[laurentftech]

Summary

• Keep Open WebUI planning and poster embeds in sync with the host theme.
• Save poster touch-ups as owner-scoped, revisioned content that get_poster returns to the model. Browser saves use a scoped, expiring capability; the Open WebUI tool bearer secret is never sent to the browser.
• Keep stale embeds from overwriting newer revisions and preserve edits made while a save is in flight.
• Add optional Docker/browser URL configuration; poster saving stays disabled unless explicitly configured.
• Document user isolation and the storage boundary: planning, poster, and document files in the pi-outpost volume are not encrypted at rest.

Validation

• Live Open WebUI check: light/dark theme changes tested with both a planning and a poster open.
• Open WebUI poster Playwright suite: 8 passed, including save/readback, concurrent edits, stale revision and wrong-origin cases.
• Focused poster, ticket and trust tests: 22 passed.
• Typechecks for @pi-outpost/posters and @pi-outpost/openwebui passed.
• OpenSpec strict validation and scenario coverage passed (6/6).

Documentation impact

Updated README.md, docs/openwebui.md, docs/openwebui-architecture.md, openwebui/deploy/.env.example, and openwebui/deploy/docker-compose.yml for poster saving, network configuration, and storage/privacy behavior.

[safedep]

SafeDep Report Summary

No dependency changes detected. Nothing to scan.

View complete scan results →

_{This report is generated by SafeDep GitHub App}