feat(workspace): align ArcheAxis learning and knowledge desktop shell

.github/workflows/ci.yml

@@ -30,15 +30,18 @@ jobs:
         uses: astral-sh/setup-uv@d0cc045d04ccac9d8b7881df0226f9e82c39688e
         with:
           enable-cache: true
-          cache-dependency-glob: requirements-ci.txt
+          cache-dependency-glob: requirements-ci*.txt
 
       - name: Install minimal test dependencies
         run: uv pip install --system -r requirements-ci.txt
 
+      - name: Install adapter test dependencies
+        run: uv pip install --system -r requirements-ci-adapters.txt
+
       - name: Install and verify local OCR engine
         run: |
           sudo apt-get update
-          sudo apt-get install --yes --no-install-recommends tesseract-ocr tesseract-ocr-eng fonts-dejavu-core
+          sudo apt-get install --yes --no-install-recommends ffmpeg tesseract-ocr tesseract-ocr-eng fonts-dejavu-core
           tesseract --list-langs | grep --fixed-strings --line-regexp eng
 
       - name: Run OS-level tests
@@ -67,7 +70,7 @@ jobs:
         uses: astral-sh/setup-uv@d0cc045d04ccac9d8b7881df0226f9e82c39688e
         with:
           enable-cache: true
-          cache-dependency-glob: requirements-ci.txt
+          cache-dependency-glob: requirements-ci*.txt
 
       - name: Install minimal lint dependencies
         run: uv pip install --system -r requirements-ci.txt
@@ -346,7 +349,7 @@ jobs:
       - uses: astral-sh/setup-uv@d0cc045d04ccac9d8b7881df0226f9e82c39688e
         with:
           enable-cache: true
-          cache-dependency-glob: requirements-ci.txt
+          cache-dependency-glob: requirements-ci*.txt
       - name: Install minimal runtime smoke dependencies
         run: uv pip install --system -r requirements-ci.txt
       - name: Migrate fresh Windows runtime

AGENTS.md

@@ -2,6 +2,10 @@
 
 This file is the public, sanitized operating configuration for Codex/agent work inside this repository. It describes how an agent should work on Cognitive-OS without exposing local credentials, private keys, tokens, machine-specific secrets, or personal files.
 
+## Rule ownership and precedence
+
+Global Hermes workflow rules own the general execution protocol: single-writer coordination, project-data containment, secret handling, safe editing, testing, and exact-SHA delivery. This file owns only Cognitive-Loop-OS-specific boundaries, architecture facts, and repository conventions. When a global rule and this file overlap, follow the stricter rule and keep the project wording as a concrete exception or example rather than duplicating the global procedure.
+
 ## 1. Project Mission
 
 Cognitive-OS is the front runtime for two primary systems:
@@ -31,40 +35,33 @@ information -> attention -> understanding -> structure -> memory -> learning ->
 | Configuration index | `workspace/configuration/README.md` | Catalog of public vs private configuration categories |
 | Intake history | `workspace/intake/` | Stepwise design and implementation log |
 
-## 3. Safety Rules
+## 3. Project-Specific Safety Boundaries
 
-- Work inside the current repository unless the user explicitly names another exact project path.
 - The external A project named `Obsidian-Assistance` is already audited and absorbed: do not scan, test, modify, synchronize, or use it as a migration target in future Cognitive-Loop-OS work.
 - Do not access `E:\` unless the user explicitly confirms the exact path, action, and impact range.
-- Do not upload or print secrets: `.env`, `.codex`, SSH private keys, API keys, tokens, cookies, credentials, or password files.
-- Do not commit runtime memory, local caches, virtual environments, logs, or generated databases.
-- Project-owned outputs from Cognitive-OS code, tests, ingestion, builds, and reviews must use the project-local ignored runtime/build locations; a wrapper is the preferred containment path but is not an OS sandbox.
+- Project-owned outputs from Cognitive-OS code, tests, ingestion, builds, and reviews must use the project-local ignored runtime/build locations defined by the global project-data boundary; a wrapper is preferred but is not an OS sandbox.
 - Do not claim ownership of Hermes, Codex, CC Switch, Workflow-assistance, GitHub delegation, session, cron, Kanban, or other workflow-infrastructure files merely because their names mention this project. Those artifacts remain in their owning workflow directory.
 - Files found in `%TEMP%`, a user home, or another project are ambiguous until content, Git worktree, process, and generation command establish ownership; preserve and mark unresolved rather than delete or move them.
-- Prefer small, auditable changes that can be reverted with one commit.
-- Do not use destructive actions such as recursive deletion, hard reset, forced push, or mass overwrite unless the user separately confirms scope.
 
-## 4. Git Rules
+## 4. Project-Specific Git Conventions
 
 Before modifying repository files:
 
-```powershell
+```bash
 git status --short
 ```
 
 After modifying repository files:
 
-```powershell
+```bash
 git diff --stat
 git status --short
 ```
 
 Upload policy:
 
 - Use explicit paths when staging files.
-- Avoid `git add .`.
-- Do not commit or push unrelated local changes.
-- Do not force push.
+- Keep the working tree limited to the requested project scope; the global Git safety rules govern force pushes, destructive commands, and unrelated changes.
 - Commit messages should describe the functional scope.
 
 ## 5. Network Rules

README.md

@@ -1,12 +1,17 @@
-# Cognitive-Loop-OS
+# ArcheAxis OS（元枢系统）
 
-> **元枢·观心 / ArcheAxis Cognitive Workspace**：本地优先、证据驱动的认知工作台，连接真实导入、Research→Knowledge→Learning candidate 治理、可审计执行和 Windows 桌面发布门禁。
+> **ArcheAxis OS is a local-first, evidence-driven, bidirectional learning and knowledge system for individuals and AI.**
+
+> **同一份知识，人学得更深，AI 用得更准。**
+
+ArcheAxis OS 以受治理的统一知识底座连接个人学习链和 AI 使用链。所有外部材料、人工输入和 AI 输出都先是可追溯的 Candidate；只有经过明确治理的内容才能进入后续学习或 Runtime 使用。
 
 ## 当前重点
 
-- **真实 Workspace 基础链**：网页、GitHub URL、本地文件导入 → candidate Research/Evidence → Knowledge/Learning/Mastery 治理；执行侧当前以 `read file:` 受限 Planner tracer 和局部闭环为主。
-- **可治理的运行时**：SQLite 持久化、Outbox/Receipt、失败不改状态、重试与回读，以及不暴露内部审计 ID 的公开投影。
-- **双端验证**：CI 已包含 Windows Tauri 构建、运行时和 NSIS 生命周期门禁；本地真实 HTTP → SQLite → Chromium upload → dispatch → receipt → reload smoke 已通过，Tauri WebView 点击级证据和公开发布资产仍在收口。
+- **资料到知识的真实基础链**：网页、GitHub URL、本地文件导入 → candidate Research/Evidence → Knowledge/Learning/Mastery 治理；执行侧当前以 `read file:` 受限 Planner tracer 和局部闭环为主。
+- **个人学习与 AI 使用的双向反馈**：学习笔记、纠错、练习和人工审核不会自动提升为事实；AI 的来源、Claim、解释、任务结果和 Lesson 同样必须先经 Candidate 治理。
+- **可治理的本地运行时**：SQLite 持久化、Outbox/Receipt、失败不改状态、重试与回读，以及不暴露内部审计 ID 的公开投影。
+- **桌面 Workspace A1**：默认 Apple-light，Violet Core 保留为暗色主题；一级 Rail、动态二级导航、上下文与证据检查器和真实活动坞均已接入。真实 Chromium 已验证壳层交互、响应式布局以及 HTTP → SQLite → Chromium upload → dispatch → receipt → reload 链路。Tauri WebView 点击级证据和公开发布资产仍在收口，不能用 Chromium 结果替代。
 - **当前版本**：`0.4.0`；Release Manifest 仍为 `unreleased / public=false`，公开 Alpha/Beta/Stable 发布尚未宣告。
 
 Research candidate 仍必须经过人工审查和来源独立性验证，不能自动当作 verified truth。当前事实、限制和验证证据见 [`docs/PROJECT_STATUS.md`](docs/PROJECT_STATUS.md) 与 [`docs/VERIFICATION_POLICY.md`](docs/VERIFICATION_POLICY.md)。
@@ -31,11 +36,11 @@ The workflow accepts only canonical `https://github.com/{owner}/{repo}` reposito
 
 [![CI](https://github.com/DTALEX66/Cognitive-Loop-OS/actions/workflows/ci.yml/badge.svg)](https://github.com/DTALEX66/Cognitive-Loop-OS/actions/workflows/ci.yml)
 
-Cognitive-Loop-OS 的目标不是堆积 AI 功能，而是建立一条可追溯、可审核、可回滚的认知闭环：
+ArcheAxis OS 的目标不是堆积 AI 功能，而是建立一条可追溯、可审核、可回滚的学习—知识—应用闭环：
 
 ```text
-Research → Evidence → Knowledge → Learning
-→ Plan → Permission → Execution → Trace → Evaluation → Lesson
+Source / Evidence → Knowledge → Learning → Mastery
+→ AI Usage → Trace → Evaluation → Candidate Lesson → Human Review
 ```
 
 项目采用本地优先的 FastAPI/SQLite 模块化单体。candidate Research、Knowledge/Learning/Mastery/Machine Knowledge 治理、Evaluation、Sleep Loop 与受限 Planner tracer 已有受治理构件和局部闭环；GitHub metadata/README 仍不会自动成为 verified truth。Workspace 已提供真实本地导入入口、迁移 owner 管理的 Job/Outbox/Receipt 同事务边界、按需 dispatcher 与用户级状态/投影页面；dispatcher 已有服务级成功/失败/重试/lease 保护，本地真实 Chromium upload → dispatch → receipt → reload gate 已通过验证。统一 audit timeline、SSE、通用 Planner、异步 Worker、完整 Tauri WebView 点击级证据和公开发布资产仍未闭环。当前已有 Release Manifest、媒体基础链、图像 OCR、Windows 构建和 NSIS 生命周期门禁；ASR 仍未闭环。

app/release-manifest.json

@@ -5,7 +5,7 @@
     "name": "元枢系统",
     "english_name": "ArcheAxis OS",
     "workspace_name": "元枢·观心",
-    "workspace_english_name": "ArcheAxis Cognitive Workspace",
+    "workspace_english_name": "ArcheAxis Human-AI Learning Workspace",
     "version": "0.4.0",
     "requires_python": ">=3.10"
   },