fix(ci): fetch only latest tag and add patchelf build dep

- Change both build.yml and release.yml to fetch only the latest v* tag
  via git ls-remote instead of fetching all tags
- Add patchelf as a Linux build dependency in recipe.yaml to fix
  rattler-build packaging failure

.gitea/runner/cleanup.service

@@ -0,0 +1,11 @@
+[Unit]
+Description=Kindred Create CI runner disk cleanup
+After=docker.service
+
+[Service]
+Type=oneshot
+ExecStart=/opt/runner/cleanup.sh
+Environment=CLEANUP_THRESHOLD=85
+Environment=CACHE_MAX_AGE_DAYS=7
+StandardOutput=append:/var/log/runner-cleanup.log
+StandardError=append:/var/log/runner-cleanup.log

.gitea/runner/cleanup.sh

@@ -0,0 +1,220 @@
+#!/usr/bin/env bash
+# Runner disk cleanup script for Kindred Create CI/CD
+#
+# Designed to run as a cron job on the pubworker host:
+#   */30 * * * * /path/to/cleanup.sh >> /var/log/runner-cleanup.log 2>&1
+#
+# Or install the systemd timer (see cleanup.timer / cleanup.service).
+#
+# What it cleans:
+#   1. Docker: stopped containers, dangling images, build cache
+#   2. act_runner action cache: keeps only the newest entry per key prefix
+#   3. act_runner workspaces: removes leftover build workspaces
+#   4. System: apt cache, old logs
+#
+# What it preserves:
+#   - The current runner container and its image
+#   - The most recent cache entry per prefix (so ccache hits still work)
+#   - Everything outside of known CI paths
+
+set -euo pipefail
+
+# ---------------------------------------------------------------------------
+# Configuration -- adjust these to match your runner setup
+# ---------------------------------------------------------------------------
+
+# Disk usage threshold (percent) -- only run aggressive cleanup above this
+THRESHOLD=${CLEANUP_THRESHOLD:-85}
+
+# act_runner cache directory (default location)
+CACHE_DIR=${CACHE_DIR:-/root/.cache/actcache}
+
+# act_runner workspace directories
+WORKSPACES=(
+    "/root/.cache/act"
+    "/workspace"
+)
+
+# Maximum age (days) for cache entries before unconditional deletion
+CACHE_MAX_AGE_DAYS=${CACHE_MAX_AGE_DAYS:-7}
+
+# Maximum age (days) for Docker images not used by running containers
+DOCKER_IMAGE_MAX_AGE=${DOCKER_IMAGE_MAX_AGE:-48h}
+
+# Log prefix
+LOG_PREFIX="[runner-cleanup]"
+
+# ---------------------------------------------------------------------------
+# Helpers
+# ---------------------------------------------------------------------------
+
+log() { echo "$(date '+%Y-%m-%d %H:%M:%S') ${LOG_PREFIX} $*"; }
+
+disk_usage_pct() {
+    df --output=pcent / | tail -1 | tr -dc '0-9'
+}
+
+bytes_to_human() {
+    numfmt --to=iec-i --suffix=B "$1" 2>/dev/null || echo "${1}B"
+}
+
+# ---------------------------------------------------------------------------
+# Phase 1: Check if cleanup is needed
+# ---------------------------------------------------------------------------
+
+usage=$(disk_usage_pct)
+log "Disk usage: ${usage}%  (threshold: ${THRESHOLD}%)"
+
+if [ "$usage" -lt "$THRESHOLD" ]; then
+    log "Below threshold, running light cleanup only"
+    AGGRESSIVE=false
+else
+    log "Above threshold, running aggressive cleanup"
+    AGGRESSIVE=true
+fi
+
+# ---------------------------------------------------------------------------
+# Phase 2: Docker cleanup (always runs, safe)
+# ---------------------------------------------------------------------------
+
+log "--- Docker cleanup ---"
+
+# Remove stopped containers
+stopped=$(docker ps -aq --filter status=exited --filter status=dead 2>/dev/null | wc -l)
+if [ "$stopped" -gt 0 ]; then
+    docker rm $(docker ps -aq --filter status=exited --filter status=dead) 2>/dev/null || true
+    log "Removed ${stopped} stopped containers"
+fi
+
+# Remove dangling images (untagged layers)
+dangling=$(docker images -q --filter dangling=true 2>/dev/null | wc -l)
+if [ "$dangling" -gt 0 ]; then
+    docker rmi $(docker images -q --filter dangling=true) 2>/dev/null || true
+    log "Removed ${dangling} dangling images"
+fi
+
+# Prune build cache
+docker builder prune -f --filter "until=${DOCKER_IMAGE_MAX_AGE}" 2>/dev/null || true
+log "Pruned Docker build cache older than ${DOCKER_IMAGE_MAX_AGE}"
+
+if [ "$AGGRESSIVE" = true ]; then
+    # Remove all images not used by running containers
+    running_images=$(docker ps -q 2>/dev/null | xargs -r docker inspect --format='{{.Image}}' | sort -u)
+    all_images=$(docker images -q 2>/dev/null | sort -u)
+    for img in $all_images; do
+        if ! echo "$running_images" | grep -q "$img"; then
+            docker rmi -f "$img" 2>/dev/null || true
+        fi
+    done
+    log "Removed unused Docker images (aggressive)"
+
+    # Prune volumes
+    docker volume prune -f 2>/dev/null || true
+    log "Pruned unused Docker volumes"
+fi
+
+# ---------------------------------------------------------------------------
+# Phase 3: act_runner action cache cleanup
+# ---------------------------------------------------------------------------
+
+log "--- Action cache cleanup ---"
+
+if [ -d "$CACHE_DIR" ]; then
+    before=$(du -sb "$CACHE_DIR" 2>/dev/null | cut -f1)
+
+    # Delete cache entries older than max age
+    find "$CACHE_DIR" -type f -mtime "+${CACHE_MAX_AGE_DAYS}" -delete 2>/dev/null || true
+    find "$CACHE_DIR" -type d -empty -delete 2>/dev/null || true
+
+    after=$(du -sb "$CACHE_DIR" 2>/dev/null | cut -f1)
+    freed=$((before - after))
+    log "Cache cleanup freed $(bytes_to_human $freed) (entries older than ${CACHE_MAX_AGE_DAYS}d)"
+else
+    log "Cache directory not found: ${CACHE_DIR}"
+
+    # Try common alternative locations
+    for alt in /var/lib/act_runner/.cache/actcache /home/*/.cache/actcache; do
+        if [ -d "$alt" ]; then
+            log "Found cache at: $alt (update CACHE_DIR config)"
+            CACHE_DIR="$alt"
+            find "$CACHE_DIR" -type f -mtime "+${CACHE_MAX_AGE_DAYS}" -delete 2>/dev/null || true
+            find "$CACHE_DIR" -type d -empty -delete 2>/dev/null || true
+            break
+        fi
+    done
+fi
+
+# ---------------------------------------------------------------------------
+# Phase 4: Workspace cleanup
+# ---------------------------------------------------------------------------
+
+log "--- Workspace cleanup ---"
+
+for ws in "${WORKSPACES[@]}"; do
+    if [ -d "$ws" ]; then
+        # Remove workspace dirs not modified in the last 2 hours
+        # (active builds should be touching files continuously)
+        before=$(du -sb "$ws" 2>/dev/null | cut -f1)
+        find "$ws" -mindepth 1 -maxdepth 1 -type d -mmin +120 -exec rm -rf {} + 2>/dev/null || true
+        after=$(du -sb "$ws" 2>/dev/null | cut -f1)
+        freed=$((before - after))
+        if [ "$freed" -gt 0 ]; then
+            log "Workspace $ws: freed $(bytes_to_human $freed)"
+        fi
+    fi
+done
+
+# ---------------------------------------------------------------------------
+# Phase 5: System cleanup
+# ---------------------------------------------------------------------------
+
+log "--- System cleanup ---"
+
+# apt cache
+apt-get clean 2>/dev/null || true
+
+# Truncate large log files (keep last 1000 lines)
+for logfile in /var/log/syslog /var/log/daemon.log /var/log/kern.log; do
+    if [ -f "$logfile" ] && [ "$(stat -c%s "$logfile" 2>/dev/null)" -gt 104857600 ]; then
+        tail -1000 "$logfile" > "${logfile}.tmp" && mv "${logfile}.tmp" "$logfile"
+        log "Truncated $logfile (was >100MB)"
+    fi
+done
+
+# Journal logs older than 3 days
+journalctl --vacuum-time=3d 2>/dev/null || true
+
+# ---------------------------------------------------------------------------
+# Phase 6: Emergency cleanup (only if still critical)
+# ---------------------------------------------------------------------------
+
+usage=$(disk_usage_pct)
+if [ "$usage" -gt 95 ]; then
+    log "CRITICAL: Still at ${usage}% after cleanup"
+
+    # Nuclear option: remove ALL docker data except running containers
+    docker system prune -af --volumes 2>/dev/null || true
+    log "Ran docker system prune -af --volumes"
+
+    # Clear entire action cache
+    if [ -d "$CACHE_DIR" ]; then
+        rm -rf "${CACHE_DIR:?}/"*
+        log "Cleared entire action cache"
+    fi
+
+    usage=$(disk_usage_pct)
+    log "After emergency cleanup: ${usage}%"
+fi
+
+# ---------------------------------------------------------------------------
+# Summary
+# ---------------------------------------------------------------------------
+
+usage=$(disk_usage_pct)
+log "Cleanup complete. Disk usage: ${usage}%"
+
+# Report top space consumers for diagnostics
+log "Top 10 directories under /var:"
+du -sh /var/*/ 2>/dev/null | sort -rh | head -10 | while read -r line; do
+    log "  $line"
+done

.gitea/runner/cleanup.timer

@@ -0,0 +1,10 @@
+[Unit]
+Description=Run CI runner cleanup every 30 minutes
+
+[Timer]
+OnBootSec=5min
+OnUnitActiveSec=30min
+Persistent=true
+
+[Install]
+WantedBy=timers.target

.gitea/workflows/build.yml

@@ -22,6 +22,17 @@ jobs:
       DEBIAN_FRONTEND: noninteractive
 
     steps:
+      - name: Free disk space
+        run: |
+          echo "=== Disk usage before cleanup ==="
+          df -h /
+          rm -rf /usr/share/dotnet /usr/local/lib/android /opt/ghc /opt/hostedtoolcache 2>/dev/null || true
+          rm -rf /usr/local/share/boost /usr/share/swift 2>/dev/null || true
+          apt-get autoremove -y 2>/dev/null || true
+          apt-get clean 2>/dev/null || true
+          echo "=== Disk usage after cleanup ==="
+          df -h /
+
       - name: Install system prerequisites
         run: |
           apt-get update -qq
@@ -36,8 +47,12 @@ jobs:
           submodules: recursive
           fetch-depth: 1
 
-      - name: Fetch tags (for git describe)
-        run: git fetch --no-recurse-submodules --force --depth=1 origin '+refs/tags/*:refs/tags/*'
+      - name: Fetch latest tag (for git describe)
+        run: |
+          latest_tag=$(git ls-remote --tags --sort=-v:refname origin 'refs/tags/v*' | head -n1 | awk '{print $2}')
+          if [ -n "$latest_tag" ]; then
+            git fetch --no-recurse-submodules --force --depth=1 origin "+${latest_tag}:${latest_tag}"
+          fi
 
       - name: Install pixi
         run: |
@@ -46,12 +61,16 @@ jobs:
           export PATH="$HOME/.pixi/bin:$PATH"
           pixi --version
 
+      - name: Compute cache date key
+        id: cache-date
+        run: echo "date=$(date -u +%Y%m%d)" >> $GITHUB_OUTPUT
+
       - name: Restore ccache
         id: ccache-restore
         uses: https://github.com/actions/cache/restore@v4
         with:
           path: /tmp/ccache-kindred-create
-          key: ccache-build-${{ github.ref_name }}-${{ github.run_id }}
+          key: ccache-build-${{ github.ref_name }}-${{ steps.cache-date.outputs.date }}
           restore-keys: |
             ccache-build-${{ github.ref_name }}-
             ccache-build-main-
@@ -60,6 +79,7 @@ jobs:
         run: |
           mkdir -p $CCACHE_DIR
           pixi run ccache -z
+          pixi run ccache -p
 
       - name: Configure (CMake)
         run: pixi run cmake --preset conda-linux-release
@@ -71,11 +91,11 @@ jobs:
         run: pixi run ccache -s
 
       - name: Save ccache
-        if: always()
+        if: always() && steps.ccache-restore.outputs.cache-hit != 'true'
         uses: https://github.com/actions/cache/save@v4
         with:
           path: /tmp/ccache-kindred-create
-          key: ccache-build-${{ github.ref_name }}-${{ github.run_id }}
+          key: ccache-build-${{ github.ref_name }}-${{ steps.cache-date.outputs.date }}
 
       - name: Run C++ unit tests
         continue-on-error: true

.gitea/workflows/release.yml

@@ -31,6 +31,18 @@ jobs:
       DEBIAN_FRONTEND: noninteractive
 
     steps:
+      - name: Free disk space
+        run: |
+          echo "=== Disk usage before cleanup ==="
+          df -h /
+          # Remove pre-installed bloat common in runner images
+          rm -rf /usr/share/dotnet /usr/local/lib/android /opt/ghc /opt/hostedtoolcache 2>/dev/null || true
+          rm -rf /usr/local/share/boost /usr/share/swift 2>/dev/null || true
+          apt-get autoremove -y 2>/dev/null || true
+          apt-get clean 2>/dev/null || true
+          echo "=== Disk usage after cleanup ==="
+          df -h /
+
       - name: Install system prerequisites
         run: |
           apt-get update -qq
@@ -45,8 +57,12 @@ jobs:
           submodules: recursive
           fetch-depth: 1
 
-      - name: Fetch tags
-        run: git fetch --tags --force --no-recurse-submodules origin
+      - name: Fetch latest tag (for git describe)
+        run: |
+          latest_tag=$(git ls-remote --tags --sort=-v:refname origin 'refs/tags/v*' | head -n1 | awk '{print $2}')
+          if [ -n "$latest_tag" ]; then
+            git fetch --no-recurse-submodules --force --depth=1 origin "+${latest_tag}:${latest_tag}"
+          fi
 
       - name: Install pixi
         run: |
@@ -55,20 +71,26 @@ jobs:
           export PATH="$HOME/.pixi/bin:$PATH"
           pixi --version
 
+      - name: Compute cache date key
+        id: cache-date
+        run: echo "date=$(date -u +%Y%m%d)" >> $GITHUB_OUTPUT
+
       - name: Restore ccache
         id: ccache-restore
         uses: https://github.com/actions/cache/restore@v4
         with:
           path: /tmp/ccache-kindred-create
-          key: ccache-release-linux-${{ github.run_id }}
+          key: ccache-release-linux-${{ steps.cache-date.outputs.date }}
           restore-keys: |
             ccache-release-linux-
-            ccache-build-main-
 
       - name: Prepare ccache
         run: |
           mkdir -p $CCACHE_DIR
+          # Ensure ccache is accessible to rattler-build's subprocess
+          export PATH="$(pixi run bash -c 'echo $PATH')"
           pixi run ccache -z
+          pixi run ccache -p
 
       - name: Build release package (AppImage)
         working-directory: package/rattler-build
@@ -80,11 +102,19 @@ jobs:
         run: pixi run ccache -s
 
       - name: Save ccache
-        if: always()
+        if: always() && steps.ccache-restore.outputs.cache-hit != 'true'
         uses: https://github.com/actions/cache/save@v4
         with:
           path: /tmp/ccache-kindred-create
-          key: ccache-release-linux-${{ github.run_id }}
+          key: ccache-release-linux-${{ steps.cache-date.outputs.date }}
+
+      - name: Clean up intermediate build files
+        run: |
+          # Remove pixi package cache and build work dirs to free space for .deb
+          rm -rf package/rattler-build/.pixi/build 2>/dev/null || true
+          find /root/.cache/rattler -type f -delete 2>/dev/null || true
+          echo "=== Disk usage after cleanup ==="
+          df -h /
 
       - name: Build .deb package
         run: |
@@ -105,7 +135,7 @@ jobs:
         with:
           name: release-linux
           path: |
-            package/rattler-build/linux/*.AppImage
+            package/rattler-build/linux/FreeCAD_*.AppImage
             package/rattler-build/linux/*.deb
             package/rattler-build/linux/*-SHA256.txt
             package/rattler-build/linux/*.sha256
@@ -315,22 +345,69 @@ jobs:
           ls -lah release/
 
       - name: Create release
-        uses: https://gitea.com/actions/release-action@main
-        with:
-          files: release/*
-          title: "Kindred Create ${{ env.BUILD_TAG }}"
-          body: |
-            ## Kindred Create ${{ env.BUILD_TAG }}
+        env:
+          GITEA_TOKEN: ${{ secrets.RELEASE_TOKEN }}
+          GITEA_URL: ${{ github.server_url }}
+          REPO: ${{ github.repository }}
+        run: |
+          TAG="${BUILD_TAG}"
 
-            ### Downloads
+          # Build JSON payload entirely in Python to avoid shell/Python type mismatches
+          PAYLOAD=$(python3 -c "
+          import json, re
+          tag = '${TAG}'
+          prerelease = bool(re.search(r'(rc|beta|alpha)', tag))
+          body = '''## Kindred Create {tag}
 
-            | Platform | File |
-            |----------|------|
-            | Linux (AppImage) | `KindredCreate-*-Linux-x86_64.AppImage` |
-            | Linux (Debian/Ubuntu) | `kindred-create_*.deb` |
+          ### Downloads
 
-            *macOS and Windows builds are not yet available.*
+          | Platform | File |
+          |----------|------|
+          | Linux (AppImage) | \`KindredCreate-*-Linux-x86_64.AppImage\` |
+          | Linux (Debian/Ubuntu) | \`kindred-create_*.deb\` |
 
-            SHA256 checksums are provided alongside each artifact.
-          prerelease: ${{ contains(github.ref_name, 'rc') || contains(github.ref_name, 'beta') || contains(github.ref_name, 'alpha') }}
-          api_key: ${{ secrets.RELEASE_TOKEN }}
+          *macOS and Windows builds are not yet available.*
+
+          SHA256 checksums are provided alongside each artifact.'''.format(tag=tag)
+          print(json.dumps({
+              'tag_name': tag,
+              'name': f'Kindred Create {tag}',
+              'body': body,
+              'prerelease': prerelease,
+          }))
+          ")
+
+          # Delete existing release for this tag (if any) so we can recreate
+          existing=$(curl -s -o /dev/null -w "%{http_code}" \
+            -H "Authorization: token ${GITEA_TOKEN}" \
+            "${GITEA_URL}/api/v1/repos/${REPO}/releases/tags/${TAG}")
+          if [ "$existing" = "200" ]; then
+            release_id=$(curl -s \
+              -H "Authorization: token ${GITEA_TOKEN}" \
+              "${GITEA_URL}/api/v1/repos/${REPO}/releases/tags/${TAG}" | \
+              python3 -c "import sys,json; print(json.load(sys.stdin)['id'])")
+            curl -s -X DELETE \
+              -H "Authorization: token ${GITEA_TOKEN}" \
+              "${GITEA_URL}/api/v1/repos/${REPO}/releases/${release_id}"
+            echo "Deleted existing release ${release_id} for tag ${TAG}"
+          fi
+
+          # Create release
+          release_id=$(curl -s -X POST \
+            -H "Authorization: token ${GITEA_TOKEN}" \
+            -H "Content-Type: application/json" \
+            -d "$PAYLOAD" \
+            "${GITEA_URL}/api/v1/repos/${REPO}/releases" | \
+            python3 -c "import sys,json; print(json.load(sys.stdin)['id'])")
+          echo "Created release ${release_id}"
+
+          # Upload assets
+          for file in release/*; do
+            filename=$(basename "$file")
+            echo "Uploading ${filename}..."
+            curl -s -X POST \
+              -H "Authorization: token ${GITEA_TOKEN}" \
+              -F "attachment=@${file}" \
+              "${GITEA_URL}/api/v1/repos/${REPO}/releases/${release_id}/assets?name=${filename}"
+            echo " done."
+          done

docs/ARCHITECTURE.md

@@ -0,0 +1,58 @@
+# Architecture
+
+## Bootstrap flow
+
+```
+FreeCAD startup
+  └─ src/Mod/Create/Init.py
+       └─ setup_kindred_addons()
+            ├─ exec(mods/ztools/ztools/Init.py)
+            └─ exec(mods/silo/freecad/Init.py)
+
+  └─ src/Mod/Create/InitGui.py
+       ├─ setup_kindred_workbenches()
+       │    ├─ exec(mods/ztools/ztools/InitGui.py)
+       │    │    ├─ registers ZToolsWorkbench
+       │    │    └─ installs _ZToolsPartDesignManipulator (global)
+       │    └─ exec(mods/silo/freecad/InitGui.py)
+       │         └─ registers SiloWorkbench
+       └─ Deferred setup (QTimer):
+            ├─ 1500ms: _setup_silo_auth_panel()    → "Database Auth" dock
+            ├─ 2000ms: _setup_silo_menu()           → SiloMenuManipulator
+            ├─ 3000ms: _check_silo_first_start()    → settings prompt
+            └─ 4000ms: _setup_silo_activity_panel() → "Database Activity" dock
+```
+
+## Key source layout
+
+```
+src/Mod/Create/              Kindred bootstrap module (Python)
+  ├── Init.py                Adds mods/ addon paths, loads Init.py files
+  └── InitGui.py             Loads workbenches, installs Silo manipulators
+
+src/Gui/FileOrigin.h/.cpp           FileOrigin base class + LocalFileOrigin
+src/Gui/CommandOrigin.cpp            Origin_Commit/Pull/Push/Info/BOM commands
+src/Gui/OriginManager.h/.cpp        Origin lifecycle management
+src/Gui/OriginSelectorWidget.h/.cpp  UI for origin selection
+
+mods/ztools/                 [submodule] ztools workbench
+  ├── ztools/InitGui.py      ZToolsWorkbench + PartDesign manipulator
+  ├── ztools/ztools/
+  │   ├── commands/          Datum, pattern, pocket, assembly, spreadsheet
+  │   ├── datums/core.py     Datum creation via Part::AttachExtension
+  │   └── resources/         Icons, theme utilities
+  └── CatppuccinMocha/       Theme preference pack (QSS)
+
+mods/silo/                   [submodule -> silo-mod.git] FreeCAD workbench
+  ├── silo-client/           [submodule -> silo-client.git] shared API client
+  │   └── silo_client/       SiloClient, SiloSettings, CATEGORY_NAMES
+  └── freecad/               FreeCAD workbench (Python)
+      ├── InitGui.py         SiloWorkbench
+      ├── silo_commands.py   Commands + FreeCADSiloSettings adapter
+      └── silo_origin.py     FileOrigin backend for Silo
+
+src/Gui/Stylesheets/         QSS themes and SVG assets
+resources/preferences/       Canonical preference pack (KindredCreate)
+```
+
+See [INTEGRATION_PLAN.md](INTEGRATION_PLAN.md) for architecture layers and phase status.

docs/CI_CD.md

@@ -7,7 +7,7 @@ Kindred Create uses Gitea Actions for continuous integration and release builds.
 | Workflow | Trigger | Purpose | Artifacts |
 |----------|---------|---------|-----------|
 | `build.yml` | Push to `main`, pull requests | Build + test | Linux tarball |
-| `release.yml` | Tags matching `v*` | Multi-platform release | AppImage, .deb, .dmg, .exe, .7z |
+| `release.yml` | Tags matching `v*` or `latest` | Release build | AppImage, .deb |
 
 All builds run on public runners in dockerized mode. No host-mode or internal infrastructure is required.
 
@@ -34,14 +34,16 @@ Runs on every push to `main` and on pull requests. Builds the project in an Ubun
 
 ### Caching
 
-ccache is persisted between builds using `actions/cache`. Cache keys are scoped by branch and commit SHA, with fallback to the branch key then `main`.
+ccache is persisted between builds using `actions/cache`. Cache keys use a date suffix so entries rotate daily (one save per day per branch). Saves are skipped when the exact key already exists, preventing duplicate entries that fill runner storage.
 
 ```
-Key:      ccache-build-{branch}-{sha}
+Key:      ccache-build-{branch}-{YYYYMMDD}
 Fallback: ccache-build-{branch}-
 Fallback: ccache-build-main-
 ```
 
+Release builds use a separate key namespace (`ccache-release-linux-{YYYYMMDD}`) because they compile with different optimization flags (`-O3`). The rattler-build script (`build.sh`) explicitly sets `CCACHE_DIR` and `CCACHE_BASEDIR` since rattler-build does not forward environment variables from the parent process.
+
 ccache configuration: 4 GB max, zlib compression level 6, sloppy mode for include timestamps and PCH.
 
 ---
@@ -63,17 +65,19 @@ Tags containing `rc`, `beta`, or `alpha` are marked as pre-releases.
 
 ### Platform matrix
 
-| Job | Runner | Container | Preset | Output |
-|-----|--------|-----------|--------|--------|
-| `build-linux` | `ubuntu-latest` | `ubuntu:24.04` | `conda-linux-release` | AppImage, .deb |
-| `build-macos` (Intel) | `macos-13` | native | `conda-macos-release` | .dmg (x86_64) |
-| `build-macos` (Apple Silicon) | `macos-14` | native | `conda-macos-release` | .dmg (arm64) |
-| `build-windows` | `windows-latest` | native | `conda-windows-release` | .exe (NSIS), .7z |
+| Job | Runner | Container | Preset | Output | Status |
+|-----|--------|-----------|--------|--------|--------|
+| `build-linux` | `ubuntu-latest` | `ubuntu:24.04` | `conda-linux-release` | AppImage, .deb | Active |
+| `build-macos` (Intel) | `macos-13` | native | `conda-macos-release` | .dmg (x86_64) | Disabled |
+| `build-macos` (Apple Silicon) | `macos-14` | native | `conda-macos-release` | .dmg (arm64) | Disabled |
+| `build-windows` | `windows-latest` | native | `conda-windows-release` | .exe (NSIS), .7z | Disabled |
 
-All four jobs run concurrently. After all succeed, `publish-release` collects artifacts and creates the Gitea release.
+Only the Linux build is currently active. macOS and Windows jobs are defined but commented out pending runner availability or cross-compilation support. After `build-linux` succeeds, `publish-release` collects artifacts and creates the Gitea release.
 
 ### Linux build
 
+Both workflows start with a disk cleanup step that removes pre-installed bloat (dotnet, Android SDK, etc.) to free space for the build.
+
 Uses the rattler-build packaging pipeline:
 
 1. `pixi install` in `package/rattler-build/`
@@ -81,9 +85,10 @@ Uses the rattler-build packaging pipeline:
 3. The bundle script:
    - Copies the pixi conda environment to an AppDir
    - Strips unnecessary files (includes, static libs, cmake files, `__pycache__`)
-   - Downloads `appimagetool` and creates a squashfs AppImage (zstd compressed)
-   - Generates SHA256 checksums
-4. `package/debian/build-deb.sh` builds a .deb from the AppDir
+   - Downloads `appimagetool`, extracts it with `--appimage-extract` (FUSE unavailable in containers), and runs via `squashfs-root/AppRun`
+   - Creates a squashfs AppImage (zstd compressed) with SHA256 checksums
+4. Intermediate build files are cleaned up to free space for the .deb step
+5. `package/debian/build-deb.sh` builds a .deb from the AppDir
    - Installs to `/opt/kindred-create/` with wrapper scripts in `/usr/bin/`
    - Sets up LD_LIBRARY_PATH, QT_PLUGIN_PATH, PYTHONPATH in wrappers
    - Creates desktop entry, MIME types, AppStream metainfo
@@ -123,10 +128,15 @@ Builds natively on Windows runner:
 
 `publish-release` runs after all platform builds succeed:
 
-1. Downloads all artifacts from `build-linux`, `build-macos`, `build-windows`
-2. Collects release files (AppImage, .deb, .dmg, .7z, .exe, checksums)
-3. Creates a Gitea release via `gitea.com/actions/release-action`
-4. Requires `RELEASE_TOKEN` secret with repository write permissions
+1. Downloads all artifacts from completed build jobs
+2. Collects release files (AppImage, .deb, checksums) into a `release/` directory
+3. Deletes any existing Gitea release for the same tag (allows re-running)
+4. Creates a new Gitea release via the REST API (`/api/v1/repos/{owner}/{repo}/releases`)
+5. Uploads each artifact as a release attachment via the API
+
+The release payload (tag name, body, prerelease flag) is built entirely in Python to avoid shell/Python type mismatches. Tags containing `rc`, `beta`, or `alpha` are automatically marked as pre-releases.
+
+Requires `RELEASE_TOKEN` secret with repository write permissions.
 
 ---
 
@@ -174,6 +184,27 @@ container:
   network: bridge
 ```
 
+### Runner cleanup daemon
+
+A cleanup script at `.gitea/runner/cleanup.sh` prevents disk exhaustion on self-hosted runners. It uses a tiered approach based on disk usage thresholds:
+
+| Threshold | Action |
+|-----------|--------|
+| 70% | Docker cleanup (stopped containers, dangling images, build cache) |
+| 80% | Purge act_runner cache entries older than 7 days, clean inactive workspaces |
+| 90% | System cleanup (apt cache, old logs, journal vacuum to 100 MB) |
+| 95% | Emergency: remove all act_runner cache entries and Docker images |
+
+Install via the provided systemd units (`.gitea/runner/cleanup.service` and `.gitea/runner/cleanup.timer`) to run every 30 minutes:
+
+```bash
+sudo cp .gitea/runner/cleanup.sh /usr/local/bin/runner-cleanup.sh
+sudo cp .gitea/runner/cleanup.service /etc/systemd/system/
+sudo cp .gitea/runner/cleanup.timer /etc/systemd/system/
+sudo systemctl daemon-reload
+sudo systemctl enable --now cleanup.timer
+```
+
 ---
 
 ## Secrets
@@ -214,11 +245,12 @@ Defined in `CMakePresets.json`. Release builds use:
 
 ### ccache
 
-Compiler cache is used across all builds to speed up incremental compilation. Cache is persisted between CI runs via `actions/cache`. Configuration:
+Compiler cache is used across all builds to speed up incremental compilation. Cache is persisted between CI runs via `actions/cache` with date-based key rotation. Configuration:
 
 - Max size: 4 GB
 - Compression: zlib level 6
 - Sloppy mode: include timestamps, PCH defines, time macros
+- `CCACHE_BASEDIR`: set to workspace root (build workflow) or `$SRC_DIR` (rattler-build) for path normalization across runs
 
 ---
 
@@ -243,9 +275,12 @@ The Docker container installs only minimal dependencies. If a new dependency is
 ccache misses spike when:
 - The compiler version changes (pixi update)
 - CMake presets change configuration flags
-- The cache key doesn't match (new branch, force-pushed SHA)
+- First build of the day (date-based key rotates daily)
+- New branch without a prior cache (falls back to `main` cache)
 
-Check `pixi run ccache -s` output for hit/miss ratios.
+For release builds, ensure `build.sh` is correctly setting `CCACHE_DIR=/tmp/ccache-kindred-create` -- rattler-build does not forward environment variables from the workflow, so ccache config must be set inside the script.
+
+Check `pixi run ccache -s` output (printed in the "Show ccache statistics" step) for hit/miss ratios. The "Prepare ccache" step also prints the full ccache configuration via `ccache -p`.
 
 ### Submodule checkout fails
 

docs/COMPONENTS.md

@@ -0,0 +1,110 @@
+# Components
+
+## ztools workbench
+
+**Registered commands (9):**
+
+| Command | Function |
+|---------|----------|
+| `ZTools_DatumCreator` | Create datum planes, axes, points (16 modes) |
+| `ZTools_DatumManager` | Manage existing datum objects |
+| `ZTools_EnhancedPocket` | Flip-side pocket (cut outside sketch profile) |
+| `ZTools_RotatedLinearPattern` | Linear pattern with incremental rotation |
+| `ZTools_AssemblyLinearPattern` | Pattern assembly components linearly |
+| `ZTools_AssemblyPolarPattern` | Pattern assembly components around axis |
+| `ZTools_SpreadsheetStyle{Bold,Italic,Underline}` | Text style toggles |
+| `ZTools_SpreadsheetAlign{Left,Center,Right}` | Cell alignment |
+| `ZTools_Spreadsheet{BgColor,TextColor,QuickAlias}` | Colors and alias creation |
+
+**PartDesign integration** via `_ZToolsPartDesignManipulator`:
+- `ZTools_DatumCreator`, `ZTools_DatumManager` → "Part Design Helper Features" toolbar
+- `ZTools_EnhancedPocket` → "Part Design Modeling Features" toolbar
+- `ZTools_RotatedLinearPattern` → "Part Design Transformation Features" toolbar
+- Same commands inserted into Part Design menu after `PartDesign_Boolean`
+
+**Datum types (7):** offset_from_face, offset_from_plane, midplane, 3_points, normal_to_edge, angled, tangent_to_cylinder. All except tangent_to_cylinder use `Part::AttachExtension` for automatic parametric updates.
+
+---
+
+## Origin commands (C++)
+
+The Origin abstraction (`src/Gui/FileOrigin.h`) provides a backend-agnostic interface for document storage. Commands delegate to the active `FileOrigin` implementation (currently `LocalFileOrigin` for local files, `SiloOrigin` via `mods/silo/freecad/silo_origin.py` for Silo-tracked documents).
+
+**Registered commands (5):**
+
+| Command | Function | Icon |
+|---------|----------|------|
+| `Origin_Commit` | Commit changes as a new revision | `silo-commit` |
+| `Origin_Pull` | Pull a specific revision from the origin | `silo-pull` |
+| `Origin_Push` | Push local changes to the origin | `silo-push` |
+| `Origin_Info` | Show document information from origin | `silo-info` |
+| `Origin_BOM` | Show Bill of Materials for this document | `silo-bom` |
+
+These appear in the File menu and "Origin Tools" toolbar across all workbenches (see `src/Gui/Workbench.cpp`).
+
+---
+
+## Silo workbench
+
+**Registered commands (14):**
+
+| Command | Function |
+|---------|----------|
+| `Silo_New` | Create new Silo-tracked document |
+| `Silo_Open` | Open file from Silo database |
+| `Silo_Save` | Save to Silo (create revision) |
+| `Silo_Commit` | Commit current revision |
+| `Silo_Pull` | Pull latest revision from server |
+| `Silo_Push` | Push local changes to server |
+| `Silo_Info` | View item metadata and history |
+| `Silo_BOM` | Bill of materials dialog (BOM + Where Used) |
+| `Silo_TagProjects` | Assign project tags |
+| `Silo_Rollback` | Rollback to previous revision |
+| `Silo_SetStatus` | Set revision status (draft/review/released/obsolete) |
+| `Silo_Settings` | Configure API URL, projects dir, SSL certificates |
+| `Silo_ToggleMode` | Swap Ctrl+O/S/N between FreeCAD and Silo commands |
+| `Silo_Auth` | Login/logout authentication panel |
+
+**Global integration** via `SiloMenuManipulator` in `src/Mod/Create/InitGui.py`:
+- File menu: Silo_New, Silo_Open, Silo_Save, Silo_Commit, Silo_Pull, Silo_Push, Silo_BOM
+- File toolbar: Silo_ToggleMode button
+
+**Server architecture:** Go REST API (38+ routes) + PostgreSQL + MinIO S3. Authentication via local (bcrypt), LDAP, or OIDC backends. See `mods/silo/docs/` for server documentation.
+
+**LibreOffice Calc extension** ([silo-calc](https://git.kindred-systems.com/kindred/silo-calc.git)): BOM management, item creation, and AI-assisted descriptions via OpenRouter API. Shares the same Silo REST API and auth token system via the shared [silo-client](https://git.kindred-systems.com/kindred/silo-client.git) package.
+
+---
+
+## Theme
+
+**Canonical source:** `resources/preferences/KindredCreate/KindredCreate.qss`
+
+Four copies must stay in sync:
+1. `resources/preferences/KindredCreate/KindredCreate.qss` (canonical)
+2. `src/Gui/Stylesheets/KindredCreate.qss`
+3. `src/Gui/PreferencePacks/KindredCreate/KindredCreate.qss`
+4. `mods/ztools/CatppuccinMocha/CatppuccinMocha.qss`
+
+---
+
+## Icon infrastructure
+
+### Qt resource icons (`src/Gui/Icons/`)
+
+5 `silo-*` SVGs registered in `resource.qrc`, used by C++ Origin commands:
+
+`silo-bom.svg`, `silo-commit.svg`, `silo-info.svg`, `silo-pull.svg`, `silo-push.svg`
+
+### Silo module icons (`mods/silo/freecad/resources/icons/`)
+
+10 SVGs loaded at runtime by the `_icon()` function in `silo_commands.py`:
+
+`silo-auth.svg`, `silo-bom.svg`, `silo-commit.svg`, `silo-info.svg`, `silo-new.svg`, `silo-open.svg`, `silo-pull.svg`, `silo-push.svg`, `silo-save.svg`, `silo.svg`
+
+### Missing icons
+
+3 command icon names have no corresponding SVG file: `silo-tag`, `silo-rollback`, `silo-status`. The `_icon()` function returns an empty string for these, so `Silo_TagProjects`, `Silo_Rollback`, and `Silo_SetStatus` render without toolbar icons.
+
+### Palette
+
+All silo-* icons use the Catppuccin Mocha color scheme. See `kindred-icons/README.md` for palette specification and icon design standards.

docs/INTEGRATION_PLAN.md

@@ -134,8 +134,10 @@ install(DIRECTORY ${CMAKE_SOURCE_DIR}/mods/ztools/ztools
 install(DIRECTORY ${CMAKE_SOURCE_DIR}/mods/ztools/CatppuccinMocha
         DESTINATION ${CMAKE_INSTALL_DATADIR}/Mod/ztools)
 
-install(DIRECTORY ${CMAKE_SOURCE_DIR}/mods/silo/pkg/freecad/
+install(DIRECTORY ${CMAKE_SOURCE_DIR}/mods/silo/freecad/
         DESTINATION ${CMAKE_INSTALL_DATADIR}/Mod/Silo)
+install(DIRECTORY ${CMAKE_SOURCE_DIR}/mods/silo/silo-client/
+        DESTINATION ${CMAKE_INSTALL_DATADIR}/Mod/silo-client)
 ```
 
 ---

docs/KNOWN_ISSUES.md

@@ -0,0 +1,75 @@
+# Known Issues
+
+## Issues
+
+### Critical
+
+1. **QSS duplication.** Four copies of the stylesheet must be kept in sync manually. A build step or symlinks should eliminate this.
+
+2. **WorkbenchManipulator timing.** The `_ZToolsPartDesignManipulator` appends commands by name. If ZToolsWorkbench hasn't been activated when the user switches to PartDesign, the commands may not be registered. The manipulator API tolerates missing commands silently, but buttons won't appear.
+
+3. **Silo shortcut persistence.** `Silo_ToggleMode` stores original shortcuts in a module-level dict. If FreeCAD crashes with Silo mode on, original shortcuts are lost on next launch.
+
+### High
+
+4. **Silo authentication not production-hardened.** Local auth (bcrypt) works end-to-end. LDAP (FreeIPA) and OIDC (Keycloak) backends are coded but depend on infrastructure not yet deployed. FreeCAD client has `Silo_Auth` dock panel for login and API token management. Server has session middleware (`alexedwards/scs`), CSRF protection (`nosurf`), and role-based access control (admin/editor/viewer). Migration `009_auth.sql` adds users, api_tokens, and sessions tables.
+
+5. **No unit tests.** Zero test coverage for ztools and Silo FreeCAD commands. Silo Go backend also lacks tests.
+
+6. **Assembly solver datum handling is minimal.** The `findPlacement()` fix in `src/Mod/Assembly/UtilsAssembly.py` extracts placement from `obj.Shape.Faces[0]` for `PartDesign::Plane` and from shape vertex for `PartDesign::Point`. Does not handle empty shapes or non-planar datum objects.
+
+### Medium
+
+7. **`Silo_BOM` requires Silo-tracked document.** Depends on `SiloPartNumber` property. Unregistered documents show a warning with no registration path.
+
+8. **PartDesign menu insertion fragility.** `_ZToolsPartDesignManipulator.modifyMenuBar()` inserts after `PartDesign_Boolean`. If upstream renames this command, insertions silently fail.
+
+9. **tangent_to_cylinder falls back to manual placement.** TangentPlane MapMode requires a vertex reference not collected by the current UI.
+
+10. **`delete_bom_entry()` bypasses error normalization.** Uses raw `urllib.request` instead of `SiloClient._request()`.
+
+11. **Missing Silo icons.** Three commands reference icons that don't exist: `silo-tag.svg` (`Silo_TagProjects`), `silo-rollback.svg` (`Silo_Rollback`), `silo-status.svg` (`Silo_SetStatus`). The `_icon()` function returns an empty string, so these commands render without toolbar icons.
+
+### Fixed (retain for reference)
+
+12. **OndselSolver Newton-Raphson convergence.** `NewtonRaphson::isConvergedToNumericalLimit()` compared `dxNorms->at(iterNo)` to itself instead of `dxNorms->at(iterNo - 1)`. This prevented convergence detection on complex assemblies, causing solver exhaustion and "grounded object moved" warnings. Fixed in Kindred fork (`src/3rdParty/OndselSolver`). Needs upstreaming to `FreeCAD/OndselSolver`.
+
+13. **Assembly solver crash on document restore.** `AssemblyObject::onChanged()` called `updateSolveStatus()` when the Group property changed during document restore, triggering the solver while child objects were still deserializing (SIGSEGV). Fixed with `isRestoring()` and `isPerformingTransaction()` guards at `src/Mod/Assembly/App/AssemblyObject.cpp:143`.
+
+---
+
+## Incomplete features
+
+### Silo
+
+| Feature | Status | Notes |
+|---------|--------|-------|
+| Authentication | Local auth complete | LDAP/OIDC backends coded, pending infrastructure |
+| CSRF protection | Implemented | `nosurf` library on web form routes |
+| File locking | Not implemented | Needed to prevent concurrent edits |
+| Odoo ERP integration | Stub only | Returns "not yet implemented" |
+| Part number date segments | Broken | `formatDate()` returns error |
+| Location/inventory APIs | Tables exist, no handlers | |
+| CSV import rollback | Not implemented | `bom_handlers.go` |
+
+### ztools
+
+| Feature | Status | Notes |
+|---------|--------|-------|
+| Tangent-to-cylinder attachment | Manual fallback | No vertex ref in UI |
+| Angled datum live editing | Incomplete | AttachmentOffset not updated in panel |
+| Assembly pattern undo | Not implemented | |
+
+---
+
+## Next steps
+
+1. **Authentication hardening** -- Deploy FreeIPA and Keycloak infrastructure. End-to-end test LDAP and OIDC flows. Harden token rotation and session expiry.
+
+2. **BOM-Assembly bridge** -- Auto-populate Silo BOM from Assembly component links on save.
+
+3. **File locking** -- Pessimistic locks on `Silo_Open` to prevent concurrent edits. Requires server-side lock table and client-side lock display.
+
+4. **Build system** -- CMake install rules for `mods/` submodules so packages include ztools and Silo without manual steps.
+
+5. **Test coverage** -- Unit tests for ztools datum creation, Silo FreeCAD commands, and Go API endpoints.

docs/OVERVIEW.md

@@ -0,0 +1,31 @@
+# Kindred Create
+
+**Last updated:** 2026-02-07
+**Branch:** main @ `7bec3d5c3b2`
+**Kindred Create:** v0.1.0
+**FreeCAD base:** v1.0.0
+
+## Documentation
+
+| Document | Contents |
+|----------|----------|
+| [ARCHITECTURE.md](ARCHITECTURE.md) | Bootstrap flow, source layout, submodules |
+| [COMPONENTS.md](COMPONENTS.md) | ztools, Silo, Origin commands, theme, icons |
+| [KNOWN_ISSUES.md](KNOWN_ISSUES.md) | Bugs, incomplete features, next steps |
+| [INTEGRATION_PLAN.md](INTEGRATION_PLAN.md) | Architecture layers, integration phases |
+| [CI_CD.md](CI_CD.md) | Build and release workflows |
+
+## Submodules
+
+| Submodule | Path | Source | Pinned commit |
+|-----------|------|--------|---------------|
+| ztools | `mods/ztools` | `git.kindred-systems.com/forbes/ztools` | `d2f94c3` |
+| silo-mod | `mods/silo` | `git.kindred-systems.com/kindred/silo-mod` | `bf0b843` |
+| OndselSolver | `src/3rdParty/OndselSolver` | `git.kindred-systems.com/kindred/solver` | `5d1988b` |
+| GSL | `src/3rdParty/GSL` | `github.com/microsoft/GSL` | `756c91a` |
+| AddonManager | `src/Mod/AddonManager` | `github.com/FreeCAD/AddonManager` | `01e242e` |
+| googletest | `tests/lib` | `github.com/google/googletest` | `56efe39` |
+
+The silo submodule was split from a monorepo into three repos: `silo-client` (shared Python API client), `silo-mod` (FreeCAD workbench, used as Create's submodule), and `silo-calc` (LibreOffice Calc extension). The `silo-mod` repo includes `silo-client` as its own submodule.
+
+OndselSolver is forked from `github.com/FreeCAD/OndselSolver` to carry a Newton-Raphson convergence fix (see [KNOWN_ISSUES.md](KNOWN_ISSUES.md#12)).

docs/REPOSITORY_STATE.md

@@ -1,215 +0,0 @@
-# Repository State
-
-**Last updated:** 2026-02-03
-**Branch:** main @ `0ef9ffcf51`
-**Kindred Create:** v0.1.0
-**FreeCAD base:** v1.0.0
-
-## Submodules
-
-| Submodule | Path | Source | Pinned commit |
-|-----------|------|--------|---------------|
-| ztools | `mods/ztools` | `gitea.kindred.internal/kindred/ztools-0065` | `d2f94c3` |
-| silo | `mods/silo` | `gitea.kindred.internal/kindred/silo-0062` | `17a10ab` |
-| OndselSolver | `src/3rdParty/OndselSolver` | `gitea.kindred.internal/kindred/ondsel` | `e32c9cd` |
-| GSL | `src/3rdParty/GSL` | `github.com/microsoft/GSL` | `756c91a` |
-| AddonManager | `src/Mod/AddonManager` | `github.com/FreeCAD/AddonManager` | `01e242e` |
-| googletest | `tests/lib` | `github.com/google/googletest` | `56efe39` |
-
----
-
-## Architecture
-
-### Bootstrap flow
-
-```
-FreeCAD startup
-  └─ src/Mod/Create/Init.py
-       └─ setup_kindred_addons()
-            ├─ exec(mods/ztools/ztools/Init.py)
-            └─ exec(mods/silo/pkg/freecad/Init.py)
-
-  └─ src/Mod/Create/InitGui.py
-       ├─ setup_kindred_workbenches()
-       │    ├─ exec(mods/ztools/ztools/InitGui.py)
-       │    │    ├─ registers ZToolsWorkbench
-       │    │    └─ installs _ZToolsPartDesignManipulator (global)
-       │    └─ exec(mods/silo/pkg/freecad/InitGui.py)
-       │         └─ registers SiloWorkbench
-       └─ Deferred setup (QTimer):
-            ├─ 1500ms: _setup_silo_auth_panel()    → "Database Auth" dock
-            ├─ 2000ms: _setup_silo_menu()           → SiloMenuManipulator
-            ├─ 3000ms: _check_silo_first_start()    → settings prompt
-            └─ 4000ms: _setup_silo_activity_panel() → "Database Activity" dock
-```
-
-### Key source layout
-
-```
-src/Mod/Create/              Kindred bootstrap module (Python)
-  ├── Init.py                Adds mods/ addon paths, loads Init.py files
-  └── InitGui.py             Loads workbenches, installs Silo manipulators
-
-mods/ztools/                 [submodule] ztools workbench
-  ├── ztools/InitGui.py      ZToolsWorkbench + PartDesign manipulator
-  ├── ztools/ztools/
-  │   ├── commands/          Datum, pattern, pocket, assembly, spreadsheet
-  │   ├── datums/core.py     Datum creation via Part::AttachExtension
-  │   └── resources/         Icons, theme utilities
-  └── CatppuccinMocha/       Theme preference pack (QSS)
-
-mods/silo/                   [submodule] Silo parts database
-  ├── cmd/                   Go server entry points
-  ├── internal/              Go API, database, storage packages
-  ├── pkg/freecad/           FreeCAD workbench (Python)
-  │   ├── InitGui.py         SiloWorkbench
-  │   └── silo_commands.py   Commands + SiloClient API
-  ├── deployments/           Docker compose configuration
-  └── migrations/            PostgreSQL schema migrations
-
-src/Gui/Stylesheets/         QSS themes and SVG assets
-resources/preferences/       Canonical preference pack (KindredCreate)
-```
-
----
-
-## Component status
-
-### ztools workbench
-
-**Registered commands (9):**
-
-| Command | Function |
-|---------|----------|
-| `ZTools_DatumCreator` | Create datum planes, axes, points (16 modes) |
-| `ZTools_DatumManager` | Manage existing datum objects |
-| `ZTools_EnhancedPocket` | Flip-side pocket (cut outside sketch profile) |
-| `ZTools_RotatedLinearPattern` | Linear pattern with incremental rotation |
-| `ZTools_AssemblyLinearPattern` | Pattern assembly components linearly |
-| `ZTools_AssemblyPolarPattern` | Pattern assembly components around axis |
-| `ZTools_SpreadsheetStyle{Bold,Italic,Underline}` | Text style toggles |
-| `ZTools_SpreadsheetAlign{Left,Center,Right}` | Cell alignment |
-| `ZTools_Spreadsheet{BgColor,TextColor,QuickAlias}` | Colors and alias creation |
-
-**PartDesign integration** via `_ZToolsPartDesignManipulator`:
-- `ZTools_DatumCreator`, `ZTools_DatumManager` → "Part Design Helper Features" toolbar
-- `ZTools_EnhancedPocket` → "Part Design Modeling Features" toolbar
-- `ZTools_RotatedLinearPattern` → "Part Design Transformation Features" toolbar
-- Same commands inserted into Part Design menu after `PartDesign_Boolean`
-
-**Datum types (7):** offset_from_face, offset_from_plane, midplane, 3_points, normal_to_edge, angled, tangent_to_cylinder. All except tangent_to_cylinder use `Part::AttachExtension` for automatic parametric updates.
-
-### Silo workbench
-
-**Registered commands (13):**
-
-| Command | Function |
-|---------|----------|
-| `Silo_New` | Create new Silo-tracked document |
-| `Silo_Open` | Open file from Silo database |
-| `Silo_Save` | Save to Silo (create revision) |
-| `Silo_Commit` | Commit current revision |
-| `Silo_Pull` | Pull latest revision from server |
-| `Silo_Push` | Push local changes to server |
-| `Silo_Info` | View item metadata and history |
-| `Silo_BOM` | Bill of materials dialog (BOM + Where Used) |
-| `Silo_TagProjects` | Assign project tags |
-| `Silo_Rollback` | Rollback to previous revision |
-| `Silo_SetStatus` | Set revision status (draft/review/released/obsolete) |
-| `Silo_Settings` | Configure API URL, projects dir, SSL certificates |
-| `Silo_ToggleMode` | Swap Ctrl+O/S/N between FreeCAD and Silo commands |
-
-**Global integration** via `SiloMenuManipulator` in `src/Mod/Create/InitGui.py`:
-- File menu: Silo_New, Silo_Open, Silo_Save, Silo_Commit, Silo_Pull, Silo_Push, Silo_BOM
-- File toolbar: Silo_ToggleMode button
-
-**Server architecture:** Go REST API (38 routes) + PostgreSQL + MinIO. See `mods/silo/docs/REPOSITORY_STATUS.md` for route details.
-
-### Theme
-
-**Canonical source:** `resources/preferences/KindredCreate/KindredCreate.qss`
-
-Four copies must stay in sync:
-1. `resources/preferences/KindredCreate/KindredCreate.qss` (canonical)
-2. `src/Gui/Stylesheets/KindredCreate.qss`
-3. `src/Gui/PreferencePacks/KindredCreate/KindredCreate.qss`
-4. `mods/ztools/CatppuccinMocha/CatppuccinMocha.qss`
-
----
-
-## Known issues
-
-### Critical
-
-1. **QSS duplication.** Four copies of the stylesheet must be kept in sync manually. A build step or symlinks should eliminate this.
-
-2. **WorkbenchManipulator timing.** The `_ZToolsPartDesignManipulator` appends commands by name. If ZToolsWorkbench hasn't been activated when the user switches to PartDesign, the commands may not be registered. The manipulator API tolerates missing commands silently, but buttons won't appear.
-
-3. **Silo shortcut persistence.** `Silo_ToggleMode` stores original shortcuts in a module-level dict. If FreeCAD crashes with Silo mode on, original shortcuts are lost on next launch.
-
-### High
-
-4. **No authentication on Silo server.** All API endpoints are publicly accessible. Required before multi-user deployment.
-
-5. **No unit tests.** Zero test coverage for ztools and Silo FreeCAD commands. Silo Go backend also lacks tests.
-
-6. **Assembly solver datum handling is minimal.** The `findPlacement()` fix extracts placement from `obj.Shape.Faces[0]` for `PartDesign::Plane`. Does not handle empty shapes or non-planar datum objects.
-
-### Medium
-
-7. **`Silo_BOM` requires Silo-tracked document.** Depends on `SiloPartNumber` property. Unregistered documents show a warning with no registration path.
-
-8. **PartDesign menu insertion fragility.** `_ZToolsPartDesignManipulator.modifyMenuBar()` inserts after `PartDesign_Boolean`. If upstream renames this command, insertions silently fail.
-
-9. **tangent_to_cylinder falls back to manual placement.** TangentPlane MapMode requires a vertex reference not collected by the current UI.
-
-10. **`delete_bom_entry()` bypasses error normalization.** Uses raw `urllib.request` instead of `SiloClient._request()`.
-
----
-
-## Incomplete features
-
-### Silo
-
-| Feature | Status | Notes |
-|---------|--------|-------|
-| Authentication/authorization | Not implemented | Required for multi-user |
-| File locking | Not implemented | Needed to prevent concurrent edits |
-| Odoo ERP integration | Stub only | Returns "not yet implemented" |
-| Part number date segments | Broken | `formatDate()` returns error |
-| Location/inventory APIs | Tables exist, no handlers | |
-| CSRF protection | Not implemented | Web UI only |
-| CSV import rollback | Not implemented | `bom_handlers.go` |
-
-### ztools
-
-| Feature | Status | Notes |
-|---------|--------|-------|
-| Tangent-to-cylinder attachment | Manual fallback | No vertex ref in UI |
-| Angled datum live editing | Incomplete | AttachmentOffset not updated in panel |
-| Assembly pattern undo | Not implemented | |
-
-### Integration plan
-
-| Phase | Feature | Status |
-|-------|---------|--------|
-| 1 | Addon auto-loading | Done |
-| 2 | Enhanced Pocket as C++ feature | Not started |
-| 3 | Datum C++ helpers | Not started (Python approach used) |
-| 4 | Theme moved to Create module | Partial (QSS synced, not relocated) |
-| 5 | Silo deep integration | Done |
-| 6 | Build system install rules for mods/ | Partial (CI/CD done, CMake install rules pending) |
-
----
-
-## Next steps
-
-1. **Authentication** -- LDAP/FreeIPA integration for Silo multi-user deployment. Server needs auth middleware; FreeCAD client needs credential storage.
-
-2. **BOM-Assembly bridge** -- Auto-populate Silo BOM from Assembly component links on save.
-
-3. **File locking** -- Pessimistic locks on `Silo_Open` to prevent concurrent edits. Requires server-side lock table and client-side lock display.
-
-4. **Build system** -- CMake install rules for `mods/` submodules so packages include ztools and Silo without manual steps.
-
-5. **Test coverage** -- Unit tests for ztools datum creation, Silo FreeCAD commands, and Go API endpoints.

package/rattler-build/build.sh

@@ -1,3 +1,15 @@
+# Configure ccache to use a shared cache directory that persists across CI runs.
+# The workflow caches /tmp/ccache-kindred-create between builds.
+export CCACHE_DIR="${CCACHE_DIR:-/tmp/ccache-kindred-create}"
+export CCACHE_BASEDIR="${SRC_DIR:-$(pwd)}"
+export CCACHE_COMPRESS="${CCACHE_COMPRESS:-true}"
+export CCACHE_COMPRESSLEVEL="${CCACHE_COMPRESSLEVEL:-6}"
+export CCACHE_MAXSIZE="${CCACHE_MAXSIZE:-4G}"
+export CCACHE_SLOPPINESS="${CCACHE_SLOPPINESS:-include_file_ctime,include_file_mtime,pch_defines,time_macros}"
+mkdir -p "$CCACHE_DIR"
+echo "ccache config: CCACHE_DIR=$CCACHE_DIR CCACHE_BASEDIR=$CCACHE_BASEDIR"
+ccache -z || true
+
 if [[ ${HOST} =~ .*linux.*  ]]; then
     CMAKE_PRESET=conda-linux-release
 fi
@@ -46,3 +58,6 @@ cmake --install build
 
 mv ${PREFIX}/bin/FreeCAD ${PREFIX}/bin/freecad || true
 mv ${PREFIX}/bin/FreeCADCmd ${PREFIX}/bin/freecadcmd || true
+
+echo "=== ccache statistics ==="
+ccache -s || true

package/rattler-build/linux/create_bundle.sh

@@ -59,6 +59,10 @@ sed -i "1s/.*/\nLIST OF PACKAGES:/" AppDir/packages.txt
 curl -LO https://github.com/AppImage/appimagetool/releases/download/continuous/appimagetool-$(uname -m).AppImage
 chmod a+x appimagetool-$(uname -m).AppImage
 
+# Extract appimagetool so it works in containers without FUSE
+./appimagetool-$(uname -m).AppImage --appimage-extract > /dev/null 2>&1
+APPIMAGETOOL=squashfs-root/AppRun
+
 if [ "${UPLOAD_RELEASE}" == "true" ]; then
     case "${BUILD_TAG}" in
         *weekly*)
@@ -76,7 +80,7 @@ fi
 echo -e "\nCreate the appimage"
 # export GPG_TTY=$(tty)
 chmod a+x ./AppDir/AppRun
-./appimagetool-$(uname -m).AppImage \
+${APPIMAGETOOL} \
   --comp zstd \
   --mksquashfs-opt -Xcompression-level \
   --mksquashfs-opt 22 \

package/rattler-build/recipe.yaml

@@ -18,12 +18,17 @@ requirements:
     - cmake
     - compilers>=1.10,<1.11
     - doxygen
+    - icu>=75,<76
     - ninja
     - noqt5
     - python>=3.11,<3.12
     - qt6-main>=6.8,<6.9
     - swig >=4.0,<4.4
 
+    - if: linux
+      then:
+        - patchelf
+
     - if: linux and x86_64
       then:
         - clang
@@ -102,6 +107,7 @@ requirements:
     - fmt
     - freetype
     - hdf5
+    - icu>=75,<76
     - lark
     - libboost-devel
     - matplotlib-base

pixi.toml

@@ -25,6 +25,7 @@ freetype = "*"
 git = "*"
 graphviz = "*"
 hdf5 = "*"
+icu = ">=75,<76"
 ifcopenshell = "*"
 lark = "*"
 libboost-devel = "*"

src/Mod/Create/CMakeLists.txt

@@ -33,7 +33,13 @@ install(
 # Install Silo addon
 install(
     DIRECTORY
-        ${CMAKE_SOURCE_DIR}/mods/silo/pkg/freecad/
+        ${CMAKE_SOURCE_DIR}/mods/silo/freecad/
     DESTINATION
-        mods/silo/pkg/freecad
+        mods/silo/freecad
+)
+install(
+    DIRECTORY
+        ${CMAKE_SOURCE_DIR}/mods/silo/silo-client/
+    DESTINATION
+        mods/silo/silo-client
 )