Consolidate local browser, Agent, video, and plugin updates

[Devin-AXIS]

Pending local changes were spread across desktop worktrees, standalone plugin sources, and the personal video component library. This consolidates them into one commit so the development app and packaged release share the current browser, native Agent workflows, video runtime, and plugin catalog.

• Add browser background input, bounded batches, manual takeover/cancellation, fresh observations after returning control, observed result verification, and optional JEV fallback.
• Include cumulative Codex usage for native sessions and subagents, native compaction, conversation workflows, handoffs, and output handling. Start the existing work item after a canonical prompt is accepted, preserve its identity and automation references across Codex replacement, and monitor the effective session. Rejected replacements preserve the original binding and running task; prompt submission timestamps cover rapid completion or failure.
• The consolidated session workflow delegates video validation, delivery, and publishing to the main Agent. Host-side automatic repair requests, cross-window delivery resume, and deterministic Douyin/WeChat Channels publication continuation are removed. Rendering and publisher plugin actions remain available. Retire the orphaned desktop supervisor without reading or changing saved queue data. The project overview now shows actual sessions, subagents, tasks, and usage; its old manual preset-Agent create/edit/delete controls are removed.
• Include video motion/preset tools, deterministic playback and rendering fixes, audio transport, reusable component editing, and the assistant launch template. Scope the VideoPanel instance to its workspace and video project, resetting project-owned settings and pending tokens on a project change while retaining same-project view/theme state. Register the six personal components with their local assets and motion guidance; the catalog contains 185 visual components and 331 GSAP entries.
• Include the source and optional built-in catalog packages for Operation Recorder 0.3.0, LabelU 0.3.1, Short Video Studio 0.1.0, JEV 0.1.2, and the Onto 0.1.4 Work integration. Preserve plugin IDs and data paths. Prepare runnable packages in development and release builds, and lock the two build workspaces to their existing dependency versions. These five additional packages are not automatically installed. The separate Cloud marketplace list/download/hash-verification/import flow is unchanged; source consolidation also expands the built-in distribution catalog.
• Include the pending image authorization, provider, template, plugin boundary, and social workflow changes. Import saved providers independently so an offline iPolloOS service does not block other accounts; retry discovery without replacing its saved state. Personal credentials, recordings, databases, dependency caches, and generated builds are excluded from the commit.

Validation:

• App: pnpm --filter @ipollowork/app test passed on both Ubuntu and macOS in final CI; app typecheck and production build passed locally. The final provider recovery regression suites passed all 71 tests, including both failure/recovery cases; the 74 affected session/video tests passed after desktop recovery retirement.
• Server: pnpm --filter ipollowork-server test — 978 passed, 6 existing environment skips across all 79 files; server typecheck/build passed.
• Desktop: pnpm --filter @ipollowork/desktop test — 201 passed, 4 existing environment skips; Electron typecheck and the 57-method bridge check passed. Real createMainWindow execution covers development and packaged entrypoints with saved legacy queue data: one normal window is created, the queue stays untouched, and no polling or hidden delivery worker starts. All 74 affected App/video tests and app typecheck passed.
• HyperFrames: bun run build:local-studio, component/catalog checks, all 19 Shotcraft theme timelines, and all six imported component playback/seek proofs passed.
• Plugin checks/builds and real local host installation/service/Skill/uninstall flows passed. A fresh frozen workspace installation and LabelU React + SSR builds, typecheck, and five tests passed with optional native canvas disabled; its real PDF text extraction was verified. Short Video declared host actions were verified against local provider stubs; no paid provider or live JEV request was sent.
• Native Codex RPC readback verified cumulative root + two subagent usage of 4,028,043 tokens without starting model turns.
• Real Electron app-smoke and all six agent-browser proof frames passed. Reproduce with node evals/runner/run.mjs --flow app-smoke --flow agent-browser --cdp-url http://127.0.0.1:9823 against a test profile. Local proof reports are under evals/results/; generated reports are excluded from source control.
• A cold rebuild of both generated plugin packages and all 72 plugin lifecycle tests passed. CI now builds their UI/service resources after the frozen install, matching development and release preparation. Real audio tests passed on the shipped 2018 x64 FFmpeg, arm64 FFmpeg 4.4, and FFmpeg 7.1; the committed GSAP asset replaces the test’s machine-specific dependency path. Full i18n audit and the 10 Video Studio runtime tests passed.
• Maintainability audit and staged conflict/credential scan passed. New dependency warnings are the imported plugins' existing package dependencies; their versions were preserved.

The original development startup checkout is synchronized to this commit; the final server binding changes load after restarting the development process. Earlier normal-profile inspection verified the browser takeover/decision/identity controls, GPT-6/GPT-6.1 model options, and existing recorder/annotation/Onto plugin entries. The user-profile Cloud endpoint was separately switched to the hosted service at the user's request; hosted sign-in is pending, so a live marketplace installation is not claimed.

This commit is based directly on main dfa728a and preserves its browser and native compaction changes. The previously consolidated source passed all GitHub Ubuntu/macOS checks, i18n and the three DeepSeek Harness Studio builds. Rebase conflict verification passed 307 App tests, 79 server tests and both typechecks; a separate main-behavior audit passed 131 App and 96 server tests. The unchanged Cloud marketplace owners passed all 21 focused tests.

The two review fixes additionally passed 66 HTTP/SQLite work-item and completion tests (560 assertions), server typecheck/build, 99 affected App tests, app and desktop typechecks, and a real isolated Electron/React mounting regression. That regression fails against the previous unkeyed VideoPanel branch and verifies project/workspace/root changes reset state while same-project view/theme changes preserve it. The eight changed files passed the maintainability audit with no errors or warnings. Final amended commit d904f0e passed the complete GitHub Ubuntu/macOS pipeline, including App/server/desktop tests, Electron IPC typecheck and end-to-end checks, plus i18n and all three Studio builds. The tag-only publishing job was skipped as intended. The PR is mergeable and all review threads are resolved.

[chatgpt-codex-connector]

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review	Status	Commit	Review trigger
📝 Code Review	✅ Completed 2026-10-04T12:58:00.360646Z	0425c5e	Draft marked ready

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 0425c5efa2

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".