Docs/paths (Copilot):
- test logsDir, GENERATE-DOCS.md, docs/api.md: legacy sdk/rust -> sdk_v2/rust
- GENERATE-DOCS.md: replace nonexistent ModelVariant row with DownloadBuilder

Tests (Copilot):
- chat_client_test: drop the redundant, mislabeled "REST response" print

Model API (nenad1002):
- unload/remove_from_cache now return Result<()> (no empty-String sentinel)
- ModelKind stores Arc<VariantData> to avoid deep VariantData/NativeModel clones
- create_chat/audio/embedding_client read selected_variant() once so a
  concurrent select_variant_by_id can't mismatch id vs native
- fix the single-variant select error text; method name no longer misstated

Catalog (nenad1002):
- update_models doc states plainly it is a no-op (native self-refreshes)

Live audio (Copilot + nenad1002):
- remove unwired bits_per_sample and push_queue_capacity options and the false
  backpressure claim (append() is unbounded); update the live-audio test
- add Drop to LiveAudioTranscriptionSession: best-effort mark the input queue
  finished via get_mut so the blocking worker drains and the native session is
  released if the session is dropped without stop()

Configuration (nenad1002):
- logger() doc states plainly it is not wired to native (no logger-callback ABI;
  use log_level/logs_dir), kept for forward compatibility

build.rs (nenad1002, nit):
- integrity guard: reject empty payloads and require the expected native file to
  be present after extraction. Cryptographic SHA-512-vs-registration is feed-
  specific (nuget.org vs Azure DevOps) and left as future hardening.

Validated: cargo fmt/check/clippy/doc clean (lib, tests, examples).

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

…ts (Rust)

Correct the Rust OpenAI direct chat client so its request JSON matches the
authoritative native `*-json` contract (chat_completions_converter.cc):
- response_format keys use snake_case (`json_schema`, `lark_grammar`) — the
  previous camelCase keys were silently dropped by the native converter.
- tool_choice emits plain strings ("none"/"auto"/"required") and a nested
  `{"type":"function","function":{"name":…}}` for a named function, matching
  what the converter parses. Add regression unit tests locking in the shapes.

Deprecate the OpenAI direct clients (ChatClient, AudioClient, EmbeddingClient,
LiveAudioTranscriptionSession) and their factories with
`#[deprecated(since = "2.0.0")]`, pointing users to the Session API
(ChatSession/AudioSession/EmbeddingsSession), matching the C#/JS/Python SDKs.
Facade modules, re-exports, examples and integration tests opt out via
`#[allow(deprecated)]` to keep the `-D warnings` build green. Update docs/api.md.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Copilot-Session: d411120b-849b-4025-823b-59a69a3a563f

Migrate the bundled Rust SDK examples off the deprecated OpenAI-facade
chat client onto the idiomatic Session/Item/Request/Response API:

- chat_completion.rs: ChatSession::new + set_options; sync process_request
  -> response.text(); streaming via process_streaming_request + as_text().
- interactive_chat.rs: stateful loop; system prompt seeded only when
  turn_count() == 0; no manual message history.
- tool_calling.rs: register the tool once via add_tool_definition; first
  turn tool_choice=Required streams complete Item::ToolCall values; feed
  back only Item::tool_result; second turn tool_choice=None for the final
  answer. Removes the manual streamed-tool-call delta reassembly.

Drops #![allow(deprecated)] from all three; they no longer touch the
facade. Verified: cargo clippy --all-targets -- -D warnings, cargo fmt
--check, cargo build --examples, cargo test --lib (14/14) all clean.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Copilot-Session: d411120b-849b-4025-823b-59a69a3a563f

Correctness:
- Drop sessions before unloading models in examples and tests (native
  rejects unload while a session is still using the model)
- Send an empty C string for a null ToolDefinition description (the C ABI
  rejects a null description)
- Propagate EP discovery failures instead of collapsing to the "download
  all" path; validate EP names for interior NUL bytes
- Make an explicit library_path override authoritative: error instead of
  falling through to the env/exe/system search
- Buffer SSE bytes and parse only complete lines in the web-service test
- Hard-fail (not skip) when a live-audio session fails to start
- Drive build.rs off CARGO_CFG_TARGET_* so RID/extension/link selection is
  correct under cross-compilation

Concurrency:
- Serialise web-service start/stop with an async mutex
- Add a per-session op-lock; mutators self-lock and the streaming paths hold
  it across install->process->uninstall (raw process_request stays unlocked
  to avoid reentrancy)
- Serialise the web-service integration tests with a shared async guard

Packaging:
- Commit a crate-local deps_versions.json so the pinned native versions ship
  in the published crate, and add a build.rs guard that fails on drift from
  the canonical sdk_v2/deps_versions.json

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Copilot-Session: d411120b-849b-4025-823b-59a69a3a563f

… wrapper

The process-wide singleton tracked only a Weak<FoundryLocalManager> (the outer
wrapper). Derived handles (Model/Session/Catalog) keep only the inner
Arc<NativeManager> alive, so dropping the outer wrapper while holding a derived
handle expired the singleton slot even though the native flManager lived on. The
next create() then attempted a second Manager_Create, which the core rejects
with INVALID_USAGE.

Track both the outer wrapper and the inner native manager as weak refs in a
Mutex<SharedInstance>. When the outer is gone but the native is still alive,
rebuild a wrapper around the live native (wrap_existing) instead of creating a
second native manager. wrap_existing also seeds the URL cache from the native
manager so a rebuilt wrapper correctly reports an already-running web service.

Add regression tests as separate integration binaries that own every handle:
- singleton_lifetime: drop the outer wrapper while holding a Model, then recreate.
- web_service_lifetime: start/serve/stop the web service over HTTP and confirm
  wrap_existing surfaces a running service. Both skip gracefully when the native
  core is unavailable or built without web-service support.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Copilot-Session: d411120b-849b-4025-823b-59a69a3a563f