Problem and scope
Continue integrating useful Web contributions after #439. PR #398 adds Session provenance and #392 adds read-only Pi project-trust diagnostics. Preserve their original authors while integrating against current React main.
- Retain current-runtime provenance metadata; do not treat it as a global process ownership guarantee.
- Distinguish stored trust decisions from active Session trust, fixing refreshRequired when project resources disappear.
- Add authentication, optional-controller fallback, unknown-state and refresh-boundary tests.
- No trust writes, model/tool authority changes, background polling or UI claim. These are read-only API capabilities.
Separately, close already integrated overlapping PRs with links to their actual merge history. Do not merge unwired attachment modules with known validation/resource issues.
Problem and scope
Continue integrating useful Web contributions after #439. PR #398 adds Session provenance and #392 adds read-only Pi project-trust diagnostics. Preserve their original authors while integrating against current React main.
Separately, close already integrated overlapping PRs with links to their actual merge history. Do not merge unwired attachment modules with known validation/resource issues.