[MMinasyan]

Summary

Generate native invocation bindings from OpenAPI, remove inert provider controls and enforce generated-artifact checks after their real producers.

Changes

• Derive sorted native advertisement/dispatch and test-only mounted-envelope metadata from the schema. Preserve raw bodies and error/status classification; unsupported shapes fail before output writes.
• Check actual mounted UI call envelopes outside application catches, including loss paths and inherited-property bypasses.
• Remove provider max_tokens_field and transport.options while retaining output budgeting, real transport inputs and exact-number extra_body. Advance exact protocol identity to 2; incompatible live owners are refused without replacement.
• Select WebKitGTK4.1 in supported Make builds. Use one explicit-path generated-file checker, compare Wails bindings after the real build/normalizer, and require protocol/binding freshness before release packaging and upload.

Verification

• Supported/unsupported schema additions, deterministic generation, independent native wires and mounted-envelope mutations.
• Retired-control refusal, fingerprints, budget/number fidelity and incompatible-owner tests.
• Installer argv/fault fixtures; deleted/untracked/ignored output checks; parsed workflow bypass/order mutations.
• Wails build and real WebKitGTK4.1/libsoup3 linkage; full Go and race tests; vet, formatting and lint; frontend tests (510 passed, one skipped); protocol freshness/typecheck; installer tests.

Limits

Schema inspection remains build/test-only. No provider SDK, transport-options system, compatibility migration or frontend runtime validator is added. Local workflow tests verify repository wiring, not hosted release administration.