Add selected-model typed Pumas annotation and rewrite operations

[MrScripty]

Text classification proposals, grounded rewrites and text-to-PNG generation can use explicit Pumas typed v1 operations. Selected serving aliases are discovered without claiming readiness; capability observation resolves the exact profile, which is bound into the provider POST. The UI exposes observations and request evidence. Applying labels/admitting rewrites creates drafts through existing ownership, rights, revision/history and protected family primitives; human annotation review remains separate and required for release.

Stacked on unmerged chooser draft PR23, exact base 0ba2a30382a17d7b4d27f30e02459b62691944f7. Head c93aee448e60b310eb5f9d926fa4185130e91a6d, tree 24c638f21a769f20e34bf13a4bec46b871cd9c6d; two source/test commits, 29 files, authenticated MrScripty/Puma attribution. The independently reviewed integration base and existing development lineage remain preserved; no equivalent PR existed.

Pinned public unmerged Pumas PR54: 40c5cbfed67a6f0e862a1197bb5105363d67bdb1, including PR53: f3b3c770ca531f013c8e1f8b1f958b9dc0babbfb. Advertisement PR51 80f06ab17f9eea639fee143c86319ca9b5e1a21c is a separate producer stack. No merger of those contracts is assumed.

Typed image captioning/image input and audio are unsupported. Images use text-to-PNG, with explicit repeat prompts for typed batches. Typed text has no seed or JSON-format option; frozen intent retains seed=null, and complete stop-terminated text still must satisfy application JSON/quote semantics. This UI sends finite stream:false requests. The separate producer probes exercise streaming; no streaming UI or real-model quality is qualified.

Independent review closed restart replay, cancellation/sample-commit races, actor-start slot leaks, outcome propagation, UTF-8/profile bounds, alias duplication across profiles and held metadata/recovery/Restore ownership. Local exact-head aggregate passed 63/63 gates, 333 Python tests and 27 dedicated browser suites, all source-stable. Qualification used the actual pinned non-test Pumas HTTP/admission/handler gateway with controlled backends: 22 producer tests, 12 native gateway probes, 16 native consumer checks and the actual Chromium typed workflow. Text was an authored controlled response; image was an owned managed process emitting literal PNG pixels, with listener/process ownership verified without cfg(test). No model inference, downloads or training. The controlled server/workers were explicitly shut down; cancellation alone never proves native cessation.

Local classification deduplication is distinct from Pumas correlation IDs. Authoritative not_admitted/unknown errors persist; uncertain transport/cancellation/interrupted image attempts never replay automatically. Uncertain image queues cannot resume the attempt. Exact pre-POST image profile/capability/request evidence is durable. Existing whole mesh/trajectory and initial-family boundaries remain intact.

Consumer limits: capabilities 64 KiB, serving-alias catalog 1 MiB / 512 rows, text result 256 KiB, image JSON 12 MiB / PNG 8 MiB, images 2048 pixels/axis and 4,194,304 total, profile 128 ASCII bytes and alias 256 UTF-8 bytes. Discovery has a three-second budget; scans share ten seconds. Connection establishment is bounded to ten seconds; generation has no total/read/idle/drain deadline afterward.

Plan and scope · Labeled producer captures/harness. Only source and necessary authored fixtures are committed; reports/logs/releases/JPEG85 screenshots remain ignored or external. Hosted exact-head CI run 37717436944 completed successfully: lifecycle job 113117052540 identifies exact head c93aee448e60b310eb5f9d926fa4185130e91a6d; all hosted steps completed successfully, including all registered typed/controller/browser and pinned consumer gates. Authorized run/job metadata is the hosted evidence; no log transfer or artifact download was needed. Main 2fc4a46f12d73a0fa467d5482f68edb83d6df6af and unrelated drafts are unchanged. Draft only; no merge or manual external review request.

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

• Configuration used: defaults
• Review profile: CHILL
• Plan: Advanced
• Run ID: 0bb39e3f-76db-4802-8779-6900b07d2ee8

---

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

---

_{Comment @coderabbitai help to get the list of available commands.}

[MrScripty]

Reproduced and repaired the typed image endpoint’s malformed-PNG decoder failure. New head a72087172fb4690ff6cfdfbee3f5aeca0609eca9, tree 79a6e41f4e44e7f7c32c9ec4f9db4b61a1ade90a, is a direct child of retained c93aee448e60b310eb5f9d926fa4185130e91a6d; expected-head fast-forward, no force push. The shared decoder now maps Pillow SyntaxError to its existing ValueError/typed error path. An actual HTTP regression with a source-derived controlled provider and CRC-valid illegal PNG chunk disconnected before the repair; afterward it returns HTTP400, leaves the database unchanged, admits no sample, retires the active request and permits a valid next request without replay. All 28 focused typed/image-generation/job-endpoint tests pass. Three files only; no provider repin, simulation, model download or real model run. The new head needs its own hosted checks; historical c93 CI is not represented as its qualification.