fix(multimode): harden production dependency baseline

.github/workflows/codeql.yml

@@ -28,18 +28,18 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@v3
+        uses: github/codeql-action/init@v4
         with:
           languages: ${{ matrix.language }}
           queries: security-extended,security-and-quality
 
       - name: Autobuild
-        uses: github/codeql-action/autobuild@v3
+        uses: github/codeql-action/autobuild@v4
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@v3
+        uses: github/codeql-action/analyze@v4
         with:
           category: "/language:${{ matrix.language }}"

.github/workflows/work-design-integrity.yml

@@ -0,0 +1,36 @@
+name: work-design-integrity
+
+on:
+  pull_request:
+    branches: [dev]
+    paths:
+      - "work_design/**"
+      - "INTEGRATION.md"
+      - "scripts/check-pr-size.sh"
+      - ".github/workflows/work-design-integrity.yml"
+
+permissions:
+  contents: read
+
+jobs:
+  merge-and-size:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+
+      - name: Fetch base
+        run: git fetch origin dev --depth=1
+
+      - name: Check mergeability without mutating the checkout
+        run: git merge-tree --write-tree origin/dev HEAD
+
+      - name: Check card size
+        run: bash scripts/check-pr-size.sh dev
+
+      - name: Check whitespace
+        run: git diff --check origin/dev...HEAD
+
+      - name: Check Workbench security policy
+        run: node scripts/check-workbench-security.mjs

.gitignore

@@ -130,3 +130,4 @@ unifia-conformance.json
 # repository path and per-machine tool versions, so it is a local record rather
 # than something to track.
 artifacts/
+packages/mobile/src-tauri/ort-runtime/

INTEGRATION.md

@@ -0,0 +1,27 @@
+# Work/Design integration ownership
+
+This file records high-conflict surfaces and the rule for resolving overlap between cards.
+
+## Ownership map
+
+| Surface | Owner card | Conflict rule |
+|---|---|---|
+| `packages/app/src/pages/layout.tsx` | M4/M16 | Keep route registration and shell composition in one card; split any conflict before resolving. |
+| `packages/app/src/app.tsx` | M4 | Preserve the existing provider order; route/context changes require an architecture note. |
+| `packages/app/package.json` | M2a | Dependency and export changes are atomic with the lockfile generated by the package manager. |
+| `packages/workbench-server/src` | M1b/M1c/M6-M10 | Server transport, security, and feature routes remain separate card boundaries. |
+| Tauri configuration files | M1c/M22 | Native bridge and packaging changes require platform evidence before integration. |
+| `packages/contracts` | M3 | Wire contracts have one owner; consumers do not duplicate schemas. |
+
+## Resolution budget
+
+- Resolve at most 50 changed lines in a card-level conflict.
+- Above that limit, stop, record the conflict, and split the card before editing.
+- Never resolve by accepting an entire side blindly.
+
+## File-type rules
+
+- TypeScript: preserve the local formatter and package boundary.
+- JSON/YAML: keep generated ordering; regenerate rather than hand-edit generated output.
+- Native configuration: preserve platform identifiers unless a reviewed gate explicitly changes them.
+- Tests: add evidence next to the behavior they prove; do not weaken an existing assertion to make a card pass.

docs/adr/0010-shell-modes-project-workbench-workspace.md

@@ -0,0 +1,23 @@
+<!-- SPDX-License-Identifier: MIT -->
+
+# ADR-0010: Shell modes project a single Workbench workspace
+
+**Date**: 2026-08-14 | **Status**: Accepted
+
+## Context
+
+Code, Work, Design and Automate must preserve one decoded workspace, one session lineage and one native Workbench lease. Route state, mode chrome and resource data previously had independent fallback paths, which made a return to Code diverge from the visible projection.
+
+## Decision
+
+The URL is the authoritative mode selector. `DirectoryLayout` owns the decoded workspace boundary and mounts one `WorkspaceWorkbenchProvider`; Workbench lifecycle state owns connection, rollback, deadline and cleanup. Surfaces consume TanStack Query entries keyed by server origin, instance, workspace, resource and parameters. SessionHeader titlebar content is registered through reactive refs owned by the Solid titlebar.
+
+## Alternatives rejected
+
+- A connection per mode: rejected because workspace-scoped revoke can invalidate a sibling mode.
+- DOM id lookup for titlebar slots: rejected because it races mount order and does not react to replacement.
+- Silent fallback to Code or demo data: rejected because invalid state must remain visible and diagnosable.
+
+## Consequences
+
+Mode changes are route transitions over shared providers, not runtime launches. A native bearer remains short-lived and scoped; signing material and IPC secrets stay native. GUI smoke tests remain required for Windows controls, DPI, shutdown and Snap behavior.

docs/adr/0033-automate-v0-read-only-surface.md

@@ -0,0 +1,51 @@
+<!-- SPDX-License-Identifier: MIT -->
+
+---
+id: 0033
+title: Automate v0 read-only workspace surface
+status: ACCEPTED
+date: 2026-08-14
+---
+
+# ADR-0033: Automate v0 read-only workspace surface
+
+## Context
+
+The desktop Automate route needs a real workspace-backed surface, but the
+current Workbench server exposes workflow execution only through POST actions.
+It has no typed read-only endpoint for listing workflow definitions. A static
+placeholder or an invented API would make unavailable functionality look real.
+
+## Decision
+
+Automate v0 reads the bounded `.unifia/workflows` directory through the existing
+`WorkbenchClient.listFiles()` contract with `workspace.read`. It displays the
+real definition paths, an explicit empty state, connection state, and errors.
+
+Workflow execution, scheduling, and approval actions remain unavailable until a
+versioned read/write workflow contract is added to the authoritative server and
+client packages. The UI must not expose an active execution button before that
+contract exists.
+
+## Alternatives rejected
+
+- Inventing `GET /v1/workflows`: rejected because no server contract exists.
+- Calling the existing workflow POST route from the UI: rejected because it
+  would require an untyped definition and an execution capability.
+- Keeping a static Automate placeholder: rejected because it provides no real
+  workspace behavior and hides the implementation boundary.
+
+## Consequences
+
+- Automate is a genuine read-only vertical slice in v0.
+- The workspace remains the authority for available definitions.
+- No workflow execution is claimed or simulated.
+- A future workflow catalog endpoint can replace the file-index adapter without
+  changing the mode navigation contract.
+
+## Implementation references
+
+- `packages/app/src/pages/workbench-mode.tsx`
+- `packages/workbench-shell/src/client.ts`
+- `packages/workbench-server/src/index.ts`
+- `packages/workflow-runtime/src/index.ts`

docs/autonomy/WORK-DESIGN-UI-REPAIR-2026-08-14.md

@@ -0,0 +1,59 @@
+<!-- SPDX-License-Identifier: MIT -->
+
+---
+project: unifia
+type: roadmap
+tags: [work-design, desktop, tauri, modes, bridge]
+summary: "Diagnostic et correction de la navigation UI Work/Design/Automate sans fallback ni contrat Workbench inventé."
+created: 2026-08-14
+updated: 2026-08-14
+related: [[work_design/DECISIONS|Work/Design decisions]], [[work_design/MANUAL-VERIFICATION|Manual verification]], [[docs/adr/0033-automate-v0-read-only-surface|Automate v0 ADR]]
+---
+
+# Work/Design UI repair — 2026-08-14
+
+## Baseline
+
+- Worktree : `D:\App\OpenCode\opencode-work-design`
+- Branche : `work-design`
+- HEAD initial : `745aa86b82`
+- Merge-base `work-design`/`dev` : `91daa35a26a8e44d7f35b539c91030ec1e230c54`
+- Dirty state initial : `mode.test.ts`, `mode.tsx`, `mode-directory.ts` uniquement
+- Références : `opencode-unifia-rebrand` est une snapshot sans dépôt Git exploitable ; `unifia-execution-clean` est sur `a37f5115d`.
+
+## P0 conclusions
+
+- Les contrats headless `workbench-shell` (`modes.ts`, `shell.ts`, `shell.test.ts`) sont byte-identiques dans les trois arbres comparables.
+- Le dépôt actif possède des contrats supplémentaires déjà implémentés : client typed, routes, manifest G6, serveur, artefacts, Design System et opérations.
+- `ModeProvider` était global dans `app.tsx` mais dépendait de `useParams()` alors que `:dir` est fourni par `DirectoryLayout`. La résolution a été déplacée vers le premier segment de `useLocation().pathname`, puis décodée une seule fois.
+- Le changement de mode conserve désormais l’override `?session=`.
+- Le clic UI direct n’a pas été automatisé dans cette session ; il reste `MANUAL_VERIFICATION_REQUIRED` dans MV-06.
+
+## Changements réalisés
+
+- `packages/app/src/context/mode-directory.ts` : extraction du segment route, décodage et conservation contrôlée de `session`.
+- `packages/app/src/context/mode.tsx` : suppression de la dépendance à `useParams()` hors route.
+- `packages/app/src/context/mode.test.ts` : régressions route/workspace/session.
+- `packages/app/src/pages/workbench-mode.tsx` : état bridge borné avec erreur/retry, données réelles Work (`documents`, `artifacts`, `files`), export réel du premier artefact, manifest/catalogues Design réels, et Automate v0 en lecture seule de `.unifia/workflows`.
+- `ModeProvider` owns one workspace-scoped Workbench connection consumed by Work, Design and Automate; switching surfaces no longer creates three independent connections.
+- `docs/adr/0033-automate-v0-read-only-surface.md` : contrat Automate v0 sans API workflow inventée.
+
+## Evidence
+
+- App typecheck : PASS.
+- App suite : 707 tests PASS.
+- Workbench shell canonical script : PASS (`122/122`, client `27/27`, bridge `5/5`, connection `2/2`, routes `11/11`, DesignSystem `6/6`).
+- Workbench server canonical script : PASS (handshake `5/5`, server `72/72`, bootstrap `40/40`, topology `5/5`, Vitest `4/4`).
+- App production build : PASS.
+- Tauri `bun run tauri build --no-bundle` : PASS, `Unifia.exe` produit le 2026-08-14 à 17:07:55.
+- Hash binaire : `3C4EE538DA6DCF35E79C41574EB81016176506485ED95F99655208C974BFBC25`.
+- Processus fraîchement lancé : `Unifia` répondant et `unifia-cli` répondant.
+
+## Restant ouvert
+
+- MV-01/MV-02 : traces bridge natif, rotation et révocation.
+- MV-06 : clic réel Code/Work/Design/Automate, deep links, deux workspaces et réouverture.
+- MV-07/MV-08 : cycle de vie desktop et single-writer cross-process.
+- MV-09 : CSP extraite du bundle et essais interactifs URL.
+- L’export Work est branché sur le contrat réel, mais doit être exercé avec un workspace contenant un artefact et l’approbation/capability attendue.
+- Automate ne permet volontairement aucune exécution tant qu’un contrat typed de catalogue/exécution workflow n’est pas ajouté au serveur.

package.json

@@ -73,10 +73,10 @@
       "solid-list": "0.3.0",
       "tailwindcss": "4.1.11",
       "virtua": "0.42.3",
-      "vite": "7.1.4",
+      "vite": "7.3.5",
       "@solidjs/meta": "0.29.4",
-        "@solidjs/router": "0.15.4",
-        "solid-js": "1.9.10",
+      "@solidjs/router": "0.15.4",
+      "solid-js": "1.9.10",
       "vite-plugin-solid": "2.11.10"
     }
   },
@@ -99,7 +99,8 @@
     "@unifia/plugin": "workspace:*",
     "@unifia/script": "workspace:*",
     "@unifia/sdk": "workspace:*",
-    "typescript": "catalog:"
+    "typescript": "catalog:",
+    "wrangler": "4.123.0"
   },
   "repository": {
     "type": "git",
@@ -132,8 +133,12 @@
     "uuid": "13.0.1",
     "defu": "6.1.7",
     "seroval": "1.5.4",
-    "react-router": "6.30.2",
-    "wrangler": "4.89.1",
+    "react-router": "6.30.4",
+    "astro": "7.2.2",
+    "vite": "7.3.5",
+    "js-yaml": "4.3.1",
+    "nanoid": "3.3.18",
+    "wrangler": "4.123.0",
     "ip-address": "10.5.0",
     "dompurify": "3.4.13",
     "fast-xml-parser": "5.7.3",

packages/app/e2e/backend.ts

@@ -118,6 +118,7 @@ export async function startBackend(label: string, input?: { llmUrl?: string }):
   const url = `http://127.0.0.1:${port}`
   try {
     await waitForHealth(url)
+    await waitForHealth(url, "/config/providers")
   } catch (error) {
     proc.kill("SIGTERM")
     await fs.rm(sandbox, { recursive: true, force: true }).catch(() => undefined)

packages/app/e2e/modes/mode-navigation.spec.ts

@@ -0,0 +1,52 @@
+/* SPDX-License-Identifier: MIT */
+
+import { test, expect } from "../fixtures"
+import { dirPath } from "../utils"
+
+test("multimode navigation keeps the route and projection aligned", async ({ page, directory, slug }) => {
+  await page.setViewportSize({ width: 1400, height: 800 })
+  await page.goto(`${dirPath(directory)}/session`)
+  await expect(page).toHaveURL(new RegExp(`/${slug}/session(?:[/?#]|$)`))
+
+  const modes = ["work", "design", "automate"] as const
+  for (const mode of modes) {
+    await page.getByRole("button", { name: `${mode} mode` }).click()
+    await expect(page).toHaveURL(new RegExp(`/${slug}/${mode}(?:[/?#]|$)`))
+    await expect(page.locator(`[data-workbench-mode="${mode}"]`).first()).toBeVisible()
+    await expect(page.locator(`[data-workbench-chat="${mode}"]`)).toBeVisible()
+    await expect(page.locator("[data-workbench-chat-input]")).toBeVisible()
+    await page.locator("[data-workbench-chat-suggestion]").click()
+    await expect(page.locator("[data-workbench-chat-input]")).not.toHaveValue("")
+  }
+
+  await page.getByRole("button", { name: "code mode" }).click()
+  await expect(page).toHaveURL(new RegExp(`/${slug}/session(?:[/?#]|$)`))
+  await expect(page.locator(`[data-workbench-mode="code"]`).first()).toBeVisible()
+})
+
+test("unknown mode never renders an empty projection", async ({ page, directory }) => {
+  await page.goto(`${dirPath(directory)}/unknown-mode`)
+  await expect(page.locator("[data-workbench-error], [data-workbench-mode=code]").first()).toBeVisible()
+})
+
+test("workbench surfaces fail closed before a native bridge is available", async ({ page, directory }) => {
+  await page.setViewportSize({ width: 1400, height: 800 })
+  await page.goto(`${dirPath(directory)}/session`)
+
+  await page.getByRole("button", { name: "work mode" }).click()
+  await expect(page.locator('[data-workbench-surface="work"]')).toBeVisible()
+  await expect(page.getByText("Chat remains available")).toBeVisible()
+  await expect(page.locator("[data-workbench-connection]")).toBeVisible()
+  await expect(page.locator("[data-workbench-operation]")).toHaveCount(11)
+  await page.locator('[data-workbench-operation="export"]').click()
+  await expect(page.locator("[data-workbench-export]")).toBeDisabled()
+
+  await page.getByRole("button", { name: "design mode" }).click()
+  await expect(page.locator('[data-workbench-surface="design"]')).toBeVisible()
+  await page.locator("#workbench-design-spec").fill('{"id":"broken"}')
+  await expect(page.locator("[data-workbench-diagnostics]")).toBeVisible()
+
+  await page.getByRole("button", { name: "automate mode" }).click()
+  await expect(page.locator('[data-workbench-surface="automate"]')).toBeVisible()
+  await expect(page.locator("[data-automate-connection]")).toBeVisible()
+})

packages/app/e2e/modes/mode-prompts.spec.ts

@@ -0,0 +1,33 @@
+/* SPDX-License-Identifier: MIT */
+
+import { test, expect } from "../fixtures"
+import { assistantText, waitSessionIdle } from "../actions"
+import { dirPath } from "../utils"
+
+test("each workspace mode accepts a prompt on the active session", async ({ page, project, assistant }) => {
+  test.setTimeout(120_000)
+
+  await project.open()
+  const sessionID = await project.user("Create the temporary E2E session and do not modify files.")
+  const modes = ["code", "work", "design", "automate"] as const
+
+  for (const mode of modes) {
+    const token = `MODE_${mode.toUpperCase()}_${Date.now()}`
+    await assistant.reply(token)
+    const route = mode === "code" ? `${dirPath(project.directory)}/session/${sessionID}` : `${dirPath(project.directory)}/${mode}`
+    await page.goto(route)
+    await expect(page).toHaveURL(mode === "code" ? new RegExp(`/session/${sessionID}(?:[/?#]|$)`) : new RegExp(`/${mode}(?:[/?#]|$)`))
+    await expect(page.locator(`[data-workbench-mode="${mode}"]`).first()).toBeVisible()
+
+    const callsBefore = await assistant.calls()
+    await project.sdk.session.prompt({
+      sessionID,
+      agent: "build",
+      parts: [{ type: "text", text: `Reply with exactly: ${token}` }],
+    })
+
+    await expect.poll(() => assistant.calls(), { timeout: 30_000 }).toBeGreaterThan(callsBefore)
+    await waitSessionIdle(project.sdk, sessionID, 30_000)
+    await expect.poll(() => assistantText(project.sdk, sessionID), { timeout: 30_000 }).toContain(token)
+  }
+})

packages/app/package.json

@@ -43,6 +43,7 @@
     "@kobalte/core": "catalog:",
     "@unifia/sdk": "workspace:*",
     "@unifia/sdk-shared": "workspace:*",
+    "@unifia/workbench-shell": "workspace:*",
     "@unifia/ui": "workspace:*",
     "@unifia/util": "workspace:*",
     "@shikijs/transformers": "3.9.2",