[feat] timeline: add editable captions and text overlays - #193

## summary

- Retain timed text, style, layer order, fonts and source assets in
  editable timelines through shared UI and Agent commands.
- Share Chinese text layout between preview and MP4 export and retain
  exact editor revisions for each published output.
- Exchange editable timeline packages with resource validation,
  dependency protection and recoverable imports.
- Add bilingual UI, regression coverage and acceptance documentation.

## validation

- npm test: 621 passed.
- Related Python checks across nine test files: 189 passed.
- Generated contracts, i18n catalogs and frontend build passed.
- Prior macOS x64 and native arm64 browser/wheel acceptance is recorded
  in docs/development/issue-87-validation.md.
- Windows acceptance is pending; the full Python suite has documented
  baseline failures and an interrupted native integration run.

Refs: ThinkFlowLab#87

## summary

- Journal owner ACL deltas at the native setter's successful write,
  preserving external denies through retries and exceptional cleanup.
- Resume validated DeepSeek workspaces without rewriting existing ACLs
  or retaining file probes that block ordinary PowerShell writers.
- Add tracked Windows browser process ownership, isolated environments
  and native memory sampling, with real host and WinAPI regressions.
- Retain existing business assertions and record native Windows, wheel
  and seven-group browser acceptance with explicit platform limits.

## validation

- Complete Python: 1,368 passed, 15 skipped; Node: 720 passed.
- Related native regressions: 81 passed; wheel: 448 passed, 7 skipped.
- Seven browser groups, Windows wheel build and fresh install passed.
- Contracts, i18n, browser checks, four import contracts and build passed.
- Existing POSIX gates and WinError 1314 file-symlink limit documented;
  no test deletion, broader skips or sandbox relaxation.

Refs: ThinkFlowLab#87, ThinkFlowLab#193

## summary

- Reject an already broken oplock at the native setter boundary, keeping
  successful-write receipts and one-time cleanup consumption intact.
- Strengthen the real concurrent cleanup regression and retain actual
  post-write fault injection after the added pre-write check.
- Record native Windows follow-up, fresh wheel and browser evidence,
  preserving prior results with their original revision boundaries.

## validation

- Complete Python: 1,378 passed, 17 skipped; Node: 721 passed.
- Related modules: 184 passed, 3 skipped; ACL modules: 77 passed.
- Fresh wheel: 195 passed, 3 skipped; three browser groups passed.
- Build, contracts, i18n, browser checks and four import contracts passed.
- Retain POSIX gates and the Windows file-symlink privilege limitation;
  no test deletion, expanded skips or sandbox relaxation.

Refs: ThinkFlowLab#87, ThinkFlowLab#193

## summary
- Merge main's connection-scoped voice library and benchmark gate while
  retaining timeline text, fonts, editable packages and locked dependencies.
- Confirm committed ACL removals after final-check and release conflicts;
  preserve native receipts, external identical denies and original errors.
- Read Agent voice recordings through the shared execution-file boundary,
  reject hard links, and cover real native writers and handle cleanup.
- Isolate the strict native handle-count test from unrelated finishing
  threads; keep its original failure checks and equality assertion.

## validation
- Native ACL modules: 94 passed, no skips.
- Native/voice/execution-file focused batch: 214 passed, one existing
  Windows symlink-permission skip.
- Integration Node selection: 46 passed; TypeScript check passed.
- Regenerated contracts check, locked editable install and pip check passed.

Refs: ThinkFlowLab#87

## summary
- Recheck the editor transaction and captured snapshot when background
  hydration finishes, before installing content or its version basis.
- Exercise a delayed real projection during stage rendering and retain
  strict publication refusal, retry and immutable provenance assertions.
- Record the demonstrated asynchronous projection risk in development
  lessons without weakening publication version checks.

## validation
- The formal structured-editor regression fails without the fix and
  passes with it in native Windows Chrome.
- TypeScript check passed. The later source edit only adds explanatory
  comments; broad frontend and package validation follows this freeze.

Refs: ThinkFlowLab#87

## summary
- Record main integration, real ACL write/release windows, scoped source
  freezes, failed attempts and final Windows/browser/wheel evidence.
- Preserve the earlier full Python result at its tested revision and
  document unchanged Python inputs after the frontend correction.
- Update historical plans and both handoffs; leave final delivery SHA,
  PR metadata and final-head CI to the subsequent delivery receipt.

## validation
- All 875 frozen runtime/test/build inputs remain byte-identical.
- Source freeze Release checks 42569337698 passed, including Python,
  19 browser workflows, the voice fixture and assistant panels.
- Latest clean Windows wheel regression: 324 passed, 3 existing skips.
- Documentation diff check passed; no Windows functionality rerun for
  these status and evidence changes.

Refs: ThinkFlowLab#87

## summary

- Merge main 6310097 while retaining validated native workspaces and
  recovering missing Codex rollouts with the full conversation history.
  Preserve provider download SSRF checks and upstream tool/UI fixes.
- Reject acknowledged ACL installations when their guard cannot confirm
  ownership. Preserve that object's uncertain ACL, block Agent execution
  and release resources; confirmed installations still roll back.
- Change after_write installation conflicts from retry to explicit
  failure. Preserve pre-write retries, ordinary setter-error rollback
  and the existing committed-cleanup confirmation contract.
- Add ownership regressions, eleven native interleavings and a bilingual
  seven-module Windows handoff with explicit JSONL evidence capture.

## validation

- Mac source: 430 focused backend tests and 734 Node tests passed.
- Native/control-flow modules with OPENDIRECTOR_REAL_CLI=1: 78 passed,
  76 Windows-specific tests skipped.
- Production build, generated contracts, i18n (2996 keys), browser
  locale/manifest checks and all four import boundaries passed.
- The eleven new WinAPI cases remain unexecuted on Mac. Focused Windows
  acceptance is pending; historical media/wheel evidence keeps its SHA.

Refs: ThinkFlowLab#87

## summary

- Close the focused Windows handoff at d0d8999 with 154 passing tests,
  zero skips and the complete eleven-install/twelve-cleanup matrix.
- Record the host ACL prerequisite failure, authorized restriction,
  immutable input hashes and exact native/CLI evidence boundaries.
- Update both handoffs and the current delivery plan while retaining
  historical full-suite, media and wheel revisions.

## validation

- Seven focused Python modules: 154 passed, 0 failed, 0 skipped.
- JSONL, JUnit, console and exit-code cross-check passed.
- Independent read-only review and 878-input byte comparison passed.
- git diff --staged --check passed.

Refs: ThinkFlowLab#87

## summary

- Observe actual media responses before reload, then use a bounded
  navigation budget and the existing media deadline after readiness.
- Keep successful-response and persisted voice/result assertions, and
  verify the reopened player's asset identity, bytes and playback.
- Release the response listener and deadline timer on every exit.

## validation

- Bilingual voice workflow passed with Chromium 145 and Playwright 1.58.2.
- Controlled 17-second navigation failed before and passed after this
  change; the missing-media negative control still fails as intended.
- Exact staged bytes match the tested source; independent read-only
  review, node --check and git diff --staged --check passed.

Refs: ThinkFlowLab#87

## summary

- Preserve the failed delivery CI and all scoped voice probes, including
  unsuccessful injections and the intentional media-outage control.
- Record c19781a as the browser-test freeze with its exact input hashes,
  explicit navigation budget change and stronger media assertions.
- Retain native acceptance at d0d8999 and close both handoffs and the
  current plan without repeating unchanged Windows validation.

## validation

- Cold and normal bilingual voice workflows passed; missing media is
  still rejected by the fifteen-second media deadline.
- 878 frozen inputs match and all 877 native-protected inputs remain
  unchanged, including 242 Python files.
- Independent read-only review and git diff --staged --check passed.

Refs: ThinkFlowLab#87

## summary

- Integrate the fixed main snapshot with Kling video, voice settings
  repair, version 0.1.2 and review guidance. Retain timeline contracts,
  bilingual errors, validated session recovery and safe Windows links.
- Use the canvas model resolver for missing assistant generation choices.
  Keep explicit selections and prove loading cannot change the model
  saved by new nodes, including an old-frontend negative control.
- Observe reopened voice media through standard browser APIs so preview
  runs retain asset identity, byte hash and real playback assertions.

Refs: ThinkFlowLab#87

## summary

- Record the fixed-main source freeze, default-selection regression and
  preview-safe voice observer, with positive and negative evidence.
- Record 154 native passes, all 23 WinAPI windows and 308 installed-wheel
  passes, plus the bilingual wheel UI and actual fixture media.
- Preserve failed attempts, source/input boundaries, the file-symlink
  privilege limit and CI status at document creation. Close Windows
  handoff work while retaining historical evidence and Draft review.

Refs: ThinkFlowLab#87

## summary

- Publish the existing Chinese and English timeline screenshots with
  their hashes, original capture context and visible draft notice.
- Map original acceptance revisions to equivalent email-normalized
  commits while retaining their historical test evidence.
- Record unchanged runtime inputs and no repeated Windows tests.

## validation

- Staged screenshots match the inspected original bytes and hashes.
- All 18 rewritten commits preserve their trees and merge topology.
- Staged documentation diff and relative image targets checked.

Refs: ThinkFlowLab#87