
+    "Session.documentRevision": "Optional durable field, normalized to a nonnegative integer. Legacy records derive it from existing revision until the next successful commit persists it.",
+    "mutateSession": "Third argument documentChanged defaults true; metadata-only live/token/title writers pass false.",
+    "persistSession": "Document and store versions are published only after successful atomic rename. Direct getSession metadata commits preserve document identity.",
+    "import": "Changes to full transcript or removal of the legacy visible import notice advance documentRevision. Title/description-only system scaffold updates do not.",
+    "catalog": "Additive optional documentRevision projection alongside revision/live.",
+    "read": "No read-side persistence or inference."
+  },
+  "tests": {
+    "status": "passed",
+    "tests": 109,
+    "files": 10,
+    "newCases": 6,
+    "counting": "This batch includes the prior store/restore regressions; do not sum109 with earlier103.",
+    "log": "/tmp/omnius-session-document-version-final-tests.log",
+    "command": "pnpm exec vitest run --config /tmp/omnius-session-document-version-vmyoqv6o/document-version-vitest.config.mts --maxWorkers=3 --minWorkers=1 --reporter=verbose",
+    "checks": [
+      "Every authored/tool/check-in/intake mutation advances the visible document version.",
+      "Live/token/get/read operations retain document identity while global revision advances as appropriate.",
+      "Full >32k transcript imports version content changes while metadata-only imports remain stable.",
+      "Legacy normalization is read-only and stabilizes on the next metadata commit.",
+      "A controlled atomic commit failure publishes neither phantom content nor advanced versions.",
+      "Two actual independent Bun processes interleave40 total assistant appends and metadata commits; all content and exact40 document increments are retained."
+    ]
+  },
+  "sourceNoEmit": {
+    "status": "passed",
+    "diagnostics": 0,
+    "log": "/tmp/omnius-session-document-version-typecheck.log"
+  },
+  "diffCheck": "passed",
+  "sourceSha256": {
+    "packages/cli/src/api/chat-session.ts": "f0d45d96a2d5f7a9ec834110c15812f28dc2456c68e8a20bbaa7a9bdb798f0d3",
+    "packages/cli/tests/chat-session-document-revision.test.ts": "cf2d1c799a5a9fa5a82a93623f09a1fff83fbd1d0fcdda161ab48aa0df412b2f"
+  },
+  "excludedVerificationDependencies": [
+    "packages/cli/src/api/session-coordination.ts",
+    "packages/cli/src/session-quality.ts",
+    "Current root store-regression fixtures and tests copied for compatibility only."
+  ],
+  "boundaries": [
+    "Source storage validation only; frontend integration must use documentRevision to skip full reconstruction for metadata-only changes.",
+    "System import scaffold changes are metadata; authored/tool messages and the complete display transcript define the document."
+  ],
+  "safety": {
+    "inferenceRequests": 0,
+    "modelLoadRequests": 0,
+    "servicesChanged": 0,
+    "cudaWorkloads": 0,
+    "sharedBuilds": 0,
+    "publishes": 0
+  }
+}

package/docs/work-orders/evidence/chat-session-legacy-document-20261017.json

@@ -0,0 +1,60 @@
+{
+  "schema": "omnius.chat-session-legacy-document-verification.v1",
+  "recordedAt": "2026-10-17",
+  "scope": "Retain pre-structured native history when later browser/native turns create structured canonical messages.",
+  "policy": {
+    "legacyTranscript": "Immutable complete text seeded before first structured user append to transcript-only imported records.",
+    "newSessions": "An explicit empty legacyTranscript records known absence of pre-structured history; later mirror snapshots never become legacy copies.",
+    "importedEmptyShell": "A system-only canonical shell imported before any authored turn becomes eligible for original transcript seeding.",
+    "seededDisplay": "Expanded Earlier conversation module before structured turns; exact full text with no32k display cap.",
+    "oldMixedMigration": "Only one exact anchored first User marker identifies an expanded historical prefix. The entire original snapshot remains in a collapsed Legacy transcript archive.",
+    "uncertain": "No guessed prefix; complete original remains collapsed and inspectable.",
+    "persistence": "First seed and authored user message commit atomically. Later full transcript imports never overwrite the seed.",
+    "modelContext": "Legacy visible history does not expand the deliberately bounded canonical model conversation."
+  },
+  "verification": {
+    "status": "passed",
+    "tests": 118,
+    "files": 11,
+    "newCases": 9,
+    "counting": "Includes previous109 document/store/restore checks; do not sum overlapping totals.",
+    "log": "/tmp/omnius-legacy-session-document-tests.log",
+    "command": "pnpm exec vitest run --config /tmp/omnius-legacy-session-document-ny2w7d3z/legacy-vitest.config.mts --maxWorkers=3 --minWorkers=1 --reporter=verbose",
+    "checks": [
+      "Actual native StatusBar document replacement retains earliest/latest markers from >32k original text and later web answer.",
+      "Original seed remains unchanged after later full mirror snapshots and subsequent user turns.",
+      "New structured sessions expose one current answer without redundant legacy module.",
+      "Empty pre-created canonical shell can accept genuine imported earlier history.",
+      "Exact unique multiline Unicode first-user marker yields a preserved prefix plus full collapsed archive.",
+      "Unmarked, repeated or partial markers never falsely promote a prefix.",
+      "Failed atomic append publishes neither seed nor authored message/revision."
+    ],
+    "noEmit": {
+      "status": "passed",
+      "diagnostics": 0,
+      "log": "/tmp/omnius-legacy-session-document-typecheck.log"
+    },
+    "diffCheck": "passed"
+  },
+  "sourceSha256": {
+    "packages/cli/src/api/chat-session.ts": "c7181e4f64ad64841d80e3d9d66ce5541191ff1242985c8a9f2f48bdfdf96767",
+    "packages/cli/src/tui/session-restore.ts": "416430c4cf456e9a670625123b4ef0000cd84f36ce68797cc8ae022d6a7877be",
+    "packages/cli/tests/chat-session-legacy-document.test.ts": "db3da5e0ba1bb28262d30535aae51570471bd05315b187bc82f512c435d288a8"
+  },
+  "copiedRootBaselineSha256": {
+    "packages/cli/src/api/chat-session.ts": "f0d45d96a2d5f7a9ec834110c15812f28dc2456c68e8a20bbaa7a9bdb798f0d3",
+    "packages/cli/src/tui/session-restore.ts": "2f529dc46f30b7712d6f7be4d9d442a8a4bcda33544fa421c2114a6aef7721a5"
+  },
+  "limitations": [
+    "Source and semantic native projection fixtures, not a deployed daemon or live inference run.",
+    "Old unproven flat transcript snapshots remain explicit collapsed archives; no automatic semantic reconstruction is claimed."
+  ],
+  "safety": {
+    "inferenceRequests": 0,
+    "modelLoadRequests": 0,
+    "servicesChanged": 0,
+    "cudaWorkloads": 0,
+    "sharedBuilds": 0,
+    "publishes": 0
+  }
+}

package/docs/work-orders/evidence/chat-session-live-sidecar-20261017.json

@@ -0,0 +1,158 @@
+{
+  "schema": "omnius.chat-session-live-sidecar-verification.v1",
+  "date": "2026-10-17",
+  "scope": "Source-only bounded canonical-session live metadata persistence; one production file. No daemon restart, shared build, package deployment or model request.",
+  "baseline": {
+    "gitHead": "1b2f479a77b02b6f79a5da56aadb824d499ab33f",
+    "sourceCopy": "Current integrated root chat-session.ts (title, legacy transcript and document revision changes included), captured before sidecar changes. Verification-only current dependencies copied and excluded from delivery.",
+    "baselineSourceSha256": "8059352da0033fb8fb95ac2e0fafba1582c32b1ccdf8362a8f41315d8a5cbebc"
+  },
+  "owned": {
+    "production": "packages/cli/src/api/chat-session.ts",
+    "newTest": "packages/cli/tests/chat-session-live-sidecar.test.ts",
+    "updatedTest": "packages/cli/tests/chat-session-document-revision.test.ts",
+    "evidence": [
+      "docs/work-orders/evidence/chat-session-live-sidecar-20261017.json",
+      "docs/work-orders/evidence/session-live-sidecar-profile-20261017.json"
+    ]
+  },
+  "hashes": {
+    "packages/cli/src/api/chat-session.ts": "c1d65e18956795e7328e8bcada5d59eabee0038ee3d51f4c69435c642d611c4b",
+    "packages/cli/tests/chat-session-live-sidecar.test.ts": "efe58b6e1bf42de51998d52eaf605f2faeb8acc298c90126ffd9f7235a273c66",
+    "packages/cli/tests/chat-session-document-revision.test.ts": "2c28258fb48df9989a75a41ff0d4003c2d59f5d7d9b74b7115ffb9e9ecdefe03",
+    "sourcePatch": "e75fa1bd1513aa9558fdd949175de66c282c12a8937450abee421b7bcb7f119a",
+    "profileEvidence": "b1e8d6a95f544451b89d3e4ab77d9f81629a89457a53678b61fc2cc078a30aca"
+  },
+  "verification": {
+    "tests": {
+      "result": "PASS",
+      "files": 12,
+      "tests": 136,
+      "newFocusedCases": 18,
+      "counting": "136 is one complete focused batch including existing store, document-version, legacy restore, deletion, replay and web-session regression cases; counts overlap earlier receipts and must not be added.",
+      "log": "/tmp/omnius-bounded-session-live-final-tests.log",
+      "logSha256": "d9d387c68f332d9d289e053d484ea20250fbb3377cd1a7c0c6e089743476591c",
+      "command": "pnpm exec vitest run --config /tmp/omnius-bounded-session-live-l4hoih1o/sidecar-vitest.config.mts --maxWorkers=3 --minWorkers=1 --reporter=verbose"
+    },
+    "typecheck": {
+      "result": "PASS",
+      "diagnostics": 0,
+      "log": "/tmp/omnius-bounded-session-live-frozen-typecheck.log",
+      "command": "pnpm exec tsc -p tsconfig.json --noEmit --incremental false --composite false"
+    }
+  },
+  "contract": {
+    "sidecar": "<filesystem-session-id>.live.json",
+    "schema": "omnius.session-live.v1",
+    "maxSerializedBytes": 12288,
+    "liveRevision": "Independent monotonic per-session live counter; canonical revision and documentRevision remain unchanged by live-only commits. Session and catalog expose the additive liveRevision field.",
+    "identity": "Exact session id, canonical birth timestamp, project digest, verified unchanged canonical file stamp and durable tombstone fence. Project digest is SHA-256 of normalized project root.",
+    "reads": "Sync/async lookup, get, listing and startup merge validated bounded metadata. Missing is compatible with historical inline live data; malformed/foreign/symlink sidecars never become authoritative.",
+    "writes": "Existing short per-store mutex, strict bounded regular-file reads, exclusive 0600 temporary JSON and atomic rename. Public held references are updated only after a successful commit.",
+    "refresh": "Warm verified live writes do not read or rewrite canonical history; canonical file changes force a fresh read inside the mutex before the sidecar commit and in-place hydration.",
+    "deletion": "Delete removes original sidecar path while holding store mutex and durable tombstone. If canonical unlink fails, the exact prior sidecar is restored and new tombstone rolled back; restoration failure retains the deletion fence.",
+    "staleReceipts": "Rejects older timestamps and same-run terminal-to-running reversals. Actual different-run admission/owner fencing remains the caller/coordinator responsibility, unchanged from prior behavior.",
+    "limits": "Authored partial text is bounded to 8192 UTF-8 bytes and phase to 160 characters; final encoded JSON also clamps escaped text to the complete sidecar byte budget. No endpoint, tool arguments or hidden reasoning is added."
+  },
+  "cases": [
+    "Actual 5 MiB canonical document, ten live writes, zero canonical reads/writes on warm path, unchanged hash/inode/mtime and document version.",
+    "Independent process appends authored content; next live write hydrates held object without overwriting external content.",
+    "Independent process updates live metadata; sync lookup, async lookup and catalog see the new bounded revision.",
+    "Atomic rename failure surfaces and leaves prior public/durable live metadata unchanged.",
+    "Stale timestamp, terminal reversal and versioned null-clear ordering.",
+    "Malformed JSON, wrong identity/root/birth, invalid timestamp, oversized payload, unknown fields and symlink rejection.",
+    "Deletion, stale writer refusal and exact sidecar rollback on failed canonical unlink.",
+    "Replaced canonical birth refuses stale held writer.",
+    "Escaped Unicode/control text remains complete UTF-8 JSON within 12 KiB.",
+    "Custom operator title remains eligible in listing even without an authored message."
+  ],
+  "profile": {
+    "evidence": "docs/work-orders/evidence/session-live-sidecar-profile-20261017.json",
+    "fiveMiBTenUpdates": {
+      "targetMiB": 5,
+      "initialCanonicalBytes": 5242880,
+      "messages": 101,
+      "updates": 10,
+      "canonicalJsonBytesWritten": 0,
+      "liveSidecarBytesWritten": 85161,
+      "canonicalUnchanged": true,
+      "totalElapsedMs": 2.9267639999999346,
+      "totalCpuMs": 3.1479999999999997,
+      "medianElapsedMs": 0.23751199999998107,
+      "maxElapsedMs": 0.5657360000000153,
+      "minElapsedMs": 0.20915599999995038,
+      "documentRevisionUnchanged": true,
+      "samples": [
+        {
+          "elapsedMs": 0.43028299999997444,
+          "cpuMs": 0.437,
+          "liveSidecarBytes": 8516
+        },
+        {
+          "elapsedMs": 0.3156089999999949,
+          "cpuMs": 0.318,
+          "liveSidecarBytes": 8516
+        },
+        {
+          "elapsedMs": 0.5657360000000153,
+          "cpuMs": 0.289,
+          "liveSidecarBytes": 8516
+        },
+        {
+          "elapsedMs": 0.2455269999999814,
+          "cpuMs": 0.249,
+          "liveSidecarBytes": 8516
+        },
+        {
+          "elapsedMs": 0.2216760000000022,
+          "cpuMs": 0.287,
+          "liveSidecarBytes": 8516
+        },
+        {
+          "elapsedMs": 0.20915599999995038,
+          "cpuMs": 0.221,
+          "liveSidecarBytes": 8516
+        },
+        {
+          "elapsedMs": 0.21437600000001567,
+          "cpuMs": 0.217,
+          "liveSidecarBytes": 8516
+        },
+        {
+          "elapsedMs": 0.22949699999998074,
+          "cpuMs": 0.567,
+          "liveSidecarBytes": 8516
+        },
+        {
+          "elapsedMs": 0.27343799999999874,
+          "cpuMs": 0.275,
+          "liveSidecarBytes": 8516
+        },
+        {
+          "elapsedMs": 0.2214660000000208,
+          "cpuMs": 0.288,
+          "liveSidecarBytes": 8517
+        }
+      ]
+    }
+  },
+  "integrationNotes": [
+    "Update shared-session projection tests that expected revision increments from live flush: liveRevision now increments while canonical revision remains stable.",
+    "Observers must fence bounded liveRevision and/or safe live payload as well as canonical document revision. Root callsite integration owns those changes.",
+    "Metadata document-version fixture now counts only actual canonical token/get commits; ordinary full-content writes and prior cross-process append tests remain covered."
+  ],
+  "excludedVerificationOnlyDependencies": [
+    "packages/cli/src/api/session-coordination.ts",
+    "packages/cli/src/session-quality.ts",
+    "packages/cli/src/api/session-summary.ts",
+    "packages/cli/src/tui/session-restore.ts"
+  ],
+  "safety": {
+    "blockedNetworkCalls": 0,
+    "inferenceRequests": 0,
+    "modelLoadRequests": 0,
+    "servicesChanged": 0,
+    "cudaWorkloads": 0,
+    "sharedBuilds": 0
+  }
+}