feat(agent): add experimental local document assistant

.gitignore

@@ -21,6 +21,17 @@ playwright-report-docker/
 test-results/
 public/fonts/__fallback__/
 
+# Local AI/browser probes: downloaded documents, profiles, logs and audit artifacts.
+# Keep reproducible probe scripts and evaluation reports in docs/evaluations/.
+/.scratch/
+
+# Default Emscripten outputs from local compilation experiments.
+/a.out.js
+/a.out.wasm
+
+# Python bytecode caches generated when running evaluation and verification scripts.
+__pycache__/
+
 # Nightly public corpus checkout (never committed)
 corpus/
 corpus-src/
@@ -220,3 +231,10 @@ public/pt/help.html
 public/pt/changelog.html
 public/pt/help/embed-api.html
 public/pt/index.html
+
+# Generated copies of the root legal notices for static hosting.
+/public/LICENSE
+/public/NOTICE
+
+# Locally mirrored model artifacts (deploy separately, keep out of Git).
+/public/models/

.oxlintrc.json

@@ -16,7 +16,8 @@
     "public/help/**",
     "public/changelog/**",
     "public/convert/**",
-    "public/document_editor_service_worker.js"
+    "public/document_editor_service_worker.js",
+    "packages/agent-core/vendor/wllama-count/**"
   ],
   "rules": {
     "no-debugger": "error",

.prettierignore

@@ -187,3 +187,6 @@ public/pt/help.html
 public/pt/changelog.html
 public/pt/help/embed-api.html
 public/pt/index.html
+
+# Hash-pinned generated CPU runtime and upstream source patches.
+packages/agent-core/vendor/wllama-count/

CHANGELOG.md

@@ -70,14 +70,31 @@ notes. Entries describe what users experience, not internal refactors.
   the session on them, so a laptop keeps a recovery point about every 30
   seconds while a phone under load backs off instead of competing with the
   document you are editing.
-- **The ONLYOFFICE logo is back in the editor header, and the About pane with
-  it.** Both had been switched off as interface clutter. They are not: this
-  editor is a modified version of ONLYOFFICE, and the license it is published
-  under requires the product logo to stay. The About pane now also says that
-  this build is not an official ONLYOFFICE product and links to the source it
-  was built from. Every page of the site carries the same trademark notice in
-  its footer, and the repository has a NOTICE file with the full terms and the
-  list of changes made to the vendor build.
+- **Neutral presentation with legal attribution retained.** Product logos
+  and ecosystem promotion are removed. A neutral document icon supplies PWA and browser icons. The editor's About pane stays
+  available with the upstream copyright and version, a modified-version notice,
+  license and source links. NOTICE explains the logo decision with reference to
+  the FSF's interpretation of AGPLv3; it does not claim a court ruling. Offline caching remains available.
+
+### Fixed
+
+- Browser icons, theme-color and native controls now follow the effective light
+  or dark theme, including manual choices opposite to the OS preference.
+  Universal PWA / touch icons remain stable. The editor's existing theme
+  follow behavior is covered by light/dark browser tests.
+
+- Save messages are accepted only from the same-origin editor frame. Embedded
+  commands are accepted only from the direct parent, with a fixed origin.
+  Exported document bytes no longer bypass the host API by going straight to
+  the top-level ancestor.
+- Service Worker cache eviction stays within its `waitUntil` lifetime, removes
+  excess entries in a batch and tolerates storage failures.
+- Editor title updates preserve the filename and unsaved marker without
+  restoring a product-name suffix. Language controls include the visible
+  language in their accessible names.
+- Image-export tests use the current neutral icon. All README translations
+  distinguish local editing from optional cloud AI, qualify offline resource
+  availability and state the seven supported site languages.
 
 ### Known issues
 

Dockerfile

@@ -12,6 +12,7 @@ RUN corepack enable && \
 # Scripts are skipped here because the packages' prepare (tsc) builds need
 # their sources, which are only copied in the next layer.
 COPY package.json pnpm-lock.yaml pnpm-workspace.yaml ./
+COPY patches/ ./patches/
 COPY packages/shared/package.json ./packages/shared/
 COPY packages/converter/package.json ./packages/converter/
 COPY packages/agent-core/package.json ./packages/agent-core/

NOTICE

@@ -6,8 +6,10 @@ This product is a derivative work of ONLYOFFICE.
 The site (https://edit.chaxus.com/, https://github.com/ranuts/document) is
 licensed under the GNU Affero General Public License version 3 -- see LICENSE.
 It embeds the ONLYOFFICE document editors, which are distributed under the same
-license with the additional terms permitted by Section 7 of the GNU AGPL. Those
-terms are reproduced verbatim below and apply to this work as well.
+license with the additional terms permitted by Section 7 of the GNU AGPL. The
+received upstream notice is reproduced verbatim below for provenance. Valid
+additional terms remain applicable; the logo-retention term is addressed
+separately below rather than adopted as a downstream requirement.
 
 
 1. ONLYOFFICE editors (sdkjs, web-apps)
@@ -57,17 +59,41 @@ The notice carried by the upstream source files, reproduced in full:
     terms at http://creativecommons.org/licenses/by-sa/4.0/legalcode
 
 
-How this work complies with those terms
----------------------------------------
-
-Section 7(b) -- product logo. The ONLYOFFICE logo is shown in the editor
-header, and the About pane (product logo, version, Ascensio System SIA
-copyright, onlyoffice.com link) is reachable from the left rail. Neither is
-suppressed. lib/onlyoffice/guards/chrome.ts hides only the current-user and
-co-users widgets, which describe a collaboration session this serverless build
-cannot have, and lib/onlyoffice-editor.ts leaves `customization.about` at its
-default. test/unit/branding-notice.test.ts and
-test/e2e/vendor-branding.spec.ts keep both from being "cleaned up" again.
+Neutral presentation and retained legal notices (2026-09-26)
+-----------------------------------------------------------
+
+The interface uses descriptive functional names without project or upstream
+product logos, promotional branding, or ecosystem advertising. The editor's
+About pane stays reachable, retains the upstream version and publisher, and
+adds copyright attribution, a modified-version notice, the warranty disclaimer,
+license and source links. Site footers retain the trademark attribution and
+non-affiliation notice. Source copyright headers are not removed.
+
+The upstream notice reproduced above requires retention of the original product
+logo. In its statement of 15 April 2026, the Free Software Foundation identified
+that requirement as an AGPLv3-incompatible further restriction removable under
+Section 7:
+  https://www.fsf.org/blogs/licensing/agpl-is-not-a-tool-for-taking-freedom-away
+
+This project relies on that interpretation in omitting product-logo displays.
+The quoted upstream notice is kept as a record of the terms received, not an
+assertion that logo retention is a valid obligation for downstream recipients.
+ONLYOFFICE has asserted a different interpretation; its position is available at:
+  https://www.onlyoffice.com/license-faq
+
+The FSF statement is a license interpretation, not a court judgment. This
+branding decision does not claim that the dispute is judicially resolved or
+that removing logos alone satisfies all copyright, source-distribution or
+trademark obligations. Other valid additional terms and third-party licenses
+remain unaffected, including the GUI material's CC BY-SA 4.0 license.
+
+lib/onlyoffice/guards/chrome.ts hides the header and About product marks,
+independently of the legal text. Vendor entry HTML has matching styles to avoid
+showing those marks during startup, neutral titles and no branded favicon.
+lib/onlyoffice-editor.ts keeps About enabled, and
+lib/onlyoffice/guards/about-source.ts provides the legal and source links.
+test/unit/branding-notice.test.ts and test/e2e/vendor-branding.spec.ts verify
+neutral presentation alongside accessible legal attribution.
 
 Section 7(e) -- trademarks. ONLYOFFICE and the ONLYOFFICE logo are trademarks
 of Ascensio System SIA. No rights under trademark law are granted by the
@@ -85,7 +111,9 @@ The changes made to it are:
     well as in the editor frame (it branches on `typeof document` in three
     places), so conversion happens in a realm whose memory can be handed
     back. See docs/changelogs/2026-08-20-issue-144-memory-and-delivery.md and
-    docs/explorations/2026-09-12-x2t-in-a-worker.md.
+    docs/explorations/2026-09-12-x2t-in-a-worker.md. Modified 2026-09-26 to
+    send exported file bytes only to the immediate parent; outer ancestors
+    no longer receive an unsolicited copy.
   * public/sdkjs/common/wasm/x2t/x2t.worker.js -- added by this project. It
     loads the file above and drives it; no vendor code is reimplemented in it.
   * public/sdkjs/common/wasm/x2t/x2t.wasm -- published brotli-compressed only
@@ -103,6 +131,11 @@ The changes made to it are:
     keys returned `undefined` and crashed the tooltip renderer. Values only;
     no key is removed.
   * public/web-apps help content trimmed from the shipped tree.
+  * public/web-apps/apps/{common,*/main}/index*.html -- entry shells with
+    branded titles now use neutral titles and an empty favicon. An inline
+    stylesheet suppresses header and About product marks before the
+    iframe paints. Copyright, publisher and version information remain.
+    Changed 2026-09-26.
   * public/fonts/ -- the font catalog's proprietary font files were replaced
     with redistributable open-source families (see docs/font-licenses.md and
     docs/changelogs/2026-08-22-font-licensing.md).
@@ -112,7 +145,8 @@ The changes made to it are:
     still resolves, and nine families were added for scripts the remaining set
     did not cover.
 
-Nothing else in public/sdkjs/ or public/web-apps/ is edited. The behavioural
+Other than the changes listed above, public/sdkjs/ and public/web-apps/
+are not edited. The behavioural
 patches this site needs are applied at runtime from lib/onlyoffice/guards/,
 which leaves the rest of the vendor files byte-identical to the build they
 came from.
@@ -140,3 +174,19 @@ third-party project https://github.com/cryptpad/onlyoffice-x2t-wasm.
 Other trademarks named in this repository and on the site (Microsoft Word,
 Excel, PowerPoint, and others) are the property of their respective owners and
 are used only to describe the file formats this editor reads and writes.
+
+The application icon is an independently drawn, neutral document illustration.
+It contains no upstream product logo, trademark or project initials.
+
+4. Optional local AI runtime
+----------------------------
+
+wllama 3.6.1 (https://github.com/ngxson/wllama), Copyright (c) 2024
+Xuan Son NGUYEN, is distributed under the MIT license. Its WASM runtime
+includes llama.cpp. License copies are shipped in public/licenses/.
+Model weights are not bundled; their licenses are independent of the runtime.
+The matching optional @wllama/wllama-compat 3.6.1 package is also MIT licensed.
+The local pnpm patch modifies wllama's memory64 capability detection and
+propagates fatal worker errors and explicit termination to pending and
+subsequent tasks; see
+patches/@wllama__wllama@3.6.1.patch.

bin/archive-quality.mjs

@@ -0,0 +1,43 @@
+import { readFileSync, rmSync, writeFileSync } from 'node:fs';
+import { join } from 'node:path';
+import { spawnSync } from 'node:child_process';
+import { fileURLToPath } from 'node:url';
+import { verifyArchive } from './evaluation-archive.mjs';
+
+const mode = process.argv[2];
+if (!['format', 'format:check', 'lint'].includes(mode)) throw new Error('Expected format, format:check or lint');
+const root = fileURLToPath(new URL('../', import.meta.url));
+const manifest = JSON.parse(readFileSync(join(root, 'docs/evaluations/archive-integrity.json'), 'utf8'));
+console.log(`Verified ${verifyArchive(root, manifest)} immutable evaluation artifacts.`);
+// Ignore patterns resolve relative to the ignore file, so it must live at
+// the repository root. Exclusive creation avoids overwriting another run.
+const ignore = join(root, `.archive-quality-${process.pid}.ignore`);
+try {
+  const existing = mode === 'lint' ? '' : readFileSync(join(root, '.prettierignore'), 'utf8');
+  writeFileSync(ignore, `${existing}\n${manifest.files.map(({ path }) => `/${path}`).join('\n')}\n`, { flag: 'wx' });
+  const args =
+    mode === 'lint'
+      ? [
+          'exec',
+          'oxlint',
+          '--deny-warnings',
+          ...manifest.files
+            .filter(({ path }) => path.endsWith('.mjs'))
+            .flatMap(({ path }) => ['--ignore-pattern', path]),
+        ]
+      : [
+          'exec',
+          'prettier',
+          mode === 'format' ? '--write' : '--check',
+          '.',
+          '--ignore-path',
+          '.gitignore',
+          '--ignore-path',
+          ignore,
+        ];
+  const result = spawnSync('pnpm', args, { cwd: root, stdio: 'inherit' });
+  if (result.error) throw result.error;
+  process.exitCode = result.status ?? 1;
+} finally {
+  rmSync(ignore, { force: true });
+}

bin/build-app-icons.mjs

@@ -0,0 +1,22 @@
+/** Rasterize the checked-in SVG sources without adding a runtime dependency.
+ * npm install --prefix /tmp/document-icon-tools --no-audit --no-fund @resvg/resvg-js@2.6.2
+ * node bin/build-app-icons.mjs /tmp/document-icon-tools/package.json
+ */
+import { createRequire } from 'node:module';
+import { readFileSync, writeFileSync } from 'node:fs';
+import { resolve } from 'node:path';
+
+if (!process.argv[2]) throw new Error('Pass the package.json path of an installation of @resvg/resvg-js.');
+const { Resvg } = createRequire(resolve(process.argv[2]))('@resvg/resvg-js');
+for (const [name, sizes] of [
+  ['document', [32, 180, 192, 512]],
+  ['document-maskable', [512]],
+  ['document-light', [32]],
+  ['document-dark', [32]],
+]) {
+  const source = new URL(`../public/icons/${name}.svg`, import.meta.url);
+  for (const size of sizes) {
+    const png = new Resvg(readFileSync(source), { fitTo: { mode: 'width', value: size } }).render().asPng();
+    writeFileSync(new URL(`../public/icons/${name}-${size}.png`, import.meta.url), png);
+  }
+}

bin/build.sh

@@ -9,6 +9,10 @@ VITE_MODE_ARGS=""
 
 echo "Starting build process (publicDir: $PUBLIC_DIR, outDir: $DIST_DIR)..."
 
+# Workspace exports resolve to dist, so rebuild them before Vite reads those
+# files. Installation-time prepare alone leaves later source edits stale.
+pnpm --recursive --filter '@ranuts/*' build
+
 # Keep the vendored ranui design-token layer in sync (the landing hero consumes
 # its --ran-* variables via $PUBLIC_DIR/ran-tokens.css). Regenerate on every build
 # so it never drifts from the installed ranui version, prepending a provenance
@@ -66,6 +70,10 @@ node bin/locale-fill.mjs
 
 pnpm vite build $VITE_MODE_ARGS
 
+# Hash exact inline bootstrap bytes after Vite transforms the editor entry.
+# The meta policy travels with the cached shell on every static host.
+node bin/editor-csp.mjs "$DIST_DIR"
+
 # Fingerprint the vendored design tokens.
 #
 # The file's *name* was stable while its *content* changed every deploy — the one combination
@@ -106,6 +114,8 @@ else
     echo "Warning: $TOKENS_DIST not found, skipping token fingerprint."
 fi
 
+node ./bin/offline-assets.mjs "$DIST_DIR"
+
 # Inject the version stamps into sw.js.
 #
 # Two of them, and the difference is the point. The build stamp names the core

bin/editor-csp.d.mts

@@ -0,0 +1,2 @@
+export function secureEditorHtml(html: string): string;
+export function stampEditorCsp(directory: string): Promise<void>;

bin/editor-csp.mjs

@@ -0,0 +1,38 @@
+import { createHash } from 'node:crypto';
+import { readFile, writeFile } from 'node:fs/promises';
+import { join } from 'node:path';
+
+/** Final HTML bytes define the allowed bootstrap; never permit arbitrary inline scripts. */
+export function secureEditorHtml(html) {
+  if (/http-equiv\s*=\s*["']Content-Security-Policy["']/i.test(html)) throw new Error('Editor CSP already exists');
+  if (!/<head\b[^>]*>/i.test(html)) throw new Error('Editor HTML needs a head insertion point');
+  const hashes = [...html.matchAll(/<script\b([^>]*)>([\s\S]*?)<\/script>/gi)]
+    .filter((match) => !/\bsrc\s*=/i.test(match[1]) && match[2].trim())
+    .map((match) => `'sha256-${createHash('sha256').update(match[2]).digest('base64')}'`);
+  const policy = [
+    "default-src 'self'",
+    `script-src 'self' 'wasm-unsafe-eval' ${[...new Set(hashes)].join(' ')}`,
+    "script-src-attr 'none'",
+    "style-src 'self' 'unsafe-inline'",
+    "img-src 'self' data: blob:",
+    "font-src 'self' data:",
+    "worker-src 'self' blob:",
+    "frame-src 'self' blob:",
+    // The editor supports user-supplied remote document and artifact URLs.
+    // Fetch permission does not grant those hosts permission to execute scripts.
+    // Embedded editor images are read with fetch(data:) before decoding.
+    "connect-src 'self' https: http: blob: data:",
+    "object-src 'none'",
+    "base-uri 'self'",
+    "form-action 'self'",
+  ].join('; ');
+  return html.replace(
+    /<head\b[^>]*>/i,
+    (head) => `${head}\n<meta http-equiv="Content-Security-Policy" content="${policy}">`,
+  );
+}
+export async function stampEditorCsp(directory) {
+  const path = join(directory, 'editor.html');
+  await writeFile(path, secureEditorHtml(await readFile(path, 'utf8')));
+}
+if (process.argv[1]?.endsWith('/editor-csp.mjs')) await stampEditorCsp(process.argv[2] ?? 'dist');

bin/evaluate-local-writing.mjs

@@ -0,0 +1,30 @@
+/** Browser-side smoke evaluation. Import from the local Vite server. */
+export async function evaluateLocalWriting(provider, samples, buildWritingMessages, onResult = () => {}, signal) {
+  const results = [];
+  await provider.preload();
+  for (const [locale, text] of samples) {
+    signal?.throwIfAborted();
+    const started = performance.now();
+    let firstMs;
+    const response = await provider.chatStream(
+      buildWritingMessages({ task: 'rewrite', text }),
+      [],
+      () => {
+        firstMs ??= performance.now() - started;
+      },
+      signal,
+    );
+    const result = {
+      locale,
+      text,
+      output: response.text,
+      firstMs,
+      totalMs: performance.now() - started,
+      // Literal checks are not semantic quality scores or language detection.
+      literalsPreserved: ['1,250', 'EUR', '2026-10-08', 'Alex'].every((value) => response.text.includes(value)),
+    };
+    results.push(result);
+    onResult(result);
+  }
+  return results;
+}

bin/evaluation-archive.d.mts

@@ -0,0 +1,5 @@
+export function verifyArchive(
+  root: string,
+  manifest: { version: number; files: { path: string; sha256: string }[] },
+  options?: { syntax?: boolean },
+): number;