omnius 1.0.875 → 1.0.877

package/docs/work-orders/evidence/mesh-optional-startup-verification-20261017.json

@@ -0,0 +1,70 @@
+{
+  "schemaVersion": 1,
+  "date": "2026-10-17",
+  "task": "Optional mesh dependencies must not prevent ordinary CLI startup",
+  "baseCommit": "5172dc4b",
+  "runtime": {
+    "node": "22.23.3",
+    "platform": "linux-x64"
+  },
+  "cause": "Single-file esbuild with splitting:false hoisted external static mesh imports into CLI startup despite dynamic relative command imports.",
+  "change": "Keep only erased mesh type imports at module scope; load identity/transport dependencies through literal dynamic external imports inside explicit asynchronous factories.",
+  "sourceHashes": {
+    "packages/cli/src/mesh/libp2p-transport.ts": "30da153a247418d09d367ff6771390be924603f2a610480f9a88f9600e9db11b",
+    "packages/cli/tests/mesh-optional-startup.test.ts": "33896fd20c72271a7e5eaeecb46af90042e2a08002b3a0557c24720bf3f27164"
+  },
+  "before": {
+    "passed": 0,
+    "failed": 2,
+    "log": "/tmp/omnius-mesh-lazy-startup-before.json",
+    "failure": "OPTIONAL_MESH_BLOCKED during module startup, before command routing or exported factory calls"
+  },
+  "after": {
+    "bundleStartup": {
+      "passed": 2,
+      "failed": 0,
+      "log": "/tmp/omnius-mesh-lazy-startup-tests.json",
+      "checks": [
+        "Actual CLI --help and mesh help from production-style single-file bundle run while every mesh dependency resolution is forbidden",
+        "Exported factories import safely; explicit identity/transport requests then reach the dependency deny guard"
+      ]
+    },
+    "encryptedTransport": {
+      "passed": 17,
+      "failed": 0,
+      "log": "/tmp/omnius-mesh-lazy-transport-tests.json",
+      "coverage": [
+        "private identity concurrency/permissions",
+        "TCP Noise/Yamux",
+        "untrusted/target identity rejection",
+        "ciphertext tamper",
+        "frame bounds and Unicode",
+        "send/read backpressure and Stop",
+        "real configured relay with end-to-end Noise",
+        "WSS CA validation"
+      ]
+    },
+    "sourceTypecheck": {
+      "exitCode": 0,
+      "log": "/tmp/omnius-mesh-lazy-startup-noemit.log"
+    },
+    "focusedSourceAndTestTypecheck": {
+      "exitCode": 0,
+      "log": "/tmp/omnius-mesh-lazy-startup-focused-noemit.log"
+    },
+    "diffCheck": "PASS"
+  },
+  "limits": [
+    "Source-only isolated production-style bundles; final packed/global installation verification is owned separately by parent agents.",
+    "The startup deny-loader intentionally prevents any mesh transport/identity operation; no provider or inference requests were performed."
+  ],
+  "operations": {
+    "inferenceRequests": 0,
+    "modelLoads": 0,
+    "externalPeerConnections": 0,
+    "cudaOperations": 0,
+    "globalInstallChanges": 0,
+    "sharedBuilds": 0,
+    "sharedServiceChanges": 0
+  }
+}

package/docs/work-orders/evidence/packaged-startup-independent-20261017.json

@@ -0,0 +1,106 @@
+{
+  "schema": "omnius.independent-startup-hotfix.v1",
+  "artifact": "/tmp/omnius-startup-hotfix-20261017/publish/omnius-1.0.876.tgz",
+  "sha256": "63c75c8a7a89fe09c584d23c387275396ba9d274b1464821dbb67f61a3d0837d",
+  "version": "1.0.876",
+  "node": "v22.22.1",
+  "npm": "10.9.4",
+  "scratch": "/tmp/omnius-hotfix-independent-Jy4Kho",
+  "checks": [
+    {
+      "name": "exact-lock-npm-ci",
+      "passed": true,
+      "exitCode": 0,
+      "log": "/tmp/omnius-hotfix-independent-Jy4Kho/exact-lock-npm-ci.log"
+    },
+    {
+      "name": "private-global-install",
+      "passed": true,
+      "exitCode": 0,
+      "log": "/tmp/omnius-hotfix-independent-Jy4Kho/private-global-install.log"
+    },
+    {
+      "name": "installed-version",
+      "passed": true,
+      "exitCode": 0,
+      "log": "/tmp/omnius-hotfix-independent-Jy4Kho/installed-version.log"
+    },
+    {
+      "name": "installed-help",
+      "passed": true,
+      "exitCode": 0,
+      "log": "/tmp/omnius-hotfix-independent-Jy4Kho/installed-help.log"
+    },
+    {
+      "name": "installed-runtime-imports",
+      "passed": true,
+      "exitCode": 0,
+      "log": "/tmp/omnius-hotfix-independent-Jy4Kho/installed-runtime-imports.log"
+    },
+    {
+      "name": "offline-mesh-init",
+      "passed": true,
+      "exitCode": 0,
+      "log": "/tmp/omnius-hotfix-independent-Jy4Kho/offline-mesh-init.log"
+    },
+    {
+      "name": "offline-mesh-identity",
+      "passed": true,
+      "exitCode": 0,
+      "log": "/tmp/omnius-hotfix-independent-Jy4Kho/offline-mesh-identity.log"
+    },
+    {
+      "name": "packed-mesh-loopback-start-authenticated-status-stop",
+      "passed": true,
+      "peerId": "12D3KooWPZBxKTp2AF8P8YsxbmMtd4xnmJXScPBp3wvZboYhr3Te",
+      "addresses": [
+        "/ip4/127.0.0.1/tcp/45945/p2p/12D3KooWPZBxKTp2AF8P8YsxbmMtd4xnmJXScPBp3wvZboYhr3Te"
+      ],
+      "sponsorship": [],
+      "log": "/tmp/omnius-hotfix-independent-Jy4Kho/packed-mesh-start.log"
+    }
+  ],
+  "inferenceRequests": 0,
+  "passed": true,
+  "productionServicesStarted": 0,
+  "prohibitedRuntimeNetworkAttempts": 0,
+  "permittedOwnedLoopbackHttpRequests": 2,
+  "ownedMeshFixtureProcessesStarted": 1,
+  "ownedMeshFixtureSettledExitCode": 0,
+  "supersededHarnessAttempts": [
+    {
+      "report": "/tmp/omnius-hotfix-independent-Jy4Kho/report-initial-harness-resolver-failure.json",
+      "classification": "Harness conditional-exports resolver mistake, not a product failure",
+      "correction": "Probe normal ESM imports from installed package; all current dependencies and library now pass."
+    },
+    {
+      "log": "/tmp/omnius-hotfix-independent-Jy4Kho/controlled-locked-edge-fixed-version-missing-fixture-assets.log",
+      "classification": "Controlled fixture initially omitted required prompt assets, corrected by retaining all old package assets unchanged; not a product failure."
+    }
+  ],
+  "externalMeshNetworkRequests": 0,
+  "integrity": "sha512-o6nrodZnLjBpHD7hHpnhySYQ8Nnz4jkMLIpY30TSkysHIQY/isb7XdbtCMoqk0bPFS5j9VWjEREfX97YsZKPzg==",
+  "controlledStartupContainment": {
+    "classification": "Controlled graph: exact published875 locked edge and other package assets retained; only CLI bundle replaced by exact876 candidate bytes. Not a natural npm resolution test.",
+    "directory": "/tmp/omnius-controlled-locked-edge-fixed-bundle-876",
+    "libp2p": "3.3.0",
+    "utils": "7.0.13",
+    "candidateBundleSha256": "7714920e5b5a111dfcd6f4fa86aeaf744a6d18ffa4d17c33ceb57801333b0129",
+    "beforeFailureLog": "/tmp/omnius-published-locked-edge-node22-startup.log",
+    "after": [
+      {
+        "flag": "--version",
+        "passed": true,
+        "exitCode": 0,
+        "log": "/tmp/omnius-hotfix-independent-Jy4Kho/controlled-locked-edge-fixed-version.log"
+      },
+      {
+        "flag": "--help",
+        "passed": true,
+        "exitCode": 0,
+        "log": "/tmp/omnius-hotfix-independent-Jy4Kho/controlled-locked-edge-fixed-help.log"
+      }
+    ],
+    "versionNote": "Reads old875 package metadata intentionally; containment validates startup, not package version replacement."
+  }
+}

package/docs/work-orders/evidence/packaged-startup-native-20261017.json

@@ -0,0 +1,131 @@
+{
+  "schemaVersion": 1,
+  "testedAt": "2026-10-18T00:05:50.566Z",
+  "passed": true,
+  "purpose": "Packed startup hotfix: actual Node CLI and packaged Bun/OpenTUI terminal",
+  "artifact": {
+    "name": "omnius-1.0.876.tgz",
+    "sha256": "63c75c8a7a89fe09c584d23c387275396ba9d274b1464821dbb67f61a3d0837d",
+    "installedFrom": "Independent private npm global --ignore-scripts installation, copied to own prefix before dependency-only setup",
+    "entryAndWorkerMatchTarball": {
+      "dist/index.js": true,
+      "dist/tui/native/worker.js": true
+    },
+    "packagedFileHashes": {
+      "dist/index.js": {
+        "installedSha256": "7714920e5b5a111dfcd6f4fa86aeaf744a6d18ffa4d17c33ceb57801333b0129",
+        "tarballSha256": "7714920e5b5a111dfcd6f4fa86aeaf744a6d18ffa4d17c33ceb57801333b0129"
+      },
+      "dist/tui/native/worker.js": {
+        "installedSha256": "dc69bb23f57c5ccf5eab6484ab7dd3c3c46643dd7cd745c113cecbe089edca24",
+        "tarballSha256": "dc69bb23f57c5ccf5eab6484ab7dd3c3c46643dd7cd745c113cecbe089edca24"
+      }
+    }
+  },
+  "runtime": {
+    "node": "22.22.1",
+    "nodeAbi": "127",
+    "bun": "1.3.14",
+    "openTui": "0.6.6",
+    "sqliteInMemory": "3.53.2"
+  },
+  "lifecycle": {
+    "omniusPostinstallExecuted": false,
+    "dependencyOnlySetup": [
+      "Bun1.3.14 install.js in owned prefix",
+      "better-sqlite3 v12.11.1 prebuild-install under Node22.22.1, ABI127, owned npm cache"
+    ],
+    "sharedOrGlobalWrites": false,
+    "servicesStarted": false
+  },
+  "terminal": {
+    "checks": [
+      {
+        "name": "actual production CLI enters the native terminal",
+        "passed": true
+      },
+      {
+        "name": "production native editor remains responsive across wheel bursts and multiline paste",
+        "passed": true
+      },
+      {
+        "name": "production model menu is native, searchable and restores the editable prompt",
+        "passed": true
+      },
+      {
+        "name": "production help, history navigation and native scrolling preserve terminal chrome",
+        "passed": true
+      },
+      {
+        "name": "production native resize preserves header, prompt and editable state",
+        "passed": true
+      },
+      {
+        "name": "production shutdown restores terminal ownership",
+        "passed": true
+      }
+    ],
+    "checkCount": 6,
+    "elapsedMs": 2767,
+    "viewports": [
+      [
+        110,
+        34
+      ],
+      [
+        70,
+        22
+      ],
+      [
+        120,
+        38
+      ]
+    ],
+    "packagedWorkerReady": true,
+    "cleanExit": true,
+    "alternateScreenRestored": true
+  },
+  "network": {
+    "kind": "owned fake Ollama metadata server, loopback ephemeral port; no real broker/model endpoint",
+    "model": "fixture-qwen:cloud-metadata-only",
+    "inferencePermitted": false,
+    "inferenceAttempts": 0,
+    "mutationAttempts": 0,
+    "serviceProcessAttempts": 0,
+    "forbiddenServerRequests": 0,
+    "servedMetadata": {
+      "GET /api/tags": 3,
+      "POST /api/show": 4,
+      "GET /.well-known/ollama-unify-gpu-negotiator": 1
+    },
+    "blockedOtherEgressAttempts": {
+      "count": 7,
+      "hosts": {
+        "localhost": 1,
+        "127.0.0.1": 3,
+        "models.opencode.ai": 1,
+        "opencode.ai": 1,
+        "openagents.nexus": 1
+      },
+      "meaning": "Nonfixture discovery/catalog attempts were intercepted before transport; zero attempted network is not claimed."
+    }
+  },
+  "evidence": {
+    "report": "/tmp/omnius-packed-tui-hotfix-20261017/native-terminal.json",
+    "transcript": "/tmp/omnius-packed-tui-hotfix-20261017/native-terminal.ansi",
+    "transcriptSha256": "4bd7d2a8ea8d2e4f53e5ff9a3b32f6be5fc806a8a6f00b783d95c56c779963f3",
+    "harness": "/tmp/omnius-packed-startup-terminal-20261017.mjs",
+    "harnessSha256": "36423629c70942968f8c08ab94ce994b71d95fe8abbcdd43682d9f02c52c36c8",
+    "fixtureFiles": {
+      "scratch": "/tmp/omnius-production-terminal-EUdhRM",
+      "preload": "/tmp/omnius-production-terminal-EUdhRM/metadata-only.mjs",
+      "configHome": "/tmp/omnius-production-terminal-EUdhRM/configuration",
+      "project": "/tmp/omnius-production-terminal-EUdhRM/project"
+    },
+    "reproduce": "/tmp/node-v22.22.1-linux-x64/bin/node /tmp/omnius-packed-startup-terminal-20261017.mjs --entry /tmp/omnius-packed-tui-hotfix-20261017/omnius/dist/index.js --out /tmp/omnius-packed-tui-hotfix-20261017/native-terminal"
+  },
+  "limitations": [
+    "No live inference, GPU work, model loading or real endpoint checks were performed.",
+    "The dependency-only native setup is needed because the isolated npm install deliberately skipped all lifecycle scripts; Omnius postinstall was never invoked."
+  ]
+}

package/docs/work-orders/evidence/provider-control-verification-20261017.json

@@ -0,0 +1,76 @@
+{
+  "task": "Native provider backend control and private revisioned configuration",
+  "status": "frozen verified source",
+  "base": "dd0bd9658fa763e89866e01807c0384b6b2e2535",
+  "tree": "666a37621fd55230bdcac20f588257e8efc8408c",
+  "worktree": "/tmp/omnius-provider-control-resume-20261017",
+  "patch": "/tmp/omnius-provider-control-resume-20261017.patch",
+  "patchSha256": "18fdd2a88fe472704e43c19a7f7dd3251d86a8c5f4833826622f380654024636",
+  "files": {
+    "packages/cli/src/commands/mesh.ts": "ebeff3dbc23ca6a4a190618c6e8b3c007ae542a54f7b0d30427cd04326280204",
+    "packages/cli/src/mesh/config.ts": "628f06fa20b8818bd77ec92ad45bd7a4f8992edd644868b65e1cccb7d21375d4",
+    "packages/cli/src/mesh/gateway.ts": "2ed1ffe1aaa44a7d9cab4a4aa698612ddec88b85defe608dde01a02b25af955f",
+    "packages/cli/src/mesh/provider-control.ts": "0df1a19d3a683d6259f149caaad6f36ac98ad880de1d4e8366c953ed13a117a4",
+    "packages/cli/src/mesh/runtime.ts": "f6610078abe1814bab5062bf86f8725db21b4f9d91dbe09c70c832f45bff0116",
+    "packages/cli/src/mesh/sponsor.ts": "d4e278c82fd603b823bbb7587660e418fbc6625677d5c7b40fbed8484c3bd2b0",
+    "packages/cli/tests/mesh-config-transaction.test.ts": "46d1b9b916b860cd286c00ee1d61c0f4b3934959575595aefeeb57695cf91b8f",
+    "packages/cli/tests/mesh-gateway.test.ts": "1e5b0fb76d68ff2cb49f047f41599586aed69f88de3ef78193375dfbf97c34bd",
+    "packages/cli/tests/mesh-provider-control.test.ts": "92c6a4af451d6d602c57582446ed827fbbb2f07c467fe906f165725903786e02",
+    "packages/cli/tests/mesh-runtime-control.test.ts": "48598d462f8f48d68d0bd6eff1e40203d0387f922d3a0a8e427b6a8a47e2bd69",
+    "packages/cli/tests/mesh-sponsor.test.ts": "c75b2c16f67fb6cecbc4acb9e10526124339aa876dac32784f3376e77bee06b2"
+  },
+  "verification": {
+    "runtime": "Node22.22.1",
+    "backend": {
+      "passed": true,
+      "tests": 114,
+      "files": 8,
+      "log": "/tmp/omnius-provider-control-resume-final-20261017.log",
+      "note": "All eight backend suites passed. Initial ninth optional-startup suite lacked private checkout dependency links; see separate successful retry."
+    },
+    "optionalStartup": {
+      "passed": true,
+      "tests": 2,
+      "files": 1,
+      "log": "/tmp/omnius-provider-control-resume-optional-startup-20261017.log",
+      "meaning": "Production-style bundled CLI help/mesh help remain usable with all optional mesh dependencies denied; exported transport factories defer imports until explicit opt-in."
+    },
+    "uniqueTests": 116,
+    "sourceNoEmit": {
+      "passed": true,
+      "log": "/tmp/omnius-provider-control-resume-noemit-20261017.log",
+      "config": "/tmp/omnius-provider-control-resume-tsconfig.json"
+    },
+    "diffCheck": true
+  },
+  "startupHotfixPreserved": {
+    "packages/cli/src/mesh/libp2p-transport.ts": "30da153a247418d09d367ff6771390be924603f2a610480f9a88f9600e9db11b",
+    "scripts/build-publish.mjs": "97c813e72bb4b073b5787d09b95e7d5cc2e346f44a3f16f1c3202685c392616e",
+    "scripts/publish-shrinkwrap.mjs": "52464550be0ffdbcaef1df391c0c3e26b28748dee73dbf96e1b29bc6f2fda4b6"
+  },
+  "guarantees": [
+    "Atomic private config CAS; passive read does not initialize config or identity.",
+    "Config and active runtime revisions distinguished; external control URL/token cannot be changed before a positive Stop.",
+    "Inline keys remain only in private config; key/env-source exclusive and status fields whitelisted/bounded, redirects forbidden.",
+    "Enabled known provider protocol/retirement/credential checks precede transport and offer advertisement; this is configuration validation, not availability verification.",
+    "Gateway and sponsor admission fence starts before asynchronous drains; Stop receipt follows actual settlement and foreground runtime.closed notification.",
+    "Controller dispose stops owned runtime only.",
+    "RPM/minute and daily token usage retain durable reservations through cancellation/restart; per-offer rather than account-global."
+  ],
+  "limits": [
+    "External runtime whose configuration is removed outside this controller cannot be identified without its former private control credentials.",
+    "Configured endpoints and models are not health-checked or loaded by passive menu/status/Start readiness validation.",
+    "Rate counters report reserved conservative token budgets, not measured provider billing.",
+    "Source tests use fake generation backends and owned loopback transports; no real provider inference, GPU/model load, host services, installed config/package changes, build or publication."
+  ],
+  "priorFailures": [
+    {
+      "phase": "before startup interruption",
+      "detail": "Oversized-response HTTP fixture triggered late Undici reconnect blocked by hermetic guard; fixture corrected, final backend tests have no unhandled errors."
+    },
+    {
+      "phase": "rebase verification",
+      "detail": "Optional CLI help initially could not resolve ignore because isolated checkout lacked indexer/execution node_modules links. Added verification-only links to existing workspace dependency closure; both startup cases then passed. No production change."
+    }
+  ]
+}

package/docs/work-orders/evidence/provider-controls-delivery-20261017.json

@@ -0,0 +1,71 @@
+{
+  "base": "dd0bd9658fa763e89866e01807c0384b6b2e2535",
+  "sourceHashes": {
+    "packages/cli/src/commands/mesh.ts": "ebeff3dbc23ca6a4a190618c6e8b3c007ae542a54f7b0d30427cd04326280204",
+    "packages/cli/src/mesh/config.ts": "628f06fa20b8818bd77ec92ad45bd7a4f8992edd644868b65e1cccb7d21375d4",
+    "packages/cli/src/mesh/gateway.ts": "2ed1ffe1aaa44a7d9cab4a4aa698612ddec88b85defe608dde01a02b25af955f",
+    "packages/cli/src/mesh/runtime.ts": "f6610078abe1814bab5062bf86f8725db21b4f9d91dbe09c70c832f45bff0116",
+    "packages/cli/src/mesh/sponsor.ts": "d4e278c82fd603b823bbb7587660e418fbc6625677d5c7b40fbed8484c3bd2b0",
+    "packages/cli/src/tui/command-registry.ts": "a0822a7ff86a8beb87e9530b8d66ee51fbf3fcbac0f04275dfe8a6ad1d89f6a2",
+    "packages/cli/src/tui/commands.ts": "dd5424d094097a191baa1b462e39c6403c9e82ea0d5735a69ddca48d04416fb9",
+    "packages/cli/src/tui/interactive.ts": "a53241806ac1016db704666644196533814e55cdb671cf5d3182f86b58a129c4",
+    "packages/cli/src/tui/native/command-reports.ts": "6f6f56c6f229bcf773d1fcca81f8f7e11c3223ac368a72355afd58fc5ce81420",
+    "packages/cli/src/tui/telegram-bridge.ts": "00d3d4ff70121c4b6ff2d1793637fba1de46ca62844620ac463860cf66d5a157",
+    "packages/cli/tests/command-registry.test.ts": "8443a1c0bc9fd5a75a0d6d7c5fc071d58722594b290541607057fc8cc54dfbf8",
+    "packages/cli/tests/mesh-gateway.test.ts": "1e5b0fb76d68ff2cb49f047f41599586aed69f88de3ef78193375dfbf97c34bd",
+    "packages/cli/tests/mesh-sponsor.test.ts": "c75b2c16f67fb6cecbc4acb9e10526124339aa876dac32784f3376e77bee06b2",
+    "docs/guides/provider-menu.md": "a87e993b1d4c3211be5571b4b6e37e0259284dffd9c7cd4a270cb0fe195b8408",
+    "docs/work-orders/evidence/provider-menu-verification-20261017.json": "8fb0c504254c9a9486dca4a3cd288b362ef05859b440310db9b76ad01e022580",
+    "packages/cli/src/mesh/provider-control.ts": "0df1a19d3a683d6259f149caaad6f36ac98ad880de1d4e8366c953ed13a117a4",
+    "packages/cli/src/tui/provider-controller.ts": "29c23aeed0557ac87fe43f7bbf3fc978a9a716d06f2c7d8713f0ad55eff2c697",
+    "packages/cli/src/tui/provider-menu.ts": "4593c7337cd3130002217f558fa4a8c621aa0af95a0f0f8e12762b04c1078e42",
+    "packages/cli/tests/mesh-config-transaction.test.ts": "46d1b9b916b860cd286c00ee1d61c0f4b3934959575595aefeeb57695cf91b8f",
+    "packages/cli/tests/mesh-provider-control.test.ts": "92c6a4af451d6d602c57582446ed827fbbb2f07c467fe906f165725903786e02",
+    "packages/cli/tests/mesh-runtime-control.test.ts": "48598d462f8f48d68d0bd6eff1e40203d0387f922d3a0a8e427b6a8a47e2bd69",
+    "packages/cli/tests/native-provider-menu.bun.ts": "a1b7353283161e6bc516b61fbf83516e56fc9fd03e3d0c827f62aeeddebe8ab1",
+    "packages/cli/tests/native-provider-menu.test.ts": "82d5555d26492794b5778a767fb4a39cf58e5ac9c3205cf25506cf615e08bac3",
+    "packages/cli/tests/provider-command.test.ts": "ed4a95d436bbc156d1044fe891aef598c801829cd462a882f77ac675b5a0cb70",
+    "packages/cli/tests/provider-controller-lifecycle.test.ts": "48ce28d425c4351d7040cab7ffcbb02af684ac2e24e42815e04d4ffc4f8288ad",
+    "packages/cli/tests/provider-exit-wiring.test.ts": "4b050ba71603ea5c996d391ff9090532cc7ad4f9f2aa362e96d223076b220fee",
+    "packages/cli/tests/provider-menu-lazy-startup.test.ts": "958c03985374fd9dce03e93facee77717996e645ae108e1082fc22864ef55055",
+    "packages/cli/tests/provider-menu.test.ts": "63b7fe9522641fe04bb7e24ae8248eacddb33970a33b253793643596604ddc12",
+    "docs/work-orders/evidence/provider-control-verification-20261017.json": "434be71b4ade53d6fdca5dc741d46e601154ee02a4e52cd8a64b4fd883e47926"
+  },
+  "verification": {
+    "node": "22.22.1",
+    "focusedUniqueTestsPassed": 154,
+    "vitestFiles": 15,
+    "nativeSizes": [
+      "60x20",
+      "80x24",
+      "100x30",
+      "120x36",
+      "160x48"
+    ],
+    "sourceNoEmit": "PASS",
+    "allWorkspaceBuild": "PASS",
+    "logs": [
+      "/tmp/omnius-provider-complete-tests-final.log",
+      "/tmp/omnius-provider-complete-native-final.log",
+      "/tmp/omnius-provider-complete-noemit.log",
+      "/tmp/omnius-provider-complete-build.log"
+    ],
+    "interpretation": "Initial combined run passed153 and failed only the native wrapper because ignored lifecycle scripts left the Bun stub. After dependency-only Bun setup, the12-test native/command/actual-exit gate passed, completing154 unique cases against unchanged production source."
+  },
+  "independentReview": {
+    "reviewer": "instrument_widgets",
+    "findingsFixed": [
+      "Typed quit and fallback exit await owned runtime settlement before teardown. Failed custody holds exit and remains retryable.",
+      "Telegram/noninteractive passthrough is rejected before controller access; provider is absent from bot registration and remote help."
+    ],
+    "startup": "Optional mesh and parser graph remains deferred; production-style bundled startup checks pass."
+  },
+  "scope": {
+    "sourceOnly": true,
+    "realInferenceRequests": 0,
+    "modelLoads": 0,
+    "cudaWorkloads": 0,
+    "hostServicesChanged": false,
+    "published": false
+  }
+}

package/docs/work-orders/evidence/provider-menu-verification-20261017.json

@@ -0,0 +1,95 @@
+{
+  "schemaVersion": 1,
+  "date": "2026-10-17",
+  "baseCommit": "dd0bd965",
+  "feature": "Native /provider private drafts, scoped sponsorship configuration and observed runtime status",
+  "passed": true,
+  "runtime": {
+    "node": "22.22.1",
+    "bun": "1.3.14",
+    "openTui": "0.6.6"
+  },
+  "verification": {
+    "vitest": {
+      "passed": 20,
+      "failed": 0,
+      "files": 3,
+      "log": "/tmp/omnius-provider-menu-dd0-tests.json",
+      "counting": "20 Vitest cases include one wrapper for the five actual-native scenarios; those five are not five additional Vitest cases."
+    },
+    "native": {
+      "passed": true,
+      "checks": [
+        "actual native main menu remains bounded, default-colored and keyboard accessible at five terminal sizes without losing the underlying draft",
+        "real keyboard invalid numeric input remains in its editor; outside dismissal preserves the original limit and private draft",
+        "native secret typing stays masked; review renders exact model and explicit pointer Save persists privately without starting",
+        "measured status uses actual controller metadata in named rows with no raw JSON or credential projection",
+        "closing the provider menu restores the exact main draft/cursor and releases input ownership; every captured frame/spec omits secrets"
+      ],
+      "count": 5,
+      "sizes": 5,
+      "inferenceRequests": 0,
+      "saveCount": 1,
+      "starts": 0
+    },
+    "viewports": [
+      [
+        60,
+        20
+      ],
+      [
+        80,
+        24
+      ],
+      [
+        100,
+        30
+      ],
+      [
+        120,
+        36
+      ],
+      [
+        160,
+        48
+      ]
+    ],
+    "sourceAndNodeTestNoEmit": {
+      "exitCode": 0,
+      "log": "/tmp/omnius-provider-menu-dd0-focused-noemit.log"
+    },
+    "diffCheck": "PASS"
+  },
+  "contracts": [
+    "Passive opening/cancellation creates no configuration, identity, runtime, provider request or model load.",
+    "Nested drafts include exact local/authorizedHTTPS scope, model, protocol, per-offer enablement, credentials, per-source rate/capacity/token limits, requester trust, pinned peers, listeners/relays and gateway port.",
+    "Invalid input remains editable. Stored secrets use an empty masked native editor; old/new keys and gateway token never enter modal specs or paint buffers. Endpoint/protocol/admission edits clear the previous credential.",
+    "Only explicit Review and Save persists through captured revision CAS. Passive polling/runtime status cannot silently advance that editing base. Start/apply operate on saved configuration; unsaved drafts are retained.",
+    "Status uses observed controller fields, bounded800ms polling with one request in flight, cleanup and late-receipt guards. Missing credentials/readings remain missing/unknown; env presence is explicitly unchecked by this menu.",
+    "Start/apply Stop requests are labelled as pending until startup settles and actual stop completes; the menu does not claim immediate cancellation.",
+    "Mesh parsers use dynamic external imports only inside openProviderMenu. A real bundled module imports safely when mesh parser resolution is forbidden."
+  ],
+  "scope": {
+    "controller": "Fixture controller only; backend validation/runtime is verified and owned separately.",
+    "native": "Actual OpenTUI renderers, keyboard/pointer editing, five viewport sizes, same editor draft/cursor retained.",
+    "terminalDefaults": true,
+    "inferenceRequests": 0,
+    "hostServiceChanges": 0,
+    "modelLoads": 0,
+    "cudaWork": 0,
+    "globalInstallOrPublish": false
+  },
+  "sourceHashes": {
+    "packages/cli/src/tui/provider-menu.ts": "4593c7337cd3130002217f558fa4a8c621aa0af95a0f0f8e12762b04c1078e42",
+    "packages/cli/tests/provider-menu.test.ts": "63b7fe9522641fe04bb7e24ae8248eacddb33970a33b253793643596604ddc12",
+    "packages/cli/tests/native-provider-menu.bun.ts": "a1b7353283161e6bc516b61fbf83516e56fc9fd03e3d0c827f62aeeddebe8ab1",
+    "packages/cli/tests/native-provider-menu.test.ts": "82d5555d26492794b5778a767fb4a39cf58e5ac9c3205cf25506cf615e08bac3",
+    "packages/cli/tests/provider-menu-lazy-startup.test.ts": "958c03985374fd9dce03e93facee77717996e645ae108e1082fc22864ef55055"
+  },
+  "excluded": [
+    "Copied backend mesh source files used only for private type/integration verification",
+    "Private configs/node_modules",
+    "Command/registry/controller binding owned by parent",
+    "All unrelated root changes"
+  ]
+}

package/docs/work-orders/evidence/publish-lock-verification-20261017.json

@@ -0,0 +1,80 @@
+{
+  "task": "prevent incompatible shipped libp2p dependency graph",
+  "base": "5172dc4b57f389f015fff9f3b689fd2bce7cf4ff",
+  "tree": "14d0d0408e45f1c679b5f2a41f2867fe7b8f8dc4",
+  "patch": "/tmp/omnius-publish-lock-hotfix-20261017.patch",
+  "patchSha256": "eb9a96c96c08fc9343fb1cc5a27a2c44603723798270f42ee935b3dab35b367c",
+  "files": {
+    "packages/cli/tests/publish-shrinkwrap.test.ts": "ed786c7dd985a4a90b681ba4777ce6884fa8ee726bdc6189856008dff4ff983c",
+    "scripts/build-publish.mjs": "97c813e72bb4b073b5787d09b95e7d5cc2e346f44a3f16f1c3202685c392616e",
+    "scripts/publish-omnius.sh": "7f4f77c35209df9f510e73b6a6e8d14482cf7e4cae2fe25540b5a3df435b508c",
+    "scripts/publish-shrinkwrap.mjs": "52464550be0ffdbcaef1df391c0c3e26b28748dee73dbf96e1b29bc6f2fda4b6"
+  },
+  "verification": {
+    "focused": {
+      "passed": true,
+      "files": 2,
+      "tests": 49,
+      "log": "/tmp/omnius-publish-lock-tests-final-20261017.log"
+    },
+    "syntax": {
+      "nodeCheck": [
+        "scripts/publish-shrinkwrap.mjs",
+        "scripts/build-publish.mjs"
+      ],
+      "bashCheck": [
+        "scripts/publish-omnius.sh"
+      ],
+      "passed": true
+    },
+    "actualBadPublishedLock": {
+      "npmLogicalTreeRejected": true,
+      "evidence": "/tmp/omnius-bad-lock-npm-ls-20261017.json",
+      "invalidNames": [
+        "@libp2p/utils",
+        "@libp2p/interface",
+        "@libp2p/crypto",
+        "@libp2p/interface-internal",
+        "@libp2p/peer-collections",
+        "@libp2p/peer-id",
+        "@libp2p/logger",
+        "@libp2p/multistream-select",
+        "@libp2p/peer-store"
+      ]
+    },
+    "freshWithScopedLegacyPins": {
+      "rejected": true,
+      "log": "/tmp/omnius-fresh-lock-real-20261017.log"
+    },
+    "freshAfterRetirement": {
+      "passed": true,
+      "directory": "/tmp/omnius-fresh-lock-real-r3amaprm",
+      "packages": 679,
+      "shrinkwrapSha256": "26409e3700b4cb788b9307d272458a58d0eb317d63387ba7c92eb63b29c86ce4",
+      "resolved": {
+        "libp2p": "3.3.0",
+        "@libp2p/utils": "7.4.3",
+        "@libp2p/interface": "3.4.0",
+        "@libp2p/interface-internal": "3.2.0",
+        "@libp2p/logger": "6.2.15",
+        "@libp2p/peer-store": "12.0.30",
+        "open-agents-nexus": "1.17.3",
+        "helia": "6.0.22"
+      },
+      "log": "/tmp/omnius-fresh-lock-real-repaired-20261017.log",
+      "nonblockingPeerDiagnostics": [
+        "typescript@^5 required by bun-ffi-structs",
+        "react-native>=0.60.0 required by react-native-webrtc"
+      ],
+      "interpretation": "Required regular dependency entries and npm semver-resolved ranges validated; this is not an installed-module import test."
+    }
+  },
+  "behavior": [
+    "Manifest migration removes libp2p/@libp2p/@chainsafe-libp2p pins both global and nested under Nexus/Helia; unrelated override pins preserved.",
+    "Build and publish helper resolve fresh private metadata-only npm graph with no old node_modules/locks and no lifecycle scripts.",
+    "Fresh lock validates root identity/dependencies, required ancestor presence, npm semver range errors, and unchanged manifest before atomic promotion.",
+    "Failure preserves previous staging shrinkwrap and unrelated operator files.",
+    "Root owns actual packed fresh global-prefix CLI/Nexus/mesh import and terminal smoke verification."
+  ],
+  "scope": "No shared workspace build, installed host package mutation, service start/restart, publish, GPU/model or inference request."
+}