Preserve the reviewed user-facing behavior, public-edition boundaries and owning regression coverage.
Prompt audit: Keep existing permission, ownership and recovery contracts at their current tool, runtime or test owner (Hard constraint). No separate resident instruction is added. Drop excluded hosted-only branches; retain shared side effects and tests. No optional prompt rewrite.
Prompt confirmation: The requester confirmed the exact proposed final behaviors and existing resource placements by directing that the primary implementation be followed, then explicitly requested this PR and merge. Preserve that confirmed scope only.
- Keep: The behavior and placement detailed in the audit above. Type: Hard constraint. Why: Preserve its existing canonical owner without duplicated resident instructions.
- Drop: Superseded overlapping wording and excluded hosted-only behavior. Type: Hard constraint. Why: Preserve the confirmed public capability and authority boundary.
Confirmed-by: Requester, exact final-state proposal and subsequent delivery request.
Scope: The previously confirmed final behavior and existing placement described above; no optional prompt rewrite.
Retain the integrated desktop and provider updates alongside main's CLI and voice changes. Resolve a one-use voice ticket only after microphone admission, cancel hidden-editor recording, and prevent a late ticket from disrupting a newer capture. Include the VideoStudio reference-recreation documentation and microphone permission description.
Run installer cleanup before old-version removal and replace broad process-name/prefix checks with a bounded installation-scoped helper. Preserve the installer control ancestry, sibling installations and user data; failed cleanup stops installation and retains retry.
Wire the public NSIS hook and keep platform process ownership, serialized native selection and repeated Windows cleanup cases aligned. Resolve the regression compiler from standard installed makensis or explicit public toolchain configuration, with no private product directory or automatic download. Missing compilation is an infrastructure failure; macOS compiles all four fault fixtures while Windows alone executes them.
Windows hardware execution is explicitly deferred by the requester. Preserve actual macOS compile and owning-test results separately from Windows platform skips.
Validation: 31 macOS owning tests passed; four real/failure/timeout/disabled installer fixtures compiled without compiler warnings or stderr. Six Windows-only cases remain skipped. The test compiler contains the upstream macOS character-conversion fix; no application dependency or production hook was changed to accommodate the compiler failure.
Connect existing public project and app services to due dates, removable unavailable Agent bindings, explicit save/export recovery and bounded local CLI upgrade feedback. Deliver the shared translations, modal/date layout, ordinary SDK schema compatibility and current controlled public fixtures together. Retain API-key voice session wrappers and the existing CLI handler route.
Stage only the supplied business Main entry hunks and dependency metadata candidate. Graceful active-task shutdown, Windows process capture/relaunch changes, model preload activation and native browser navigation remain separate; no native finding or platform gap is waived.
Verification: 18 exact-input business GUI cases and owning deterministic results retained in first-business-integration-group.json, alongside strict Main/core and E2E types. Existing raw native findings remain unresolved; no Windows native acceptance claimed.
Sync-source: parent through f7522d569cc40388cdd82a53445a9a4b9d32cf1b and frozen supplemental through6312cca60a0b59512c3fbdfc88a3a4b6783a0876.
Keep capture cancellation, ordered audio and draft ownership while adding key recovery, precise permission guidance, bounded sending and finalization, and microphone state styling. Restrict both compatible IPC channel names to the trusted main frame and preserve raw diagnostics without exposing credentials or provider payloads.
Add resumable Vitest, Python and Playwright batches with source and runtime invalidation, retained log receipts, artifact verification and bounded expiry. Keep non-model lanes serial and complete native fixture cleanup before reporting evidence failures.
Preserve JavaScript source-map literals and stateful log-declaration matching. Validation covers the final integrated working tree; unrelated runtime and fixture adaptations remain pending.
Validate native payloads, dependency versions and packaged entrypoints before use. Preserve standalone source data roots and add deterministic log and subprocess verification.
Pin the desktop dependency tree to the supported Electron release while preserving the application release version. Update platform checks, packaged-resource validation, test cleanup, and log delivery support used by the desktop suites.
Synchronize the fixed 1.7.2 source range while preserving OrkasOpen's local-user, BYO-provider, and no-hosted-telemetry boundaries.
Prompt audit: retained shared runtime, UI, resources, locales, Web App SDK, Japan commerce, VoiceStudio, and regression coverage; dropped only hash-reviewed PC-only account, billing, managed-provider, analytics, release/evaluation, cloud-share, and private OCR owners.
Prompt confirmation: requester explicitly asked for the complete 1.7.2 sync without omissions.
* fix: verify native dependencies in Electron and support repair
* ci: capture native child diagnostics on repair failures
* fix: preserve known Linux sharp warnings and stable Windows ESM tests
* Isolate application sharp operations in bundled Node
* Test isolated SVG text rendering without native diagnostics
* Keep CI system fonts read-only and reject GUI GLib collisions
---------
Co-authored-by: CloudTianTian <[email protected]>
Add device-local CLI and merchant connector workflows with catalog-guided
setup, scoped authorization, encrypted credentials, and action confirmation.
Extend task queues, retry recovery, project to-dos, library processing, local
agent inputs, Office artifacts, and desktop notification/navigation handling.
Update shared agents, skills, tool contracts, resource fixtures, and coverage.
Preserve newer conversation drafts and reference identities across delayed
send acceptance and navigation. Publish process-test readiness atomically
so cleanup scenarios cannot observe a partially written PID record.
Retain the independent date version, Linux source runtime, existing BYO
provider policies, production API-key access, and open-source settings.
Prompt confirmation:
Confirmed-by: Requester in the current implementation task
Scope: Apply the existing approved shared agent, skill, task, and connector
capabilities within the documented open-source product boundaries.
Prompt audit:
- Keep: Commander and actor task identity, ordered execution, user input,
project context, and tool-use responsibilities in the shared prompt
templates and their existing assembly path. Type: resident.
Why: These clauses determine behavior across ordinary turns; the update
preserves the shared product's source-of-truth context and recovery
ownership without adding an independent open-source policy layer.
- Keep: Project-task, scheduling, memory, connector setup, UI artifact,
image/video composition, Office, and SEO workflows in their owning
skills and referenced guides. Type: on-demand.
Why: Load specialized procedures only for the corresponding work; retain
source metadata and dependency ownership rather than duplicate those
procedures in every actor prompt.
- Keep: Scoped tool schemas, queue/permission state, persisted recovery
evidence, output storage, resource manifests, and deterministic validators
at their existing host boundaries. Type: non-prompt enforcement.
Why: Code and structured events own the invariants and prevent the prompt
from becoming a second authorization, persistence, or execution engine.
- Drop: Hosted account, membership, cloud/relay, telemetry, internal debug,
managed voice, watermark, welcome, and official updater instructions or
affordances from the public execution paths. Type: source-only/on-demand.
Why: Those paths require services absent from the open-source product;
shared local operations and public API-key/BYO capabilities remain usable.
Validation: Full deterministic JavaScript and resource suites, platform
native and GUI checks, typechecks, startup smoke, public endpoint contracts,
Office artifact/fixture smoke, and desktop E2E are recorded with the frozen
tree with emitted-log review.
Sync the audited release_1.6.6 increment through the open-source boundary.\n\nIncludes task-scoped permission grants, safer relaunch and local access handling, batched Office reads and structural checks, shared prompt refinements, builtin resources, and adapted regression coverage.
Improve agent orchestration, local integrations, persisted result handling, and renderer continuity.\n\nExpand deterministic coverage for packaged resources, recovery paths, and open desktop behavior.
Add local agent bridge and package tooling, expand system skills and permission prompts, improve connector and marketplace install flows, refresh project/group chat surfaces, and update desktop packaging support.
- Vitest setup: register `tsx/cjs` so same-feature `require()` calls resolve
`.ts` files under vitest; without it, `chats.deleteConversation` skips
purgeGroupDir silently and the delete-cascade tests fail.
- Bump package version to 2026.5.22 (lockfile follows).
wyt