@timurproko/a1 0.1.7 → 0.1.8-dev.0b6d8cc

package/README.md

@@ -9,10 +9,11 @@ npm install --global @timurproko/a1@latest
 ## Commands
 
 ```sh
-a1              # A1-owned UI and profile: ~/.a1/agent
-a1 version      # show Installed, Release (latest), and Next versions
-a1 update       # update to npm latest
-a1 update:next  # update to npm next
+a1                      # A1-owned UI and profile: ~/.a1/agent
+a1 version              # show Installed, Release (latest), and Next versions
+a1 update               # update to npm latest
+a1 update:next          # update to npm next (or a1 update:<commit> for a specific preview)
+a1 update --models      # refresh A1's model catalogs
 ```
 
 Prerelease builds — what `a1 update:next` installs — add two development profiles
@@ -30,16 +31,19 @@ Pi extension packages install into A1's own profile, so bare `a1` loads them and
 `a1 pi` and `a1 sandbox` do not. Sources are Pi's: `npm:`, git, or a local path.
 
 ```sh
-a1 install npm:pi-mcp-adapter   # install a package into ~/.a1/agent
-a1 remove npm:pi-mcp-adapter    # remove it again (alias: a1 uninstall)
-a1 list                         # list packages installed for a1
-a1 update --extensions          # update every installed package
-a1 update npm:pi-mcp-adapter    # update one of them
-a1 update --models              # refresh model catalogs
+a1 pi install npm:pi-mcp-adapter   # install a package into ~/.a1/agent
+a1 pi remove npm:pi-mcp-adapter    # remove it again (alias: a1 pi uninstall)
+a1 pi list                         # list packages installed for a1
+a1 pi update --extensions          # update every installed package
+a1 pi update npm:pi-mcp-adapter    # update one of them
 ```
 
 A running session loads a newly installed package after a restart. Pi's own
-profile at `~/.pi/agent` is managed by Pi itself.
+profile at `~/.pi/agent` is managed by Pi itself. Extension configuration is
+isolated too: for example, MCP configuration for bare `a1` belongs under
+`~/.a1/agent` (or the project), so `~/.pi/agent/mcp.json` is not read. Run
+`/mcp setup` inside bare `a1` to configure it; the MCP footer status appears
+when that A1 configuration contains a server.
 
 ## Develop
 
@@ -68,9 +72,16 @@ time and never committed, so previews cost no commits and need no command, and a
 installed preview says exactly which source produced it.
 
 ```sh
-a1 update:next   # install the newest preview
+a1 update:next      # install the newest preview
+a1 update:7eabe9e   # install the preview built from that commit
 ```
 
+Naming a commit is what the version suffix is for: read it off `a1 version`, a
+pull request, or a commit list, and install exactly that build — you never need to
+know which version it went out under. A commit that was never published is refused
+rather than guessed at. A full preview version works in the same place, so a string
+pasted back from `a1 version` is understood too.
+
 ### Stable — npm `latest`
 
 One command, from a clean `develop` that matches its remote:
@@ -86,7 +97,7 @@ It lands the version on `develop` through a pull request that merges itself.
 **Landing it is what publishes** — the workflow builds, validates the packed release
 on Windows, Linux, and macOS, publishes to npm `latest` with provenance, and only
 then writes the `v<version>` tag and records the GitHub Release. The command waits
-for that to succeed, then lands the next `-dev.0` version so previews resume
+for that to succeed, then opens the next `-dev` line so previews resume
 immediately.
 
 ```sh

package/bin/cli.js

@@ -22,9 +22,9 @@ process.exitCode = await dispatchCli(process.argv.slice(2), {
     const { runVersionStats } = await import("../dist/src/cli/index.js");
     return await runVersionStats({ packageRoot: fileURLToPath(packageRoot) });
   },
-  update: async channel => {
+  update: async (channel, target) => {
     const { runSelfUpdate } = await import("../dist/src/foundation/release/index.js");
-    return await runSelfUpdate({ packageRoot: fileURLToPath(packageRoot), channel });
+    return await runSelfUpdate({ packageRoot: fileURLToPath(packageRoot), channel, ...(target === undefined ? {} : { target }) });
   },
   packages: async request => {
     const [{ runPackageCommand }, { createPiPackagesPort }] = await Promise.all([

package/dist/native/darwin-arm64/manifest.json

@@ -5,7 +5,7 @@
   "platform": "darwin",
   "architecture": "arm64",
   "capability": "unsupported",
-  "builtAt": "2026-08-24T05:41:42.321Z",
+  "builtAt": "2026-08-25T08:02:28.988Z",
   "artifact": {
     "filename": "process-guardian",
     "sha256": "7524bf568992517f50ed53196c861c5edeba0d7275633bb4735ab45bd5963a28",

package/dist/native/linux-x64/manifest.json

@@ -5,7 +5,7 @@
   "platform": "linux",
   "architecture": "x64",
   "capability": "supported",
-  "builtAt": "2026-08-24T05:41:49.189Z",
+  "builtAt": "2026-08-25T08:02:31.153Z",
   "artifact": {
     "filename": "process-guardian",
     "sha256": "29e22fe29de2828982bc67ef418c4adcaab1490281477b7bea592ec6fe621bcd",

package/dist/native/win32-x64/manifest.json

@@ -5,10 +5,10 @@
   "platform": "win32",
   "architecture": "x64",
   "capability": "supported",
-  "builtAt": "2026-08-24T05:42:24.069Z",
+  "builtAt": "2026-08-25T08:02:58.479Z",
   "artifact": {
     "filename": "process-guardian.exe",
-    "sha256": "c0b203cd361d080f7e5a2e108d7c090a5ef94ab466631e1e01b6af93cd7ab226",
+    "sha256": "fdbde2408643ffb897f5107d96ed40e8c8467505ef7daa64f86f9c2497c304ca",
     "size": 172544
   },
   "provenance": {

package/dist/src/cli/dispatch.d.ts

@@ -5,7 +5,7 @@ export type UpdateChannel = "stable" | "next";
 export interface CliHandlers {
     readonly launch: (intent: InteractiveLaunchIntent) => Promise<number>;
     readonly version: () => Promise<number>;
-    readonly update: (channel: UpdateChannel) => Promise<number>;
+    readonly update: (channel: UpdateChannel, target?: string) => Promise<number>;
     readonly packages: (request: PackageCommandRequest) => Promise<number>;
 }
 export interface CliOutput {
@@ -21,6 +21,7 @@ export type CliCommand = {
 } | {
     readonly kind: "update";
     readonly channel: UpdateChannel;
+    readonly target?: string;
 } | {
     readonly kind: "packages";
     readonly request: PackageCommandRequest;

package/dist/src/cli/dispatch.js

@@ -5,11 +5,13 @@ export function cliUsage(capabilities) {
         "",
         ...(capabilities.developmentProfiles ? ["pi", "sandbox"] : []),
         "version",
-        "update [self|<source>|--extensions|--models]",
+        "update [self|--models]",
         "update:next",
-        "install <source>",
-        "remove <source>",
-        "list",
+        "update:<commit>",
+        "pi install <source>",
+        "pi remove <source>",
+        "pi list",
+        "pi update [--extensions|<source>]",
     ]);
 }
 const PROFILE_WORDS = new Set(["pi", "sandbox"]);
@@ -25,26 +27,30 @@ export async function dispatchCli(arguments_, handlers, output, capabilities) {
         return await handlers.version();
     if (command.kind === "packages")
         return await handlers.packages(command.request);
-    return await handlers.update(command.channel);
+    return await handlers.update(command.channel, command.target);
 }
 export function parseCliCommand(arguments_, capabilities) {
     if (arguments_.length === 0)
         return { kind: "launch", profileId: "a1" };
     const [command, ...rest] = arguments_;
-    if (capabilities.developmentProfiles && (command === "pi" || command === "sandbox")) {
+    if (command === "pi") {
+        if (rest.length > 0)
+            return parsePiPackageCommand(rest);
+        if (capabilities.developmentProfiles)
+            return { kind: "launch", profileId: "pi" };
+    }
+    if (capabilities.developmentProfiles && command === "sandbox") {
         return withoutArguments(rest, { kind: "launch", profileId: command });
     }
     if (command === "version")
         return withoutArguments(rest, { kind: "version" });
-    if (command === "update:next")
-        return withoutArguments(rest, { kind: "update", channel: "next" });
+    if (command !== undefined && command.startsWith("update:"))
+        return parseColonUpdate(command.slice("update:".length), rest);
     if (command === "update")
         return parseUpdate(rest);
-    if (command === "install" || command === "remove" || command === "uninstall") {
-        return parseSourceCommand(command === "install" ? "install" : "remove", rest);
+    if (command === "install" || command === "remove" || command === "uninstall" || command === "list") {
+        return packageNamespaceRejection(command, rest.join(" ") || undefined);
     }
-    if (command === "list")
-        return withoutArguments(rest, { kind: "packages", request: { verb: "list", source: null } });
     if (command === "ui")
         return { kind: "error", message: `The ui subcommand was removed; run bare ${PRODUCT_TEXT.commandName} for the owned UI.` };
     if (command === "agent")
@@ -52,10 +58,27 @@ export function parseCliCommand(arguments_, capabilities) {
     return { kind: "error", message: PRODUCT_TEXT.diagnostic(`received an unknown command: ${command ?? ""}`) };
 }
 /**
- * `update` carries both meanings pinned Pi gives it: itself by default, and the
- * profile's packages when a target says so. Pi is refused as a target because A1
- * certifies each release against one pinned Pi, so moving Pi underneath it would
- * invalidate what was certified.
+ * What follows the colon says which build to move to. `next` is the newest
+ * preview; anything else names one outright, by the commit it was built from or by
+ * its full version — a preview is published as `<version>-dev.<commit>`, so the
+ * commit alone is enough to find it.
+ */
+function parseColonUpdate(suffix, rest) {
+    if (rest.length > 0)
+        return { kind: "error", message: PRODUCT_TEXT.diagnostic("update takes what to move to after the colon, and nothing else.") };
+    if (suffix === "next")
+        return { kind: "update", channel: "next" };
+    if (suffix.length === 0)
+        return { kind: "error", message: PRODUCT_TEXT.diagnostic(`update: needs a preview after the colon, as in ${PRODUCT_TEXT.commandName} update:next.`) };
+    if (!/^[0-9a-z][0-9a-z.+-]*$/i.test(suffix)) {
+        return { kind: "error", message: PRODUCT_TEXT.diagnostic(`received an unusable preview: ${suffix}`) };
+    }
+    return { kind: "update", channel: "next", target: suffix };
+}
+/**
+ * Top-level `update` owns A1 itself and A1's model catalogs. Extension package
+ * maintenance lives under the `pi` compatibility namespace, while updating the
+ * pinned Pi runtime remains impossible.
  */
 function parseUpdate(rest) {
     if (rest.length === 0)
@@ -71,18 +94,42 @@ function parseUpdate(rest) {
             message: PRODUCT_TEXT.diagnostic(`pins the Pi version it was certified against; run ${PRODUCT_TEXT.commandName} update to move ${PRODUCT_TEXT.displayName} itself.`),
         };
     }
-    // A release channel is spelled with the colon. Taking the bare word as a package
-    // source would turn a near miss into a confident search for a package nobody has.
     if (target === "next" || target === "stable") {
         const form = target === "next" ? `${PRODUCT_TEXT.commandName} update:next` : `${PRODUCT_TEXT.commandName} update`;
         return { kind: "error", message: PRODUCT_TEXT.diagnostic(`selects a release channel with a colon; run ${form}.`) };
     }
-    if (target === "--extensions")
-        return { kind: "packages", request: { verb: "update", source: null } };
     if (target === "--models")
         return { kind: "packages", request: { verb: "refresh-models", source: null } };
+    if (target === "--extensions" || (target !== undefined && !target.startsWith("-"))) {
+        return packageNamespaceRejection("update", target === "--extensions" ? "--extensions" : target);
+    }
+    return unknownOption(target ?? "", "update");
+}
+function parsePiPackageCommand(arguments_) {
+    const [verb, ...rest] = arguments_;
+    if (verb === "install" || verb === "remove" || verb === "uninstall") {
+        return parseSourceCommand(verb === "install" ? "install" : "remove", rest);
+    }
+    if (verb === "list")
+        return withoutArguments(rest, { kind: "packages", request: { verb: "list", source: null } });
+    if (verb === "update")
+        return parsePiPackageUpdate(rest);
+    return { kind: "error", message: PRODUCT_TEXT.diagnostic(`received an unknown pi package command: ${verb ?? ""}`) };
+}
+function parsePiPackageUpdate(rest) {
+    if (rest.length === 0) {
+        return { kind: "error", message: PRODUCT_TEXT.diagnostic(`pi update needs --extensions or a package source.`) };
+    }
+    if (rest.length > 1)
+        return { kind: "error", message: PRODUCT_TEXT.diagnostic("pi update accepts one target.") };
+    const [target] = rest;
+    if (target === "--extensions")
+        return { kind: "packages", request: { verb: "update", source: null } };
+    if (target === "--models") {
+        return { kind: "error", message: PRODUCT_TEXT.diagnostic(`refreshes its model catalogs at the top level; run ${PRODUCT_TEXT.commandName} update --models.`) };
+    }
     if (target === undefined || target.startsWith("-"))
-        return unknownOption(target ?? "", "update");
+        return unknownOption(target ?? "", "pi update");
     if (PROFILE_WORDS.has(target))
         return profileRejection("update");
     return { kind: "packages", request: { verb: "update", source: target } };
@@ -110,6 +157,13 @@ function withoutArguments(rest, command) {
         return profileRejection("list");
     return { kind: "error", message: PRODUCT_TEXT.diagnostic("commands do not accept additional arguments.") };
 }
+function packageNamespaceRejection(verb, target) {
+    const suffix = target === undefined ? "" : ` ${target}`;
+    return {
+        kind: "error",
+        message: PRODUCT_TEXT.diagnostic(`manages extension packages under its pi namespace; run ${PRODUCT_TEXT.commandName} pi ${verb}${suffix}.`),
+    };
+}
 function profileRejection(verb) {
     return {
         kind: "error",

package/dist/src/foundation/pi-component-adapter/index.d.ts

@@ -3,7 +3,7 @@ export * from "./conformance.js";
 export * from "./shell-components.js";
 export * from "./theme.js";
 export * from "./upstream/theme/theme-controller.js";
-export { applyConfiguredPiTheme, getAvailablePiThemes } from "./upstream/theme/theme.js";
+export { applyConfiguredPiTheme, getAvailablePiThemes, onPiThemeChange } from "./upstream/theme/theme.js";
 export * from "./upstream/components/countdown-timer.js";
 export * from "./upstream/components/extension-editor.js";
 export * from "./upstream/components/session-selector.js";

package/dist/src/foundation/pi-component-adapter/index.js

@@ -3,7 +3,7 @@ export * from "./conformance.js";
 export * from "./shell-components.js";
 export * from "./theme.js";
 export * from "./upstream/theme/theme-controller.js";
-export { applyConfiguredPiTheme, getAvailablePiThemes } from "./upstream/theme/theme.js";
+export { applyConfiguredPiTheme, getAvailablePiThemes, onPiThemeChange } from "./upstream/theme/theme.js";
 export * from "./upstream/components/countdown-timer.js";
 export * from "./upstream/components/extension-editor.js";
 export * from "./upstream/components/session-selector.js";

package/dist/src/foundation/pi-component-adapter/shell-presenters-transcript.js

@@ -1,6 +1,7 @@
 import { AssistantMessageComponent, BashExecutionComponent, CompactionSummaryMessageComponent, CustomMessageComponent, DynamicBorder, getMarkdownTheme, parseSkillBlock, ToolExecutionComponent, UserMessageComponent, } from "@earendil-works/pi-coding-agent";
 import { SkillInvocationMessageComponent, } from "./upstream/components/skill-invocation-message.js";
 import { Container, Markdown, Spacer, Text, } from "#pi-tui";
+import { PRODUCT_TEXT } from "../../product-identity.js";
 import { KeybindingsManager, } from "./upstream/adjacent/core/keybindings.js";
 import { PINNED_PI_LAYOUT, piTheme, } from "./theme.js";
 import { componentPort, createTuiFacade, ensureTheme, formatSessionTokens, isRecord, } from "./shell-shared-facade.js";
@@ -168,7 +169,7 @@ export function renderPiShellPackageUpdateNotice(packages, width) {
     container.addChild(new Spacer(1));
     container.addChild(new DynamicBorder(text => theme.fg("warning", text)));
     container.addChild(new Text(`${theme.bold(theme.fg("warning", "Package Updates Available"))}\n`
-        + `${theme.fg("muted", "Package updates are available. Run ")}${theme.fg("accent", "pi update --extensions")}\n`
+        + `${theme.fg("muted", "Package updates are available. Run ")}${theme.fg("accent", `${PRODUCT_TEXT.commandName} pi update --extensions`)}\n`
         + `${theme.fg("muted", "Packages:")}\n`
         + packages.map(name => `- ${name}`).join("\n"), 1, 0));
     container.addChild(new DynamicBorder(text => theme.fg("warning", text)));

package/dist/src/foundation/pi-engine-adapter/adapter.d.ts

@@ -60,11 +60,18 @@ export interface OwnedPiResourceSummary {
     readonly sourcePath: string | null;
     readonly diagnostic: string | null;
 }
+export interface OwnedPiExtensionSourceSummary {
+    readonly source: string;
+    readonly scope: "user" | "project" | "temporary";
+    readonly origin: "package" | "top-level";
+    readonly baseDir: string | null;
+}
 export interface OwnedPiExtensionResourceSummary {
     readonly kind: "extension";
     readonly id: string;
     readonly sourcePath: string | null;
     readonly resolvedPath: string | null;
+    readonly sourceInfo: OwnedPiExtensionSourceSummary | null;
     readonly loaded: boolean;
     readonly hidden: boolean;
     readonly diagnostic: string | null;