omnius 1.0.874 → 1.0.875

package/docs/guides/sponsored-inference-mesh.md

@@ -0,0 +1,84 @@
+# Sponsored inference mesh
+
+Omnius can route generation to explicitly trusted sponsors. A sponsor enables specific models, capacity and quotas; other trusted Omnius instances can use that capacity for their main agents, delegates and helpers through the same configured inference endpoint. Tools execute at the requesting instance. The sponsor runs generation only and does not receive a new conversation in its transcript.
+
+This transport does not repair OpenCode service access. Provider authentication, access restrictions and quotas remain authoritative. Requests are never repeated on another sponsor after a dispatch, a partial response or a provider denial.
+
+## Trust and privacy
+
+Each instance keeps a persistent private identity and shares its public peer ID. Operators exchange peer IDs and reachable multiaddresses through a trusted channel. Both ends explicitly allow the other identity. There is no public peer autodial or open inference proxy.
+
+Noise authenticates and encrypts the application stream, including through configured libp2p circuit relays. A relay can observe addressing, timing and sizes. The selected sponsor and inference provider receive plaintext. Local administrators can access their own running process and keys. See the primary [Noise specification](https://github.com/libp2p/specs/blob/master/noise/README.md) and [circuit relay protocol](https://libp2p.io/docs/circuit-relay/).
+
+The Tracker repository informed the routing, framing, lifetime and capacity patterns. The first runtime supports direct TCP, secure WebSockets and explicitly configured circuit relays. Other Tracker carriers are inventoried in `.aiwg/planning/sponsored-inference-mesh-20261017/` but are not implemented here. No GitHub Pages deployment or browser engine is required.
+
+## Configure an instance
+
+Run `omnius mesh init`. This creates disabled configuration and a private identity in the Omnius config directory under `mesh/`. It prints the configuration path and public peer ID, never the private key or gateway token. Alternatively use a private dedicated directory:
+
+```sh
+omnius mesh init --config /private/omnius-mesh/config.json
+omnius mesh identity --config /private/omnius-mesh/config.json
+```
+
+The directory must be owner-only (`0700`); configuration, identity and ledger are private files (`0600`). Initialization refuses to overwrite existing configuration. Preserve the identity across restarts. Replacing it requires peers to deliberately trust the replacement.
+
+Edit the private configuration before enabling it. The following is a schema example; replace the peer IDs, addresses and model with actual operator-approved values. Keep the random `gatewayToken` generated by initialization.
+
+```json
+{
+  "version": 1,
+  "enabled": true,
+  "gatewayPort": 11436,
+  "gatewayToken": "KEEP_THE_PRIVATE_RANDOM_TOKEN_CREATED_BY_INIT",
+  "listenAddresses": ["/ip4/0.0.0.0/tcp/4010"],
+  "relayAddresses": [],
+  "peers": [
+    { "peerId": "TRUSTED_SPONSOR_PEER_ID", "addresses": ["/dns4/sponsor.example/tcp/4010/p2p/TRUSTED_SPONSOR_PEER_ID"] }
+  ],
+  "allowedRequesters": ["TRUSTED_ORIGIN_PEER_ID"],
+  "offers": [
+    {
+      "id": "local-approved-model",
+      "model": "EXACT_APPROVED_MODEL_TAG",
+      "endpoint": "http://127.0.0.1:11434",
+      "protocol": "ollama",
+      "admission": "managed-ollama",
+      "contextTokens": 32768,
+      "maxOutputTokens": 4096,
+      "capacity": 1,
+      "maxRequestsPerMinute": 10,
+      "maxTokensPerDay": 100000
+    }
+  ]
+}
+```
+
+An origin-only instance leaves `offers` empty. A sponsor-only instance may leave `peers` empty, but must list permitted origin IDs in `allowedRequesters`. Discovery advertises only opaque offer IDs, model identifiers, expiry and declared capacity. Provider endpoints and keys stay local.
+
+Local sponsorship requires the discovered managed Ollama broker endpoint. Before enabling actual accelerator-backed work, follow the repository's GPU reservation and exact model-placement preflight. Starting the mesh does not load/download a model. Declaring capacity is not proof of GPU placement.
+
+For an authorized remote provider use `admission: "remote-authorized"`, an HTTPS endpoint and an explicit protocol (`ollama`, `openai-chat`, or `anthropic-messages`). Set `apiKeyEnv` to a host environment variable containing your own provider key when required. The configuration stores the variable name, and discovery never transmits the key. Endpoints with credentials in the URL, query strings or fragments are rejected.
+
+## Run and use it
+
+```sh
+omnius mesh start --config /private/omnius-mesh/config.json
+omnius mesh status --config /private/omnius-mesh/config.json
+```
+
+Run the first command in an owned foreground process or your normal supervisor. It prints actual listen addresses and the loopback gateway URL. The gateway binds only `127.0.0.1` and requires the private generated bearer token. It rejects browser Origin requests; browser chat continues through its existing authenticated daemon.
+
+Use `/endpoint mesh` to select the enabled default private mesh configuration. This resolves its exact loopback port and gateway token only after selection; typing suggestions never reads credentials. Then choose an advertised model with `/model`. An already configured custom mesh URL keeps its own credentials; the default token is never copied to another host. For a dedicated `--config` instance, explicitly configure its printed gateway URL, protocol `openai-chat` and its own private `gatewayToken`. Configure the browser daemon with the same endpoint. Main and child generation then use the same mesh route policy; the gateway never calls daemon `/v1/chat`.
+
+For peers behind NAT, configure an operator-controlled reachable circuit relay and exchange the resulting full circuit multiaddress. Relay trust does not grant inference permission. No public relay is selected automatically.
+
+`mesh status` shows bounded discovery, selection, admission and terminal metadata. It excludes prompts, completions, tool arguments and provider secrets. `/v1/models` is passive discovery and does not generate tokens. A missing model/capacity or a provider error is explicit.
+
+Stop the owned mesh process with SIGINT/SIGTERM. It stops admission, cancels owned calls and closes its transport. Configuration changes, including trusted peers and offers, take effect after a controlled restart. Do not remove or edit a live ledger/ownership file. Abrupt process death can leave an ownership lock; verify the recorded owner has exited before explicit offline recovery. Never delete the ledger to recover a lock: its metadata prevents interrupted requests from executing again after restart.
+
+The ledger reserves prompt-plus-maximum-output token estimates conservatively before dispatch and retains bounded request metadata. Failed/cancelled requests can still consume reservation; this favors respecting operator budgets. Once replay-history capacity is full, sponsorship fails closed until the operator performs a deliberate retention/reset procedure while stopped. Completed content is not stored in this ledger.
+
+## Verification limits
+
+Source acceptance uses genuine loopback peer transports and fixture providers, not CUDA or paid inference. These tests establish transport, framing and lifecycle behavior; they do not establish that any external provider will accept a request, that a GPU is correctly placed, or that all Tracker relay carriers have been ported.

package/docs/work-orders/evidence/endpoint-completion-verification-20261017.json

@@ -0,0 +1,95 @@
+{
+  "schemaVersion": 1,
+  "date": "2026-10-17",
+  "scope": "Source-only native endpoint provider argument completion",
+  "baseCommit": "3459b16e",
+  "sourceHashes": {
+    "packages/cli/src/tui/endpoint-completion.ts": "31ec68120175e75ee712afc142605edf8245bbeef58f810bdd9eac44c21d89ef",
+    "packages/cli/src/tui/interactive.ts": "4f71a143644ce62ae826e0f870f653a6b5babd5766fa534745058dc8a7608487",
+    "packages/cli/src/tui/status-bar.ts": "41da64db8ddc8276d5e646b4f0f9bc55667d709ce9166b4c16a4273848622e19",
+    "packages/cli/src/tui/command-registry.ts": "ca526f7abfa54e5eb31b015924346b3106ff609481f1229b9b7dc4117f80500e"
+  },
+  "verificationSourceHashes": {
+    "packages/cli/tests/endpoint-completion.test.ts": "bb845faf92dc376c9412f4629dd7549a31800f880a9fbb44eae923a198aa7c36",
+    "packages/cli/tests/native-endpoint-completion.test.ts": "3d2f053e03d15446cde83f2353679ec479a75b180f618ab537400acf66c3d956",
+    "packages/cli/tests/native-endpoint-completion.bun.ts": "782b9bef5be6c54d32895574bba24e6a2430d5ce8d560004104d611a611136eb"
+  },
+  "dependencyOwnership": {
+    "endpointPresetModule": "owned by terminal_inventory; copied for verification and excluded from patch",
+    "providerRegistry": "owned by terminal_inventory; copied for verification and excluded from patch"
+  },
+  "behavior": {
+    "choices": "all active canonical provider IDs and aliases, including claude; registry retirement filter omits Hyperbolic",
+    "credentialOrSavedUrlReads": false,
+    "nativeViewportRows": 4,
+    "choicesTruncatedToFive": false,
+    "selection": "Tab or pointer fills existing editor; only Enter submits; bare /endpoint Enter remains picker",
+    "cas": "existing NativeInput expectedText/expectedCursor authority preserved",
+    "noPresentationDocumentRebuild": true,
+    "ordinaryDraftsDoNotEnumerateProviders": true
+  },
+  "before": {
+    "source": "actual prior StatusBar._updateSuggestions body",
+    "bare": [
+      "endpoint"
+    ],
+    "partial": []
+  },
+  "beforeBaselineSha256": "05cfe74c492540c14d015d6e1f64a82e886102188577998f3324e22e7c9b01d8",
+  "tests": {
+    "passed": 39,
+    "failed": 0,
+    "files": 5,
+    "sourceAliased": true,
+    "log": "/tmp/omnius-endpoint-completion-final-tests.json",
+    "logSha256": "dc6e2bc919fe1247daf2f655f45c58d376f9194688b3820ce7a4c2ff504883ac",
+    "nativeActualCoreChecks": 5,
+    "nativeSizes": [
+      [
+        60,
+        20
+      ],
+      [
+        80,
+        24
+      ],
+      [
+        100,
+        30
+      ],
+      [
+        120,
+        36
+      ],
+      [
+        160,
+        48
+      ]
+    ],
+    "coverage": [
+      "all registry names and aliases",
+      "retired provider exclusion",
+      "prefix and command alias matching",
+      "inert hostile URL/key/flag/line metadata",
+      "retained transcript identity",
+      "NativeInput CAS completion",
+      "actual native bare Enter/Tab/pointer/keyboard scrolling",
+      "continuous sidebar divider through voice/status/suggestion/scroll rows at five sizes"
+    ]
+  },
+  "typecheck": {
+    "log": "/tmp/omnius-endpoint-completion-noemit.log",
+    "exitCode": 0,
+    "scope": "CLI + execution source with current source aliases, noEmit",
+    "diagnostics": 0
+  },
+  "safety": {
+    "providerRequests": 0,
+    "inferenceRequests": 0,
+    "modelLoads": 0,
+    "cudaActions": 0,
+    "serviceChanges": 0,
+    "sharedBuilds": 0,
+    "rootWrites": 0
+  }
+}

package/docs/work-orders/evidence/endpoint-source-verification-20261017.json

@@ -0,0 +1,175 @@
+{
+  "schema": "omnius.endpoint-source-verification.v1",
+  "date": "2026-10-17",
+  "base": "8270d3b0",
+  "verifiedStagedTree": "e4d51863c35d795ae3ce86e9b08a55d4421bdc7e",
+  "sourceHashes": {
+    "packages/backend-vllm/src/normalizeUrl.ts": "129a9d6c327345648bf4f798c966887f6b8fb905adf6cc2991c6016e60ceba8c",
+    "packages/backend-vllm/src/providerRegistry.ts": "e2e7718c32626621f09f831ce8d9046229bb3de1bfd55c4bfb0ff0120fb7840d",
+    "packages/backend-vllm/tests/normalizeUrl.test.ts": "19a5a19b5d375782930201ed98ba4c0ff7665f9db49ed31790cd46cd8241ad4a",
+    "packages/backend-vllm/tests/providerRegistry.test.ts": "41647303c2d4f537bb0b1948aac52af9ca16f559425f68da15b49a92f7a7c818",
+    "packages/cli/src/onboarding/provider-setup.ts": "bd4696656f312c5165f36602fab113667c8f8cd394b17fc23948eba204d4116e",
+    "packages/cli/src/tui/command-registry.ts": "cc7d915787217b3dc97b2e6662f4755639dac34025e7ae9c8230a40be97b5320",
+    "packages/cli/src/tui/commands.ts": "1a918115ad9b3cc81d93fc9ad12a93817a38a175bcb21fac2d3de480d95c38e6",
+    "packages/cli/src/tui/endpoint-completion.ts": "31ec68120175e75ee712afc142605edf8245bbeef58f810bdd9eac44c21d89ef",
+    "packages/cli/src/tui/endpoint-preset.ts": "6392856ea9bc7d42c9a91a195dade5a8a377ed6b290abc8404786218cb086807",
+    "packages/cli/src/tui/interactive.ts": "3cfc351793ce41ec16315752ae2f48c9a1e5fc80b8f99a35b0017d2b42fec670",
+    "packages/cli/src/tui/mesh-endpoint.ts": "404464ba64fc057f3927bdbe441aa0a571556445dea4dfb2cec1f270f4738007",
+    "packages/cli/src/tui/model-picker.ts": "9cb71e7639e4c77cc5929cdfc1e717af35ebd535e72562a848959f83b8ee7974",
+    "packages/cli/src/tui/setup.ts": "1206e2ca35abb21d1e9054cf9b97d12333ccd53cb243d97f083f0b8b771d121a",
+    "packages/cli/src/tui/status-bar.ts": "41da64db8ddc8276d5e646b4f0f9bc55667d709ce9166b4c16a4273848622e19",
+    "packages/cli/src/tui/telegram-inference.ts": "e164349ccee453ecf89f99887ae94dbd1846389be3598500c4798d3a3ae23a23",
+    "packages/cli/tests/command-native-presentation.test.ts": "268edcfaeb63c17b57dcdefc6dac630b1511c5046f32e1a8c9d4ed86b2982998",
+    "packages/cli/tests/endpoint-catalog-transport.test.ts": "1e0475d61f8e364d9263b6a470e8c1836f8b8b121bbd21083b1501c548711945",
+    "packages/cli/tests/endpoint-completion.test.ts": "bb845faf92dc376c9412f4629dd7549a31800f880a9fbb44eae923a198aa7c36",
+    "packages/cli/tests/endpoint-mesh.test.ts": "2ff3bc017acfad780d7b1f38ea012b1f908104872f08d02a33f244cc3f1abb1d",
+    "packages/cli/tests/endpoint-preset-command.test.ts": "c0982bdc467b04d6b494eaf18f92dad2b8bf3ed5083b68edec0fbf54ff83d590",
+    "packages/cli/tests/endpoint-preset.test.ts": "6366f7bc3e3c747a78ad1f106a7a9d2e7cc44f0d21f2891624b24e31f83f83c9",
+    "packages/cli/tests/native-endpoint-completion.bun.ts": "782b9bef5be6c54d32895574bba24e6a2430d5ce8d560004104d611a611136eb",
+    "packages/cli/tests/native-endpoint-completion.test.ts": "3d2f053e03d15446cde83f2353679ec479a75b180f618ab537400acf66c3d956",
+    "packages/cli/tests/onboarding-provider-setup.test.ts": "179d7a61797b583ce88a2e1a70a57b4ee77b122a79177a6c047b3ae1982697cf"
+  },
+  "uniquePassingTests": 314,
+  "failedTests": 0,
+  "gates": [
+    {
+      "name": "cli",
+      "passed": 243,
+      "failed": 0,
+      "selectedOut": 0,
+      "reportSha256": "219d79979dda915bbc054b144e261ad4116965e86f65351bc62f98ced20d4a2d",
+      "files": [
+        {
+          "file": "builtin-free-models.test.ts",
+          "passed": 15
+        },
+        {
+          "file": "endpoint-catalog-transport.test.ts",
+          "passed": 43
+        },
+        {
+          "file": "endpoint-completion.test.ts",
+          "passed": 5
+        },
+        {
+          "file": "endpoint-history-redaction.test.ts",
+          "passed": 1
+        },
+        {
+          "file": "endpoint-mesh.test.ts",
+          "passed": 9
+        },
+        {
+          "file": "endpoint-model-policy.test.ts",
+          "passed": 2
+        },
+        {
+          "file": "endpoint-preset-command.test.ts",
+          "passed": 22
+        },
+        {
+          "file": "endpoint-preset.test.ts",
+          "passed": 8
+        },
+        {
+          "file": "endpoint-provider-picker.test.ts",
+          "passed": 6
+        },
+        {
+          "file": "mesh-backend.test.ts",
+          "passed": 42
+        },
+        {
+          "file": "mesh-gateway.test.ts",
+          "passed": 15
+        },
+        {
+          "file": "model-availability.test.ts",
+          "passed": 6
+        },
+        {
+          "file": "model-picker-context-telemetry.test.ts",
+          "passed": 10
+        },
+        {
+          "file": "native-endpoint-completion.test.ts",
+          "passed": 1
+        },
+        {
+          "file": "onboarding-provider-setup.test.ts",
+          "passed": 14
+        },
+        {
+          "file": "web-chat-transport-lifecycle.test.ts",
+          "passed": 31
+        },
+        {
+          "file": "web-ui-client-runtime.test.ts",
+          "passed": 4
+        },
+        {
+          "file": "web-ui-script.test.ts",
+          "passed": 9
+        }
+      ]
+    },
+    {
+      "name": "backend",
+      "passed": 62,
+      "failed": 0,
+      "selectedOut": 0,
+      "reportSha256": "ab2cdfc40881165dfea762bfcfe6b49906601b5cc2de5101bd644cc484506d81",
+      "files": [
+        {
+          "file": "normalizeUrl.test.ts",
+          "passed": 44
+        },
+        {
+          "file": "providerRegistry.test.ts",
+          "passed": 18
+        }
+      ]
+    },
+    {
+      "name": "native",
+      "passed": 9,
+      "failed": 0,
+      "selectedOut": 6,
+      "reportSha256": "1ce76c1aafde49f4f8816be2cfb357f7df4acead2228041bab2a88166fddbbc1",
+      "files": [
+        {
+          "file": "command-native-presentation.test.ts",
+          "passed": 9
+        }
+      ]
+    }
+  ],
+  "nativeSubscenarios": 5,
+  "nativeSizes": [
+    "60x20",
+    "80x24",
+    "100x30",
+    "120x36",
+    "160x48"
+  ],
+  "noEmit": {
+    "passed": true,
+    "scope": "All CLI and execution source, importing backend-vllm/orchestrator source with explicit aliases; no build/emit"
+  },
+  "independentReview": [
+    "Captured catalog protocol/path/auth and subsequent /model use",
+    "Exact credential/pool scopes and cancelled secret/protocol input",
+    "Custom Ollama prefix retained for metadata",
+    "Remote runtime ports cannot silently select catalog-first models",
+    "Authenticated catalog capabilities retained in endpoint and model status updates"
+  ],
+  "limits": [
+    "Catalog/parser/provider tests use HTTP fixtures; no provider access claim",
+    "Actual OpenTUI fixtures exercise keyboard, pointer, viewport scrolling and divider continuity without inference",
+    "Six unrelated native presentation cases outside the selected subset, including independently confirmed pre-existing recovered-session header assertion mismatch, were not selected",
+    "Mesh core has separate previously committed verification; this gate additionally reruns42 origin backend and15 gateway cases",
+    "Source only: zero live inference, model loads, new network/provider probes, service changes, shared builds or publication",
+    "Current genuine OpenCode access controls still return403; endpoint shortcuts do not alter provider access controls"
+  ],
+  "reproducibility": "Staged source was archived before checks; this receipt and later planning delivery metadata do not change the checked source hashes."
+}

package/docs/work-orders/evidence/expanded-variant-repair-20261017.json

@@ -0,0 +1,88 @@
+{
+  "schema": "omnius.expanded-variant-repair-verification.v1",
+  "date": "2026-10-17",
+  "scope": "Source-only repair endpoint binding, honest diagnostic outcomes and independent loopback endpoint cooldown. Startup transcript/daemon diagnostic presentation is a separate integration owned by the parent/native frontend agent.",
+  "baseline": {
+    "gitHead": "56fceb0070166eb92e751d490d82295757de3fba",
+    "sourceSha256": "c592ec81fd9f012604d928e6f2eedb8264cda0f2ada5f9a3dabc2e538cf7a632",
+    "beforeEvidence": [
+      "createExpandedVariantNamedAsync accepted no backendUrl, invoked a shell command and inherited OLLAMA_HOST/default despite reading metadata from a selected endpoint.",
+      "Failed child creation was caught as null; stale-context, missing-tools and canonical-alias repair branches could count it as unchanged.",
+      "readExpandedVariantState returned null for HTTP, invalid JSON and transport failures; sweep collapsed these with policy/base/create failures into one inaccurate startup warning."
+    ]
+  },
+  "ownedPaths": [
+    "packages/cli/src/tui/setup.ts",
+    "packages/cli/src/tui/expanded-variant-sweep.ts",
+    "packages/cli/tests/ollama-broker-model-identity.test.ts",
+    "packages/cli/tests/expanded-variant-repair.test.ts",
+    "packages/cli/tests/expanded-variant-sweep.test.ts",
+    "docs/work-orders/evidence/expanded-variant-repair-20261017.json"
+  ],
+  "sourceHashes": {
+    "packages/cli/src/tui/setup.ts": "e64691d02455c3ff1b691f3d4be4467e39bfbee3718fac85be248f8e3a3649d4",
+    "packages/cli/src/tui/expanded-variant-sweep.ts": "65cdb17f9aaedf7aba27481a7818eb6251bb2192d0766dd2c4337813f30e13cb",
+    "packages/cli/tests/ollama-broker-model-identity.test.ts": "927b0b76d9e588c19b7afa68ab488c9b428611d6d272b86e8f175d14dd058566",
+    "packages/cli/tests/expanded-variant-repair.test.ts": "dfb2f96beed5eac75759a022b88c3733ef469bb6386f2aa33979122a3c721cc1",
+    "packages/cli/tests/expanded-variant-sweep.test.ts": "a2bd245f0d10560950b66b56e5270f110210002d4f44a89e34ccf1dce20bee1e"
+  },
+  "verification": {
+    "result": "PASS",
+    "testFiles": 3,
+    "tests": 58,
+    "newCases": 36,
+    "caseCounts": {
+      "packages/cli/tests/ollama-broker-model-identity.test.ts": 22,
+      "packages/cli/tests/expanded-variant-repair.test.ts": 17,
+      "packages/cli/tests/expanded-variant-sweep.test.ts": 19
+    },
+    "counting": "One complete focused batch; 22 existing broker identity cases plus 17 new repair cases and 19 new endpoint/cadence cases. Do not add earlier overlapping test batches.",
+    "testLog": "/tmp/omnius-expanded-repair-final-tests.log",
+    "testLogSha256": "880733870231877e568a95226633f65911384466228b12f2975d281b9c43bc0d",
+    "testCommand": "pnpm exec vitest run tests/expanded-variant-repair.test.ts tests/expanded-variant-sweep.test.ts tests/ollama-broker-model-identity.test.ts --maxWorkers=2 --minWorkers=1 --reporter=verbose",
+    "typecheck": {
+      "result": "PASS",
+      "diagnostics": 0,
+      "log": "/tmp/omnius-expanded-repair-final-typecheck.log",
+      "command": "pnpm exec tsc -p tsconfig.json --noEmit --incremental false --composite false"
+    },
+    "sourcePatch": "/tmp/omnius-expanded-repair-source.patch",
+    "sourcePatchSha256": "cfd49415516843e855e51f3a2eab1b102a53ee27b66c7cf59d30d370fab41194",
+    "rootApplyCheck": "PASS before integration",
+    "scopedDiffCheck": "PASS"
+  },
+  "contract": {
+    "creation": "Every async wrapper-create caller explicitly passes the requested endpoint. execFile invokes ollama with an argument vector; the normalized HTTP(S) endpoint overrides OLLAMA_HOST only in a copied child environment. Global environment is unchanged. Credentials/query/fragment URLs are refused.",
+    "failureReasons": [
+      "metadata_http",
+      "metadata_invalid",
+      "metadata_unavailable",
+      "missing_base",
+      "broker_policy",
+      "create_failed"
+    ],
+    "failureDetails": "Fixed host-owned diagnostic text and optional numeric HTTP status; no raw model response, thrown exception text, subprocess stdout/stderr or inherited credentials. A missing friendly base must be installed in the selected catalog before a repair is attempted.",
+    "success": "Only a completed creation enters repaired. Required failed creates enter failed, not unchanged. Broker-managed aliases remain untouched.",
+    "metadata": "The initial validated wrapper state also supplies the tools-capability decision, avoiding a redundant unchecked wrapper-state probe. A later authoritative read failure remains a typed failure.",
+    "scheduler": "createExpandedVariantSweepScheduler(scan,{ttlMs?,now?}).run(backendType,url) returns one result Promise for a real scan or null for invalid/non-Ollama/nonloopback, in-flight or cooldown-suppressed repeats. Per-normalized-endpoint state is independent. Default cooldown is five minutes after success or rejection completes.",
+    "loopback": "Exact localhost, 127.0.0.1 and IPv6 ::1 only, parsed as URL host; username/password, query, fragment, wildcard bind address and remote substring tricks are excluded.",
+    "retention": "At most 32 completed endpoint entries; active scans retain their guards until settlement. Cadence is per scheduler instance, not a cross-process persistent lock."
+  },
+  "coveredBehaviors": [
+    "Selected custom-port/basepath overrides unrelated inherited OLLAMA_HOST for stale-context, missing-tools and canonical-alias repairs.",
+    "Public async new-wrapper creation uses the same endpoint binding.",
+    "Failed creation in all three repair branches does not masquerade as unchanged.",
+    "HTTP failure, invalid JSON, wrong/empty metadata structure and unavailable metadata remain distinct from missing base and broker refusal.",
+    "Lost/missing friendly bases never trigger implicit registry lookup or create.",
+    "Unchanged valid wrapper yields unchanged without any create call.",
+    "Uppercase/trailing-slash/default-port normalization, IPv6 loopback and rejection of deceptive remote URLs.",
+    "Duplicate in-flight suppression, independent new endpoints, cooldown after completion, failed-scan retry after cooldown and synchronous callback throw recovery."
+  ],
+  "verificationLimits": [
+    "All fetch calls and exec/execFile/spawn entry points used by the new fixtures are mocked or rejected. Synthetic memory/device metadata does not claim actual GPU placement.",
+    "No actual model creation, repair, model loading, inference, network request, CUDA workload, service change, shared build or publication was performed.",
+    "The existing omnius-expanded-models.test.ts interactive source-string expectations are owned by the native frontend integration agent and are excluded from this patch; the first exploratory batch exposed their stale pre-existing interactive naming assertion.",
+    "This change retains existing per-request metadata deadlines and sequential variant traversal. It does not introduce an overall sweep deadline or cross-process scheduling.",
+    "Read-only local filesystem discovery found 20 wrapper manifests with valid JSON/present referenced blobs and 13 non-reversible base names, but did not execute the sweep or establish the specific seven runtime failures."
+  ]
+}

package/docs/work-orders/evidence/mesh-source-verification-20261017.json

@@ -0,0 +1,46 @@
+{
+  "date": "2026-10-17",
+  "sourceOnly": true,
+  "stagedTree": "f63386d8c55a5702629454fac22dc930a0a14c9b",
+  "sourceChecks": {
+    "passed": 240,
+    "failed": 0,
+    "typecheck": "passed",
+    "mandatoryFrontendSuitesIncluded": true
+  },
+  "transportChecks": {
+    "unique": 17,
+    "existingLockedGraph": "17 passed",
+    "freshNpmGraph": "17 passed",
+    "minimumNode": "22.23.3",
+    "realCircuitRelay": true,
+    "relayHopPromptPlaintextAbsent": true,
+    "wssCertificateVerification": true,
+    "backpressureAndStop": true
+  },
+  "integrationChecks": {
+    "actualProductionAdapterToGatewayToNoiseToSponsor": true,
+    "fixtureProvidersOnly": true,
+    "twoSponsorsConcurrent": true,
+    "secondCallToBusySponsorWithFreeSlot": true,
+    "denialDoesNotDispatchToAnotherSponsor": true,
+    "originOnlyConfiguredRuntime": true,
+    "noRealInference": true
+  },
+  "reviewRepairs": [
+    "Preserve streamed401/403/429 status including after partial output",
+    "Do not double-count accepted local reservations",
+    "Allow same-origin main/child concurrency within actual available slots",
+    "Project cross-model per-origin capacity consistently",
+    "Align validated configuration and runtime limits",
+    "Clean transport after sponsor constructor/startup failure"
+  ],
+  "limits": [
+    "No GPU or paid provider acceptance test",
+    "Provider and selected inference sponsor receive plaintext; relays see metadata",
+    "Other Tracker relay carrier adapters are inventoried only",
+    "Trusted peers/endpoints require explicit operator configuration",
+    "Crash ownership lock and saturated dedup ledger fail closed"
+  ],
+  "patchSha256": "f5364f8c54183bb5ce22d32dede030c8cc3a199654b1a732c8f53255118ca48f"
+}

package/docs/work-orders/evidence/mesh-transport-verification-20261017.json

@@ -0,0 +1,156 @@
+{
+  "schemaVersion": 1,
+  "scope": "source-only authenticated libp2p transport and private installation verification",
+  "date": "2026-10-17",
+  "node": "v22.23.3",
+  "baseCommit": "395f010d",
+  "protocol": "/omnius/sponsored-inference/1.0.0",
+  "sourceHashes": {
+    "packages/cli/src/mesh/libp2p-transport.ts": "be06968ef6987f072289179c4d670078a531d1c30ccd3ec915678b56895fc70b",
+    "packages/cli/package.json": "f193fc1f66d41c1a1c46aaf5b5ea93496d6c467e436f044547247b11b612f0f4",
+    "scripts/build-publish.mjs": "0cbdad4dc5baed907b650e7f23bd4523e8c4b5b42ce815088734ce82c6dd8e48"
+  },
+  "verificationOnlyContract": {
+    "path": "packages/cli/src/mesh/contracts.ts",
+    "sha256": "e9e44c3d02e0f5abdcee706993ba00f5491c82f1614dab793b8694e6a10ad682",
+    "includedInPatch": false
+  },
+  "tests": {
+    "uniqueCases": 17,
+    "file": "packages/cli/tests/mesh-libp2p-transport.test.ts",
+    "sha256": "291efb51ed8e9535d3a1cfeb08a643452adf4a64c73a4e1d5f20d69860bbc18b",
+    "runs": [
+      {
+        "graph": "locked",
+        "passed": 17,
+        "failed": 0,
+        "log": "/tmp/omnius-libp2p-mesh-locked-tests.json",
+        "sha256": "71ad0723357b22d1d77efd6e4ede6edc7a9daa9faf9e86a7dc8360613d149cc9"
+      },
+      {
+        "graph": "npm",
+        "passed": 17,
+        "failed": 0,
+        "log": "/tmp/omnius-libp2p-mesh-npm-tests.json",
+        "sha256": "afc9f75460ef833d0535fcf6b2fab7bb554877b2b44963fd2f52bc2a292cba52"
+      }
+    ],
+    "cases": [
+      "creates one private identity atomically across concurrent initializers without starting a listener",
+      "refuses corrupted, publicly readable and symlinked identities without silently replacing them",
+      "exchanges ordered Unicode frames over real TCP Noise/Yamux and replies after peer half-close",
+      "rejects untrusted remote identities and mismatched dial targets before application admission",
+      "authenticates a pinned peer even through a local TCP forwarder, then rejects modified ciphertext",
+      "rejects oversized length from an authenticated peer",
+      "rejects invalid JSON from an authenticated peer",
+      "rejects invalid UTF-8 from an authenticated peer",
+      "rejects truncated payload from an authenticated peer",
+      "accepts a frame split across many writes and coalesced frames without losing boundaries",
+      "bounds outgoing frames and queue memory while retaining valid ordered traffic",
+      "applies real stream backpressure and aborts a blocked large write on operator Stop",
+      "aborts pending receives promptly on caller cancellation and transport Stop",
+      "bounds idle reads and refuses public/unconfigured relay addresses",
+      "exchanges end-to-end Noise frames through a real relay while the relay sees ciphertext and endpoint identities remain pinned",
+      "scopes legacy npm pins without changing unrelated or nested consumer overrides",
+      "uses WSS with normal CA verification and pinned Noise peer identity on Node22+"
+    ]
+  },
+  "typecheck": {
+    "mode": "strict NodeNext noEmit, actual transport source + integration tests",
+    "diagnostics": 0,
+    "graphs": [
+      "existing workspace locked dependencies",
+      "fresh private npm installed dependencies"
+    ],
+    "log": "/tmp/omnius-libp2p-mesh-noemit-final.log",
+    "latestParentContractCompatible": true
+  },
+  "privateNpmInstall": {
+    "directRuntimeDependencies": {
+      "libp2p": "3.3.0",
+      "@libp2p/crypto": "5.1.18",
+      "@libp2p/peer-id": "6.0.9",
+      "@libp2p/tcp": "11.0.19",
+      "@libp2p/websockets": "10.1.12",
+      "@libp2p/circuit-relay-v2": "4.2.4",
+      "@libp2p/identify": "4.1.5",
+      "@chainsafe/libp2p-noise": "17.0.0",
+      "@chainsafe/libp2p-yamux": "8.0.1",
+      "@multiformats/multiaddr": "13.0.3"
+    },
+    "installedPackages": 135,
+    "scripts": "ignored",
+    "manifest": "synthetic private mesh runtime dependencies plus actual release overrides scoped by production helper",
+    "shrinkwrapInput": "actual existing publish/npm-shrinkwrap.json (stale, reconciled by npm)",
+    "shrinkwrapInputSha256": "c5b519f308ba4b490916b33defe49a97a87960b312afd53df43519e139b68c11",
+    "newShrinkwrapSha256": "3511c03c5b1ed9799020ccfe3ef279a6e8c92f7174b24e2e58517e74dbdfd797",
+    "evidence": [
+      "all17 actual transport tests pass against fresh npm packages",
+      "separate forced circuit-only Node22 exchange passes"
+    ],
+    "legacyConsumerRuntimeInstalled": false,
+    "limitations": "Nexus/Helia nested version preservation is asserted by focused manifest policy test; full release install belongs to parent packaging gate."
+  },
+  "transport": {
+    "identity": "standard Ed25519 private-key protobuf; private owner directory0700/file0600; no listener during load/create; atomic no-clobber concurrent initialization",
+    "encryption": "standard libp2p Noise + Yamux; no copied Tracker encryption or source",
+    "peerTrust": "pinned authenticated remotePeer; exact dial target; configured relay identity alone does not authorize application access",
+    "relayProof": "real circuit-v2 reservation and forced circuit-only payload; relay HOP stream observed after outer Noise decryption, prompt remains absent; endpoint IDs remain origin and destination",
+    "wssProof": "real TLS listener with generated local CA supplied by NODE_EXTRA_CA_CERTS in isolated child; no disabled certificate verification",
+    "bounds": {
+      "frameBytes": 8388608,
+      "applicationQueuedFrames": 8,
+      "applicationQueuedSendBytes": 16777224,
+      "pausedNativeReadBytes": 16777224,
+      "applicationReadBytes": 16777224,
+      "channels": 64,
+      "connections": 32,
+      "dialQueue": 16,
+      "parallelDials": 4,
+      "defaultDialMs": 15000,
+      "defaultIdleMs": 120000
+    },
+    "readBackpressure": "synchronous pause-on-message + bounded owned parser; convenience async iterator deliberately avoided because its pushable can drain beyond native cap",
+    "cancellation": "caller AbortSignal and Stop abort active receive/send/dial; actual4MiB backpressured send test"
+  },
+  "lockPatch": {
+    "path": "/tmp/omnius-libp2p-mesh-lock-importers.patch",
+    "sha256": "2be41bd58915449e7e5800ed9c3e6ce4b11c57edfd9e310f675ac863bb151b91",
+    "addedImporterLines": 30,
+    "transitiveVersionChanges": 0,
+    "rootLockChanged": false
+  },
+  "safety": {
+    "externalPeerConnections": 0,
+    "publicRendezvous": false,
+    "inferenceRequests": 0,
+    "modelLoads": 0,
+    "cudaActions": 0,
+    "serviceChanges": 0,
+    "sharedBuilds": 0,
+    "rootSourceWrites": 0,
+    "publishDirectoryWrites": 0,
+    "trackerSourceCopied": false
+  },
+  "primaryReferences": [
+    "https://libp2p.github.io/js-libp2p/interfaces/libp2p.index.Libp2pInit.html",
+    "https://libp2p.io/docs/circuit-relay/",
+    "https://github.com/libp2p/specs/blob/master/noise/README.md"
+  ],
+  "beforeAfter": {
+    "fixture": "actual4MiB send to a trusted peer whose application does not receive",
+    "before": {
+      "sourceSha256": "a9a84ad1d26530917a50f6d350bb06de673728bf824c9b815d850eb12ef1bd61",
+      "testFailures": 1,
+      "skippedOtherTests": 16,
+      "observation": "write settles before50ms because convenience iterator/native stream never pauses at application boundary",
+      "log": "/tmp/omnius-libp2p-mesh-before-pressure.json",
+      "logSha256": "f72f038891aba9ab604ba42437d4eb2ef8efc4f353ebbf0655390fb5b90a4d03"
+    },
+    "after": {
+      "observation": "write remains backpressured after50ms; explicit AbortSignal cancels it promptly",
+      "testPasses": 17,
+      "testFailures": 0
+    }
+  }
+}