@timurproko/a1 0.1.8-dev.136 → 0.1.8-dev.139

package/README.md

@@ -31,17 +31,16 @@ a1 update:107           # install numbered preview 107
 a1 update --models      # refresh A1's model catalogs
 ```
 
-Development previews add two extra profiles; release builds do not carry them.
+Development previews add the Pi comparison profile; release builds do not carry it.
 
 ```sh
 a1 pi           # vanilla Pi oracle: ~/.pi/agent
-a1 sandbox      # isolated vanilla Pi profile: ~/.a1/sandbox
 ```
 
 ## Extensions
 
 Pi extension packages install into A1's own profile (`~/.a1/agent`), so bare `a1`
-loads them and `a1 pi` / `a1 sandbox` do not. Sources are Pi's: `npm:`, git, or a
+loads them and `a1 pi` does not. Sources are Pi's: `npm:`, git, or a
 local path.
 
 ```sh
@@ -63,7 +62,6 @@ npm ci                  # install exact locked dependencies
 npm run build           # compile TypeScript and the process guardian into dist
 npm start               # build and launch a development `a1`
 npm run start:pi        # build and launch a development `a1 pi`
-npm run start:sandbox   # build and launch a development `a1 sandbox`
 npm run test:fast       # typecheck + fast suite (alias: npm test)
 npm run test:full       # complete non-physical suite
 ```

package/dist/cli/capabilities.d.ts

@@ -1,15 +1,6 @@
-/**
- * `pi` and `sandbox` exist to compare A1 against pinned Pi and to try resources
- * against an isolated profile. Both are development instruments rather than
- * product, so a stable release does not carry them: what a released `a1` exposes
- * is the product plus its maintenance and package commands.
- *
- * Which build this is comes from its own version. A prerelease version is a
- * `next`-channel build, which is where that work happens; a release version is
- * not. Nothing to configure, and no way for a released build to be talked into it.
- */
+/** The Pi comparison launch is a prerelease development instrument, not product. */
 export interface CliCapabilities {
-    readonly developmentProfiles: boolean;
+    readonly developmentComparison: boolean;
 }
 export declare function cliCapabilities(version: string): CliCapabilities;
 export declare function isPrereleaseVersion(version: string): boolean;

package/dist/cli/capabilities.js

@@ -1,6 +1,6 @@
 import { prerelease } from "semver";
 export function cliCapabilities(version) {
-    return Object.freeze({ developmentProfiles: isPrereleaseVersion(version) });
+    return Object.freeze({ developmentComparison: isPrereleaseVersion(version) });
 }
 export function isPrereleaseVersion(version) {
     return (prerelease(version)?.length ?? 0) > 0;

package/dist/cli/dispatch.js

@@ -3,7 +3,7 @@ import { PRODUCT_TEXT } from "../product-identity.js";
 export function cliUsage(capabilities) {
     return PRODUCT_TEXT.usage([
         "",
-        ...(capabilities.developmentProfiles ? ["pi", "sandbox"] : []),
+        ...(capabilities.developmentComparison ? ["pi"] : []),
         "version",
         "update [self|--models]",
         "update:develop",
@@ -14,7 +14,7 @@ export function cliUsage(capabilities) {
         "pi update [--extensions|<source>]",
     ]);
 }
-const PROFILE_WORDS = new Set(["pi", "sandbox"]);
+const PROFILE_WORDS = new Set(["pi"]);
 export async function dispatchCli(arguments_, handlers, output, capabilities) {
     const command = parseCliCommand(arguments_, capabilities);
     if (command.kind === "error") {
@@ -36,12 +36,9 @@ export function parseCliCommand(arguments_, capabilities) {
     if (command === "pi") {
         if (rest.length > 0)
             return parsePiPackageCommand(rest);
-        if (capabilities.developmentProfiles)
+        if (capabilities.developmentComparison)
             return { kind: "launch", profileId: "pi" };
     }
-    if (capabilities.developmentProfiles && command === "sandbox") {
-        return withoutArguments(rest, { kind: "launch", profileId: command });
-    }
     if (command === "version")
         return withoutArguments(rest, { kind: "version" });
     if (command !== undefined && command.startsWith("update:"))

package/dist/composition/owned-ui.js

@@ -18,16 +18,24 @@ export async function composeOwnedUi(options = {}) {
         : new OwnedUiSettingsSession({
             store: new OwnedUiSettingsStore({ configDir: resolveProductPaths().configDir, profileId: options.profileId }),
             agentProvider: () => adapter.settingsPort(),
+            ...(options.ownedSurfaces === "off" ? {} : { hiddenAgentSettingIds: ["tuiMode"] }),
         });
     // Before anything is drawn, so every surface uses the configured theme rather
     // than the one guessed from the terminal's background.
     applyConfiguredPiTheme(adapter.configuredTheme());
-    const routeHost = settings === null || options.ownedSurfaces === "off" ? null : createOwnedRouteHost(settings);
+    const ownedSurfaces = options.ownedSurfaces !== "off";
+    const routeHost = settings === null || !ownedSurfaces ? null : createOwnedRouteHost(settings);
+    const viewportSettings = settings === null || !ownedSurfaces ? null : {
+        snapshot: () => viewportSettingsSnapshot(settings),
+        onChange: listener => settings.onChange(() => listener(viewportSettingsSnapshot(settings))),
+    };
     const shell = new OwnedUiSessionShell({
         backend: adapter,
         cwd,
         ...(options.terminal === undefined ? {} : { terminal: createPiTerminalBridge(options.terminal) }),
         ...(routeHost === null ? {} : { routeHost }),
+        ...(ownedSurfaces ? { sessionLayout: "custom-viewport" } : {}),
+        ...(viewportSettings === null ? {} : { viewportSettings }),
     });
     const application = {
         get disposed() { return adapter.disposed; },
@@ -38,3 +46,13 @@ export async function composeOwnedUi(options = {}) {
     };
     return { application, settings };
 }
+function viewportSettingsSnapshot(settings) {
+    const appearance = settings.value("scrollbarAppearance");
+    const style = settings.value("scrollbarStyle");
+    const speed = settings.value("scrollbarSpeed");
+    return {
+        scrollbarAppearance: appearance === "always" || appearance === "hidden" ? appearance : "hover",
+        scrollbarStyle: style === "thick" ? "thick" : "thin",
+        scrollbarSpeed: speed === "high" ? "high" : speed === "fast" ? "fast" : "normal",
+    };
+}

package/dist/contracts/owned-ui/model.d.ts

@@ -12,6 +12,17 @@ export interface OwnedUiModelInfo {
     readonly displayName: string;
 }
 export type OwnedUiThinkingLevel = "off" | "minimal" | "low" | "medium" | "high" | "xhigh";
+export interface OwnedUiViewportSettings {
+    readonly scrollbarAppearance: "always" | "hover" | "hidden";
+    readonly scrollbarStyle: "thin" | "thick";
+    /** normal is baseline; fast is 2x normal; high is normal plus fast. */
+    readonly scrollbarSpeed: "normal" | "fast" | "high";
+}
+/** Narrow live settings boundary consumed by the bare-A1 shell composition. */
+export interface OwnedUiViewportSettingsPort {
+    snapshot(): OwnedUiViewportSettings;
+    onChange(listener: (settings: OwnedUiViewportSettings) => void): () => void;
+}
 export interface OwnedUiTerminalSurface {
     readonly columns: number;
     readonly rows: number;
@@ -189,6 +200,16 @@ export type OwnedUiEvent = {
     readonly sessionId: OwnedUiSessionId;
     readonly sequence: number;
     readonly block: OwnedUiTranscriptBlock;
+} | {
+    /** One completed assistant reply; never a tool row or transcript rebuild. */
+    readonly type: "assistant-message-completed";
+    readonly sessionId: OwnedUiSessionId;
+    readonly sequence: number;
+} | {
+    /** A fresh agent run has started, used by follow-mode surfaces. */
+    readonly type: "agent-run-started";
+    readonly sessionId: OwnedUiSessionId;
+    readonly sequence: number;
 } | {
     readonly type: "editor-state";
     readonly sessionId: OwnedUiSessionId;

package/dist/contracts/owned-ui/validation.js

@@ -103,6 +103,9 @@ export function assertOwnedUiEvent(event) {
         case "transcript-block":
             assertOwnedUiTranscriptBlock(event.block);
             return;
+        case "assistant-message-completed":
+        case "agent-run-started":
+            return;
         case "editor-state":
             assertOwnedUiEditorState(event.editor);
             return;

package/dist/features/launch/development-launch.js

@@ -8,8 +8,16 @@ export function resolveDevelopmentLaunchEnvironment(canonicalPackageRoot, releas
     const instanceId = selectedInstanceId
         ? createHash("sha256").update(selectedInstanceId).digest("hex").slice(0, 16)
         : randomUUID().replaceAll("-", "").slice(0, 16);
-    const developmentRoot = resolve(source[PRODUCT_IDENTITY.environment.developmentRoot]
-        ?? join(temporaryDirectory, PRODUCT_IDENTITY.state.developmentDirectory, checkoutId, releaseId, "instances", instanceId));
+    const checkoutRoot = resolve(temporaryDirectory, PRODUCT_IDENTITY.state.developmentDirectory, checkoutId);
+    const selectedDevelopmentRoot = source[PRODUCT_IDENTITY.environment.developmentRoot];
+    const developmentRoot = resolve(selectedDevelopmentRoot
+        ?? join(checkoutRoot, releaseId, "instances", instanceId));
+    // Runtime/data remain instance-isolated, but product settings are user
+    // preferences and must survive a fresh local launch (and a rebuilt candidate).
+    // An explicit development root retains its historical self-contained policy.
+    const persistentConfigDir = selectedDevelopmentRoot
+        ? join(developmentRoot, "config")
+        : join(checkoutRoot, "config");
     const dataDir = resolve(source[PRODUCT_IDENTITY.environment.dataDir] ?? join(developmentRoot, "data"));
     return {
         checkoutId,
@@ -19,7 +27,7 @@ export function resolveDevelopmentLaunchEnvironment(canonicalPackageRoot, releas
         environment: {
             ...source,
             [PRODUCT_IDENTITY.environment.developmentInstanceId]: instanceId,
-            [PRODUCT_IDENTITY.environment.configDir]: resolve(source[PRODUCT_IDENTITY.environment.configDir] ?? join(developmentRoot, "config")),
+            [PRODUCT_IDENTITY.environment.configDir]: resolve(source[PRODUCT_IDENTITY.environment.configDir] ?? persistentConfigDir),
             [PRODUCT_IDENTITY.environment.dataDir]: dataDir,
             [PRODUCT_IDENTITY.environment.runtimeDir]: resolve(source[PRODUCT_IDENTITY.environment.runtimeDir] ?? join(developmentRoot, "runtime")),
             [PRODUCT_IDENTITY.environment.databasePath]: resolve(source[PRODUCT_IDENTITY.environment.databasePath] ?? join(dataDir, PRODUCT_IDENTITY.endpoint.databaseFilename)),

package/dist/features/launch/index.d.ts

@@ -3,5 +3,4 @@ export * from "./initialize-profile.js";
 export * from "./intent.js";
 export * from "./profile-paths.js";
 export * from "./prepare-launch.js";
-export * from "./profiles.js";
 export * from "./runtime-selection.js";

package/dist/features/launch/index.js

@@ -3,5 +3,4 @@ export * from "./initialize-profile.js";
 export * from "./intent.js";
 export * from "./profile-paths.js";
 export * from "./prepare-launch.js";
-export * from "./profiles.js";
 export * from "./runtime-selection.js";

package/dist/features/launch/intent.d.ts

@@ -1,7 +1,8 @@
-import { type LaunchProfileContract, type LaunchProfileId } from "./profiles.js";
+import type { LaunchProfileId } from "../../foundation/lifecycle/index.js";
+export type { LaunchProfileId } from "../../foundation/lifecycle/index.js";
 export interface InteractiveLaunchIntent {
     readonly kind: "interactive";
-    readonly profile: LaunchProfileContract;
+    readonly profileId: LaunchProfileId;
 }
 export type LaunchIntent = InteractiveLaunchIntent;
 export declare function interactiveLaunchIntent(profileId: LaunchProfileId): InteractiveLaunchIntent;

package/dist/features/launch/intent.js

@@ -1,4 +1,3 @@
-import { launchProfileContract } from "./profiles.js";
 export function interactiveLaunchIntent(profileId) {
-    return Object.freeze({ kind: "interactive", profile: launchProfileContract(profileId) });
+    return Object.freeze({ kind: "interactive", profileId });
 }

package/dist/features/launch/prepare-launch.d.ts

@@ -2,9 +2,7 @@ import { type LaunchProfilePathOptions } from "./profile-paths.js";
 import { initializeProductProfile } from "./initialize-profile.js";
 import type { InteractiveLaunchIntent } from "./intent.js";
 export interface PreparedInteractiveLaunch {
-    readonly intent: InteractiveLaunchIntent;
     readonly environment: NodeJS.ProcessEnv;
-    readonly piArguments: readonly string[];
     readonly configurationRoot: string | null;
 }
 export interface PrepareInteractiveLaunchOptions extends LaunchProfilePathOptions {

package/dist/features/launch/prepare-launch.js

@@ -2,7 +2,7 @@ import { configurationRootForProfile, resolveLaunchProfilePaths } from "./profil
 import { initializeProductProfile } from "./initialize-profile.js";
 export async function prepareInteractiveLaunch(intent, environment = process.env, options = {}) {
     const paths = resolveLaunchProfilePaths({ ...options, environment });
-    const configurationRoot = configurationRootForProfile(intent.profile.id, paths);
+    const configurationRoot = configurationRootForProfile(intent.profileId, paths);
     if (configurationRoot !== null)
         await (options.initializeProfile ?? initializeProductProfile)(configurationRoot);
     const childEnvironment = { ...environment };
@@ -10,12 +10,5 @@ export async function prepareInteractiveLaunch(intent, environment = process.env
         delete childEnvironment.PI_CODING_AGENT_DIR;
     else
         childEnvironment.PI_CODING_AGENT_DIR = configurationRoot;
-    const piArguments = intent.profile.projectTrust === "ignore" ? ["--no-approve"] : [];
-    childEnvironment.A1_LAUNCH_ARGUMENTS_JSON = JSON.stringify(piArguments);
-    return Object.freeze({
-        intent,
-        environment: childEnvironment,
-        piArguments: Object.freeze(piArguments),
-        configurationRoot,
-    });
+    return Object.freeze({ environment: childEnvironment, configurationRoot });
 }

package/dist/features/launch/profile-paths.d.ts

@@ -1,9 +1,8 @@
-import type { LaunchProfileId } from "./profiles.js";
+import type { LaunchProfileId } from "./intent.js";
 export interface LaunchProfilePaths {
     readonly home: string;
     readonly managedStateRoot: string;
     readonly agentProfile: string;
-    readonly sandbox: string;
 }
 export interface LaunchProfilePathOptions {
     readonly environment?: NodeJS.ProcessEnv;

package/dist/features/launch/profile-paths.js

@@ -7,20 +7,14 @@ export function resolveLaunchProfilePaths(options = {}) {
     const selectedHome = options.home ?? environment[PRODUCT_IDENTITY.environment.profileHome] ?? options.readHome?.() ?? homedir();
     const home = validateAbsolutePath(selectedHome, "effective user home", path);
     const agentProfile = path.resolve(home, PRODUCT_IDENTITY.state.piAgentProfile);
-    const managedStateRoot = path.dirname(agentProfile);
     return Object.freeze({
         home,
-        managedStateRoot,
+        managedStateRoot: path.dirname(agentProfile),
         agentProfile,
-        sandbox: path.resolve(home, PRODUCT_IDENTITY.state.piSandboxProfile),
     });
 }
 export function configurationRootForProfile(profileId, paths) {
-    if (profileId === "a1")
-        return paths.agentProfile;
-    if (profileId === "sandbox")
-        return paths.sandbox;
-    return null;
+    return profileId === "a1" ? paths.agentProfile : null;
 }
 function validateAbsolutePath(value, name, path) {
     if (value.length === 0 || value.includes("\0"))

package/dist/features/launch/runtime-selection.d.ts

@@ -1,10 +1,7 @@
 import { type LaunchProfileId } from "../../foundation/lifecycle/index.js";
 /**
- * Every interactive command is the same composition. What differs is the
- * configuration root each one reads and whether A1's own screens are reachable:
- * bare `a1` is the product, while `a1 pi` and `a1 sandbox` present pinned Pi's
- * interface and nothing of A1's own, against Pi's own profile and against an
- * isolated one.
+ * Both interactive commands use the owned composition. Bare A1 enables product
+ * surfaces; the Pi comparison command withholds them and reads Pi's own profile.
  */
 export type OwnedUiProfileId = LaunchProfileId;
 export interface InteractiveRuntimeSelection {

package/dist/features/owned-ui/settings-app.js

@@ -56,6 +56,8 @@ export class SettingsApp {
     #session;
     #selectedKey;
     #scroll = 0;
+    /** Keyboard navigation requests visibility once; pointer scrolling then stays free. */
+    #selectionNeedsReveal = true;
     #reveal;
     #notice = null;
     #filter = null;
@@ -96,9 +98,13 @@ export class SettingsApp {
         this.#panelTop = this.#panelTopForFrame;
         const bodyHeight = Math.max(0, rect.height - footer.length);
         const selected = indexOfKey(rows, this.#selectedKey);
-        this.#scroll = scrollForSelection(rows, bodyHeight, this.#scroll, selected, this.#reveal);
+        if (this.#selectionNeedsReveal) {
+            this.#scroll = scrollForSelection(rows, bodyHeight, this.#scroll, selected, this.#reveal);
+            this.#selectionNeedsReveal = false;
+        }
         this.#reveal = undefined;
         const layout = layoutList(rows, bodyHeight, this.#scroll);
+        this.#scroll = layout.scroll;
         const contentWidth = Math.max(0, rect.width - RAIL_COLUMNS);
         const valueColumn = this.#valueColumn(rows);
         const geometry = scrollbarGeometry({
@@ -121,14 +127,13 @@ export class SettingsApp {
             for (const index of layout.rowIndexes) {
                 const row = rows[index];
                 if (row !== undefined && row.kind === "element") {
+                    const view = this.#viewRow(row.value);
                     this.#frameRows.push({
-                        key: `${row.value.backend}:${row.value.id}`,
+                        key: view.key,
                         screenRow: body.length,
                         valueColumn,
-                        valueWidth: row.value.structured
-                            ? CONFIGURE.length
-                            : row.value.value === null ? 0 : displayWidth(displayValue(row.value.value)),
-                        stepper: isStepper(row.value),
+                        valueWidth: displayWidth(view.value),
+                        stepper: view.stepper !== undefined,
                     });
                 }
                 body.push(this.#renderRow(row, index === selected, contentWidth, valueColumn, theme));
@@ -189,8 +194,11 @@ export class SettingsApp {
                 // End lands on the very last setting, not on the head of its section.
                 const selectable = selectableIndexes(rows);
                 const target = action === "last" ? selectable.at(-1) : selectable[0];
-                if (target !== undefined)
-                    this.#jump(rows, target);
+                if (target !== undefined) {
+                    this.#select(rows, target);
+                    if (action === "first")
+                        this.#scroll = 0;
+                }
                 return { consumed: true };
             }
             case "previous-value":
@@ -263,6 +271,14 @@ export class SettingsApp {
             }
             return { consumed: true, render: false };
         }
+        if (event.kind === "wheel-up" || event.kind === "wheel-down") {
+            // The whole list pane owns wheel scrolling, including blank space beside
+            // short labels. It must not depend on finding an item under the pointer.
+            if (event.row < 1 || event.row > this.#panelTopForFrame)
+                return { consumed: false };
+            this.#scroll = Math.max(0, this.#scroll + (event.kind === "wheel-down" ? 3 : -3));
+            return { consumed: true };
+        }
         const row = this.#frameRows.find(candidate => candidate.screenRow === event.row - 1);
         const previousKey = this.#hoverKey;
         const previousRegion = this.#hoverRegion;
@@ -288,10 +304,6 @@ export class SettingsApp {
             }
             return { consumed: true };
         }
-        if (event.kind === "wheel-up" || event.kind === "wheel-down") {
-            this.#scroll = Math.max(0, this.#scroll + (event.kind === "wheel-down" ? 3 : -3));
-            return { consumed: true };
-        }
         const changed = previousKey !== this.#hoverKey || previousRegion !== this.#hoverRegion;
         return { consumed: event.kind !== "motion", render: changed };
     }
@@ -403,6 +415,17 @@ export class SettingsApp {
         if (input === null)
             return { consumed: false };
         const key = KEYS[data];
+        if (key === "home" || key === "end") {
+            const rows = this.#rows();
+            const selectable = selectableIndexes(rows);
+            const target = key === "end" ? selectable.at(-1) : selectable[0];
+            if (target !== undefined) {
+                this.#select(rows, target);
+                if (key === "home")
+                    this.#scroll = 0;
+            }
+            return { consumed: true };
+        }
         if (key === "up" || key === "down" || key === "shift+up" || key === "shift+down") {
             const rows = this.#rows();
             // Nothing found means nothing to move through; the key is still swallowed
@@ -485,6 +508,7 @@ export class SettingsApp {
         if (index < 0)
             return;
         this.#selectedKey = rowKey(rows[index]);
+        this.#selectionNeedsReveal = true;
         this.#notice = null;
     }
     #rows() {
@@ -554,7 +578,6 @@ export class SettingsApp {
             key: `${entry.backend}:${entry.id}`,
             label: labelOf(entry),
             value,
-            ...(entry.origin === "default" ? { suffix: "(default)" } : {}),
             ...(typeof shown === "number" && entry.editable ? { stepper: stepperEnds(range, shown) } : {}),
         };
     }

package/dist/foundation/lifecycle/model.d.ts

@@ -1,4 +1,4 @@
-export type LaunchProfileId = "a1" | "pi" | "sandbox";
+export type LaunchProfileId = "a1" | "pi";
 export type GenerationId = string;
 export type DriverProfileId = string;
 export type RequestId = string;

package/dist/foundation/lifecycle/model.js

@@ -1,6 +1,6 @@
 import { PRODUCT_TEXT } from "../../product-identity.js";
 export function assertLaunchProfileId(value) {
-    if (value !== "a1" && value !== "pi" && value !== "sandbox")
+    if (value !== "a1" && value !== "pi")
         throw new TypeError(PRODUCT_TEXT.diagnostic(`launch profile is invalid: ${String(value)}`));
 }
 export function assertDimensions(dimensions) {

package/dist/foundation/release/bootstrap.d.ts

@@ -7,9 +7,7 @@ export interface BootstrapOptions {
     readonly packageRoot: string;
     readonly launchIntent?: {
         readonly kind: "interactive";
-        readonly profile: {
-            readonly id: LaunchProfileId;
-        };
+        readonly profileId: LaunchProfileId;
     };
     readonly environment?: NodeJS.ProcessEnv;
     readonly output?: Pick<NodeJS.WriteStream, "write">;

package/dist/foundation/release/bootstrap.js

@@ -13,7 +13,7 @@ import { consumeMaterializationProof, materializeRelease, readCertifiedReleaseMa
 import { PRODUCT_IDENTITY, PRODUCT_TEXT } from "../../product-identity.js";
 export async function runBootstrap(options) {
     const environment = { ...(options.environment ?? process.env) };
-    const launchProfileId = options.launchIntent?.profile.id ?? "a1";
+    const launchProfileId = options.launchIntent?.profileId ?? "a1";
     assertLaunchProfileId(launchProfileId);
     environment[PRODUCT_IDENTITY.environment.launchProfile] = launchProfileId;
     const output = options.output ?? process.stderr;
@@ -47,9 +47,6 @@ export async function runBootstrap(options) {
     const activeId = state.references.active;
     const active = activeId === null ? undefined : state.releases[activeId];
     const activeIsLaunchable = active === undefined || (options.releaseIsLaunchable?.(active.releaseRoot) ?? true);
-    if (active !== undefined && !activeIsLaunchable) {
-        output.write(`${PRODUCT_TEXT.diagnostic(`retired release ${active.releaseId} because its copy is not launchable; rebuilding from the installed package.`)}\n`);
-    }
     if (activeIsLaunchable && active?.approval === "approved" && active.packageVersion === installedVersion) {
         const endpointMatches = endpoint?.releaseId === active.releaseId
             && endpoint.releaseRoot === active.releaseRoot
@@ -77,6 +74,17 @@ export async function runBootstrap(options) {
         await stateStore.activate(candidate.releaseId);
         state = await stateStore.read();
     }
+    else if (!activeIsLaunchable && candidate.releaseId !== activeId
+        && state.releases[candidate.releaseId]?.approval !== "approved") {
+        // The active reference points at a copy that cannot launch, so reusing it
+        // is off the table — but an unapproved candidate would lose the selection
+        // below to that same broken active (`start-active`). Approving the healed
+        // candidate here lets ordinary cohort selection activate it, while a live
+        // busy cohort still wins the endpoint checks and keeps its sessions.
+        const diagnosticsPath = await certifyMaterializedRelease(candidate, paths.dataDir);
+        await stateStore.approve(candidate.releaseId, diagnosticsPath);
+        state = await stateStore.read();
+    }
     // The candidate's own endpoint decides whether this launch attaches or starts a supervisor.
     // A cohort other than this one is not in the way: it listens somewhere else.
     endpointPaths = resolveCohortEndpoint(paths, candidate.releaseId, environment);

package/dist/foundation/storage/control-store.js

@@ -30,8 +30,8 @@ export class ControlStore {
     migrate() {
         const versionRow = this.database.prepare("PRAGMA user_version").get();
         const version = versionRow.user_version;
-        if (version > 5)
-            throw new Error(`control database version ${version} is newer than supported version 5`);
+        if (version > 6)
+            throw new Error(`control database version ${version} is newer than supported version 6`);
         if (version !== 0)
             this.#assertCurrentControlSchema();
         if (version === 0) {
@@ -187,7 +187,7 @@ export class ControlStore {
         CREATE TABLE launch_instances (
           id TEXT PRIMARY KEY,
           owner_client_id TEXT NOT NULL,
-          profile_id TEXT NOT NULL CHECK (profile_id IN ('a1', 'pi', 'sandbox')),
+          profile_id TEXT NOT NULL CHECK (profile_id IN ('a1', 'pi')),
           state TEXT NOT NULL CHECK (state IN ('requested', 'active', 'stopping', 'completed', 'interrupted')),
           shutdown_policy TEXT NOT NULL CHECK (shutdown_policy = 'terminate-tree-on-close'),
           guardian_identity_json TEXT NOT NULL CHECK (json_valid(guardian_identity_json)),
@@ -208,6 +208,40 @@ export class ControlStore {
         CREATE INDEX idx_launch_instances_boot ON launch_instances(owner_boot_nonce, state);
         PRAGMA user_version = 5;
         COMMIT;
+      `);
+        }
+        if (version <= 5) {
+            this.database.exec(`
+        BEGIN IMMEDIATE;
+        ALTER TABLE launch_instances RENAME TO launch_instances_v5;
+        DROP INDEX idx_launch_instances_owner;
+        DROP INDEX idx_launch_instances_boot;
+        CREATE TABLE launch_instances (
+          id TEXT PRIMARY KEY,
+          owner_client_id TEXT NOT NULL,
+          profile_id TEXT NOT NULL CHECK (profile_id IN ('a1', 'pi')),
+          state TEXT NOT NULL CHECK (state IN ('requested', 'active', 'stopping', 'completed', 'interrupted')),
+          shutdown_policy TEXT NOT NULL CHECK (shutdown_policy = 'terminate-tree-on-close'),
+          guardian_identity_json TEXT NOT NULL CHECK (json_valid(guardian_identity_json)),
+          root_identity_json TEXT CHECK (root_identity_json IS NULL OR json_valid(root_identity_json)),
+          containment_identity_json TEXT CHECK (containment_identity_json IS NULL OR json_valid(containment_identity_json)),
+          created_at TEXT NOT NULL,
+          activated_at TEXT,
+          stopping_at TEXT,
+          completed_at TEXT,
+          outcome_json TEXT CHECK (outcome_json IS NULL OR json_valid(outcome_json)),
+          owner_boot_nonce TEXT NOT NULL,
+          CHECK ((state = 'requested' AND root_identity_json IS NULL AND containment_identity_json IS NULL AND activated_at IS NULL AND stopping_at IS NULL AND completed_at IS NULL AND outcome_json IS NULL)
+            OR (state = 'active' AND root_identity_json IS NOT NULL AND containment_identity_json IS NOT NULL AND activated_at IS NOT NULL AND stopping_at IS NULL AND completed_at IS NULL AND outcome_json IS NULL)
+            OR (state = 'stopping' AND root_identity_json IS NOT NULL AND containment_identity_json IS NOT NULL AND activated_at IS NOT NULL AND stopping_at IS NOT NULL AND completed_at IS NULL AND outcome_json IS NULL)
+            OR (state IN ('completed', 'interrupted') AND completed_at IS NOT NULL AND outcome_json IS NOT NULL))
+        );
+        INSERT INTO launch_instances SELECT * FROM launch_instances_v5 WHERE profile_id IN ('a1', 'pi');
+        DROP TABLE launch_instances_v5;
+        CREATE INDEX idx_launch_instances_owner ON launch_instances(owner_client_id, state);
+        CREATE INDEX idx_launch_instances_boot ON launch_instances(owner_boot_nonce, state);
+        PRAGMA user_version = 6;
+        COMMIT;
       `);
         }
         if (version === 0) {

package/dist/integrations/pi/components/shell-footer-status.d.ts

@@ -4,4 +4,4 @@ export declare function createPiShellHeader(options?: PiShellHeaderOptions): PiS
 export declare function createPiShellLoadedResources(resources: readonly PiShellResourceEntry[], initialExpanded?: boolean): PiShellLoadedResourcesPort;
 export declare function createPiShellStatus(view: OwnedUiSessionViewModel, runtime?: Pick<PiShellEditorOptions, "getColumns" | "getRows" | "requestRender">): PiShellStatusPort;
 export declare function createPiShellFooter(view: OwnedUiSessionViewModel, cwd: string): PiShellViewComponentPort;
-export declare function createPiQueuedInputStatus(submissions: readonly string[]): PiShellQueuedInputPort;
+export declare function createPiQueuedInputStatus(submissions: readonly string[], presentation?: "pinned" | "custom-viewport"): PiShellQueuedInputPort;

package/dist/integrations/pi/components/shell-footer-status.js

@@ -110,14 +110,14 @@ export function createPiShellFooter(view, cwd) {
         dispose: () => footer.dispose(),
     };
 }
-export function createPiQueuedInputStatus(submissions) {
-    const text = new Text(queuedInputText(submissions), 1, 0);
+export function createPiQueuedInputStatus(submissions, presentation = "pinned") {
+    const text = new Text(queuedInputText(submissions, presentation), 1, 0);
     return {
         render: width => submissions.length === 0 ? [] : text.render(width),
         invalidate: () => text.invalidate(),
         update(next) {
             submissions = next;
-            text.setText(queuedInputText(next));
+            text.setText(queuedInputText(next, presentation));
         },
     };
 }
@@ -135,9 +135,18 @@ function statusComponent(view, ui, workingOverride) {
 function statusSignature(view, workingOverride) {
     return `${view.lifecycle}\u0000${workingOverride ?? ""}\u0000${view.status.workingMessage ?? ""}\u0000${view.status.diagnostics.at(-1) ?? ""}`;
 }
-function queuedInputText(submissions) {
+function queuedInputText(submissions, presentation) {
+    if (submissions.length === 0)
+        return "";
     const theme = piTheme();
-    return submissions.map(submission => theme.fg("muted", `Steering: ${submission.replaceAll("\n", " ⏎ ")}`)).join("\n");
+    if (presentation === "pinned") {
+        return submissions.map(submission => theme.fg("muted", `Steering: ${submission.replaceAll("\n", " ⏎ ")}`)).join("\n");
+    }
+    const messages = submissions.map(submission => theme.fg("dim", `Steering: ${submission.replaceAll("\n", " ⏎ ")}`));
+    const dequeueHint = theme.fg("dim", "↳ Alt+Up to edit all queued messages");
+    // The custom viewport matches Pi's interactive queue presentation while the
+    // comparison shell remains byte-for-byte compatible with its pinned fixture.
+    return ["", ...messages, dequeueHint].join("\n");
 }
 function compactHeaderText() {
     const theme = piTheme();

package/dist/integrations/pi/components/shell-presenters-transcript.d.ts

@@ -1,5 +1,7 @@
 import { AssistantMessageComponent } from "@earendil-works/pi-coding-agent";
 import type { OwnedUiTranscriptBlock } from "../../../contracts/owned-ui/index.js";
+import { type PiShellSubmittedPromptComposer } from "./submitted-prompt-adapter.js";
+export type { PiShellSubmittedPromptComposer } from "./submitted-prompt-adapter.js";
 import { type PiShellComponentPort, type PiShellExtensionRendererResolver, type PiShellTranscriptComponentPort } from "./shell-shared-facade.js";
 export interface PiShellSessionInfoPresentation {
     readonly sessionName?: string;
@@ -35,7 +37,7 @@ export declare function renderPiShellStatusText(message: string, width: number):
 export declare function createPiShellSessionInfo(presentation: PiShellSessionInfoPresentation): PiShellComponentPort;
 export declare function createPiShellChangelog(markdown: string): PiShellComponentPort;
 export declare function createPiShellHotkeys(): PiShellComponentPort;
-export declare function createPiShellTranscriptComponent(initial: OwnedUiTranscriptBlock, cwd: string, extensions?: PiShellExtensionRendererResolver): PiShellTranscriptComponentPort;
+export declare function createPiShellTranscriptComponent(initial: OwnedUiTranscriptBlock, cwd: string, extensions?: PiShellExtensionRendererResolver, submittedPrompt?: PiShellSubmittedPromptComposer): PiShellTranscriptComponentPort;
 export declare function renderPiShellTranscriptBlock(block: OwnedUiTranscriptBlock, width: number, cwd: string): readonly string[];
 /**
  * Pinned Pi's CLI prints startup diagnostics with `reportDiagnostics` before
@@ -54,4 +56,3 @@ export declare function renderPiShellStartupDiagnostic(diagnostic: {
 export declare function renderPiShellPackageUpdateNotice(packages: readonly string[], width: number): readonly string[];
 type PiAssistantMessage = NonNullable<ConstructorParameters<typeof AssistantMessageComponent>[0]>;
 export declare function validatedAssistantMessage(block: OwnedUiTranscriptBlock): PiAssistantMessage;
-export {};