Record hosted native recovery and destination review findings

docs/server.md

@@ -1,6 +1,6 @@
 # Arcadia Studio server
 
-`arcadia-server` is a headless Rust REST service for the same schema-4 model, commands, source language, validation, artifacts and OA/SA traces used by the desktop. It stores each model and its authored source project together in an atomic JSON envelope. The service provides a deployment artifact and configuration examples; this repository does not assert that a remote instance has been deployed.
+`arcadia-server` is a headless Rust REST service for the same schema-5 model, commands, source language, validation, artifacts and OA/SA traces used by the desktop. It stores each model and its authored source project together in an atomic JSON envelope. The service provides a deployment artifact and configuration examples; this repository does not assert that a remote instance has been deployed.
 
 The complete HTTP contract is [api.rst](api.rst); machine-readable schemas are in [openapi.json](openapi.json), also served at `/api/v1/openapi.json`. The original [service research](research-v2-service.md) discusses broader alternatives; retained history, SQLite, idempotency receipts and stored transition plans from that research are **not** the implemented storage contract.
 

harness/STATE.md

@@ -9,15 +9,17 @@ retain the whole release scope. Scoped tests/native acceptance are not full pari
 - Main C:/Users/sorok/OneDrive/Documents/ChatGPT/Capella 2 is the continuation
   pointer, codex/release1-engineering, last pointer04316a7.
 - DATA D:/CodexBuilds/Capella2-data-integration, codex/data-contract-integration,
-  production28ebbbb; root owns index/data-target. Full workspace gates active99033.
+  productioncf04ff1; root owns index/data-target. Constructor desktop gates active3782.
 - Linux D:/CodexBuilds/Capella2-data-linux-review, codex/data-linux-review,
-  equivalent04210b3; root owns index/data-linux-target. Gates active functions1261.
+  equivalentb5db730; root owns index/data-linux-target. Constructor gates active6616.
 - SEM D:/CodexBuilds/Capella2-semantic-review, codex/semantic-review, c149f2f.
-  Fresh hosted_lifecycle_review owns read-only constructor GUI review and exclusive
+  Constructor GUI review is closed. semantic_gui_design owns slice1 exact history
-  semantic-desktop-target. semantic_gui_design is planning keyed/order/reset only.
+  reset + unordered Member/Literal authoring, index and semantic-desktop-target.
-- HOST D:/CodexBuilds/Capella2-hosted-desktop, codex/hosted-desktop, base8a75294.
+  Broader annotation/order/attachment work is still planned, not implemented.
-  semantic_integration owns docs/server.md, docs/scope.md, README and narrow
+- HOST D:/CodexBuilds/Capella2-hosted-desktop, codex/hosted-desktop, base798b277. semantic_integration owns the high-impact invalid-local-source
-  guide.rs Server-topic prose plus index/scenario-target. No core changes active.
+  destination fix in app.rs and focused hosted tests plus index/scenario-target.
+  Parent then handles a separate native stale-catalog finding. Fresh child reviewer
+  owns read-only fix review; its constructor native fixtures are complete in Temp.
 - Root is sole native operator. No workers may issue native input.
 
 ## Implemented and verified
@@ -32,22 +34,32 @@ Save and separate memory-only connection state.24 focused transport/lifecycle te
 and fresh review closed the captured-credential bug. Integrated Windowsf08507a360
 desktop tests/Clippy/fmt/build pass; Linuxba9c117359 pass before compact form fix.
 No external deployment. New core fixes43370de/8a75294 pass359 core tests and fresh
-independent optional-row/port probes. Full DATA/Linux integration gates are active.
+independent optional-row/port probes. DATA28ebbbb/Linux04210b3 full workspace767/770 tests (one intentional benchmark
+ignored each), strict workspace Clippy/fmt/optimized desktop+server builds pass.
 
 Remaining constructor GUIc149f2f (Data/Port/Occurrence/Event) passes299 SEM desktop
-tests, Clippy/fmt/build; fresh independent review active. Keyed/order/reset and
+tests, Clippy/fmt/build; fresh independent review closed35 focused and299 full tests. Keyed/order/reset and
 artifact/multi-source graphical decisions remain required.
 
 ## Native state and evidence
 
-Current Windows hosted trial6fcc238 window2493046, exec71940,1100x700. It has a
+Windows hosted6fcc238 trial71940 closed normally, exit0 and empty stderr. Native
-74-element/13-link/three-file model, one API-created CAD artifact and five expected
+1440x900/1100x700 publish, graph/text Save, invalid draft retention, API artifact
-incomplete-engineering warnings. Hosted resource d28b2fc9-fbbd-456b-8ba8-a1195d1c8f33
+Check/review/Reload/Undo/Redo, stale revision conflict/local retention, offline/retry,
-at127.0.0.1:8787, server revision5. Local description is the restored competing edit
+exact three-file local Save As and catalog Open passed. Server20984 remains running
-after Undo of Reload. Offline Save was just invoked after stopping only verified
+at127.0.0.1:8787 with isolated store/evidence
-test server11260; observe result before restarting. Sky hostedWindow/hostedState.
+C:/Users/sorok/AppData/Local/Temp/capella2-hosted-native-20260906.
-Service store/evidence: C:/Users/sorok/AppData/Local/Temp/capella2-hosted-native-20260906.
+Resource d28b2fc9-fbbd-456b-8ba8-a1195d1c8f33 is revision6. See hosted ledger.
-See release-hosted-desktop.md for exact native actions, responses and remaining work.
+
+New high-impact reproduced defect: installing invalid local repair source retained
+the prior hosted save handle; after repair Save overwrote that server resource.
+HOST worker owns minimal detach fix and actual-App red/green, independent review
+active. Native stale empty catalog after publish/save is a separate pending P2.
+Both require fixes and root native recheck; no hosted completion claim.
+
+Constructor native fixtures: C:/Users/sorok/AppData/Local/Temp/capella2-constructor-native-20260906.
+README lists six independently core-validated input models and expected outcomes
+covering Data/Event/Port/Occurrence/MessageKind. Copy before native edits.
 
 Windows process67ed8e0 trial closed0, empty stderr. Native Fit/manual-scale and
 remote scroll survive tools/forms; owner switch resets actual canvas; compact
@@ -66,12 +78,12 @@ Do not bypass authentication. Windows/Wayland/REST are not blocked.
 
 ## Next actions
 
-1. Observe offline native Save failure; restart isolated server/same store, verify
+1. Integrate independently reviewed invalid-local-open and catalog fixes, then
-   explicit Check/retry, local preservation, catalog Open and source Save as local.
+   operate fixed native flow and complete hosted Linux acceptance.
 2. Finish active platform gates, freeze combined builds and verify compact process
    form fix and hosted workflows on Linux; retain exact hashes/evidence.
-3. Close fresh constructor GUI review; integrate c149f2f and docs/help commit,
+3. Complete native scalar/group cases and independently reviewed reset/keyed
-   then complete native scalar/group cases and keyed/order/reset/artifact/multi-source.
+   slice, then order/annotation/attachment/artifact/multi-source decisions.
 4. Complete advanced process/scenario/OA, Home/recent/recovery/help/coverage requirements;
    fresh final reviews, full platform/MSRV/docs/package acceptance. No release handoff yet.
 

harness/release-hosted-desktop.md

@@ -97,3 +97,34 @@ and optimized build. Linuxba9c117 passed359 tests and the same gates before the
 compact form fix. DATA28ebbbb/Linux04210b3 now include independently reviewed
 core constructor-history/explicit-Port fixes; their full workspace gates are active.
 An initial Linux invocation selected unconfigured Ubuntu; corrected to Ubuntu-24.04.
+
+## Windows offline, local-copy and catalog completion
+
+Native6fcc238 at1100x700: stopped only identity-checked isolated server11260.
+Save reported unreachable/interrupted service and retained the local model/source.
+Restarted same binary/store as20984; independent read found revision5 unchanged.
+Explicit Save retry succeeded revision6 with the restored local description and
+CAD attachment. No automatic replay was involved.
+
+Save as local wrote a new .arcadia project under
+C:/Users/sorok/AppData/Local/Temp/capella2-hosted-native-20260906/local-copy.
+Header changed from Save to server/Hosted to Save all/All changes saved. All three
+disk file strings compared exactly equal to server revision6, including the comment
+and both includes. Evidence: offline-recovery.json and local-copy-equality.json.
+Connect/refresh then displayed the resource; selecting it and Open selected loaded
+the hosted revision6, restored Save to server and the authored model. Trial71940
+closed normally, exit0, empty native.stderr.log. No user model was modified.
+
+Native P2: after Publish/Save the catalog retained its initial empty result and
+misleading No models found text until manual refresh. A separate follow-up is pending.
+Code review then reproduced a high-impact destination defect with actual App/HTTP:
+opening invalid local source from hosted, repairing and saving could overwrite the
+old resource. The local repair-workspace branch needs to detach its previous hosted
+handle; true read failure/Cancel must retain it. HOST owns red/green fix; fresh review
+and native fixed-flow verification are required before hosted acceptance closes.
+
+DATA28ebbbb/Linux04210b3 full workspace gates completed:767/770 tests respectively,
+one intentional ignored benchmark each, strict workspace all-target Clippy, fmt and
+optimized desktop/server builds pass. Logs hosted-core-{workspace-test,workspace-clippy,
+build}.log in dedicated data/data-linux targets. GUI constructors and help are now
+integrated at DATAcf04ff1/Linuxb5db730; desktop gates3782/6616 are active.