@timurproko/a1 0.1.8-dev.137 → 0.1.8-dev.151

package/README.md

@@ -31,17 +31,16 @@ a1 update:107           # install numbered preview 107
 a1 update --models      # refresh A1's model catalogs
 ```
 
-Development previews add two extra profiles; release builds do not carry them.
+Development previews add the Pi comparison profile; release builds do not carry it.
 
 ```sh
 a1 pi           # vanilla Pi oracle: ~/.pi/agent
-a1 sandbox      # isolated vanilla Pi profile: ~/.a1/sandbox
 ```
 
 ## Extensions
 
 Pi extension packages install into A1's own profile (`~/.a1/agent`), so bare `a1`
-loads them and `a1 pi` / `a1 sandbox` do not. Sources are Pi's: `npm:`, git, or a
+loads them and `a1 pi` does not. Sources are Pi's: `npm:`, git, or a
 local path.
 
 ```sh
@@ -63,7 +62,6 @@ npm ci                  # install exact locked dependencies
 npm run build           # compile TypeScript and the process guardian into dist
 npm start               # build and launch a development `a1`
 npm run start:pi        # build and launch a development `a1 pi`
-npm run start:sandbox   # build and launch a development `a1 sandbox`
 npm run test:fast       # typecheck + fast suite (alias: npm test)
 npm run test:full       # complete non-physical suite
 ```

package/dist/cli/capabilities.d.ts

@@ -1,15 +1,6 @@
-/**
- * `pi` and `sandbox` exist to compare A1 against pinned Pi and to try resources
- * against an isolated profile. Both are development instruments rather than
- * product, so a stable release does not carry them: what a released `a1` exposes
- * is the product plus its maintenance and package commands.
- *
- * Which build this is comes from its own version. A prerelease version is a
- * `next`-channel build, which is where that work happens; a release version is
- * not. Nothing to configure, and no way for a released build to be talked into it.
- */
+/** The Pi comparison launch is a prerelease development instrument, not product. */
 export interface CliCapabilities {
-    readonly developmentProfiles: boolean;
+    readonly developmentComparison: boolean;
 }
 export declare function cliCapabilities(version: string): CliCapabilities;
 export declare function isPrereleaseVersion(version: string): boolean;

package/dist/cli/capabilities.js

@@ -1,6 +1,6 @@
 import { prerelease } from "semver";
 export function cliCapabilities(version) {
-    return Object.freeze({ developmentProfiles: isPrereleaseVersion(version) });
+    return Object.freeze({ developmentComparison: isPrereleaseVersion(version) });
 }
 export function isPrereleaseVersion(version) {
     return (prerelease(version)?.length ?? 0) > 0;

package/dist/cli/dispatch.js

@@ -3,7 +3,7 @@ import { PRODUCT_TEXT } from "../product-identity.js";
 export function cliUsage(capabilities) {
     return PRODUCT_TEXT.usage([
         "",
-        ...(capabilities.developmentProfiles ? ["pi", "sandbox"] : []),
+        ...(capabilities.developmentComparison ? ["pi"] : []),
         "version",
         "update [self|--models]",
         "update:develop",
@@ -14,7 +14,7 @@ export function cliUsage(capabilities) {
         "pi update [--extensions|<source>]",
     ]);
 }
-const PROFILE_WORDS = new Set(["pi", "sandbox"]);
+const PROFILE_WORDS = new Set(["pi"]);
 export async function dispatchCli(arguments_, handlers, output, capabilities) {
     const command = parseCliCommand(arguments_, capabilities);
     if (command.kind === "error") {
@@ -36,12 +36,9 @@ export function parseCliCommand(arguments_, capabilities) {
     if (command === "pi") {
         if (rest.length > 0)
             return parsePiPackageCommand(rest);
-        if (capabilities.developmentProfiles)
+        if (capabilities.developmentComparison)
             return { kind: "launch", profileId: "pi" };
     }
-    if (capabilities.developmentProfiles && command === "sandbox") {
-        return withoutArguments(rest, { kind: "launch", profileId: command });
-    }
     if (command === "version")
         return withoutArguments(rest, { kind: "version" });
     if (command !== undefined && command.startsWith("update:"))

package/dist/composition/owned-ui.js

@@ -1,7 +1,7 @@
 import { resolveProductPaths } from "../foundation/lifecycle/index.js";
 import { applyConfiguredPiTheme, getAvailablePiThemes } from "../integrations/pi/components/index.js";
 import { createPiEngineAdapter } from "../integrations/pi/engine/index.js";
-import { OwnedUiSessionShell } from "../integrations/pi/owned-ui/index.js";
+import { OwnedUiSessionShell } from "../integrations/pi/session-ui/index.js";
 import { OwnedUiSettingsSession, OwnedUiSettingsStore } from "../ui/settings/index.js";
 import { createPiTerminalBridge } from "../integrations/pi/tui-runtime/index.js";
 import { createOwnedRouteHost } from "./settings-route-host.js";
@@ -13,21 +13,32 @@ export async function composeOwnedUi(options = {}) {
     const adapter = options.createPiAdapter
         ? await options.createPiAdapter()
         : await createPiEngineAdapter({ cwd, availableThemes: () => getAvailablePiThemes().map(theme => theme.name) });
+    const ownedSurfaces = options.ownedSurfaces !== "off";
     const settings = options.profileId === undefined
         ? null
         : new OwnedUiSettingsSession({
             store: new OwnedUiSettingsStore({ configDir: resolveProductPaths().configDir, profileId: options.profileId }),
             agentProvider: () => adapter.settingsPort(),
+            ...(ownedSurfaces ? {
+                hiddenAgentSettingIds: ["tuiMode", "theme", "fullscreenScrollbar", "quietStartup"],
+            } : {}),
         });
-    // Before anything is drawn, so every surface uses the configured theme rather
-    // than the one guessed from the terminal's background.
-    applyConfiguredPiTheme(adapter.configuredTheme());
-    const routeHost = settings === null || options.ownedSurfaces === "off" ? null : createOwnedRouteHost(settings);
+    // Bare A1 intentionally ships one visual target while its UI is being completed:
+    // dark, regardless of terminal detection or a previously stored Pi theme. The
+    // comparison profile keeps Pi's configured theme behavior and settings surface.
+    applyConfiguredPiTheme(ownedSurfaces ? "dark" : adapter.configuredTheme());
+    const routeHost = settings === null || !ownedSurfaces ? null : createOwnedRouteHost(settings);
+    const viewportSettings = settings === null || !ownedSurfaces ? null : {
+        snapshot: () => viewportSettingsSnapshot(settings),
+        onChange: listener => settings.onChange(() => listener(viewportSettingsSnapshot(settings))),
+    };
     const shell = new OwnedUiSessionShell({
         backend: adapter,
         cwd,
         ...(options.terminal === undefined ? {} : { terminal: createPiTerminalBridge(options.terminal) }),
         ...(routeHost === null ? {} : { routeHost }),
+        ...(ownedSurfaces ? { sessionLayout: "custom-viewport" } : {}),
+        ...(viewportSettings === null ? {} : { viewportSettings }),
     });
     const application = {
         get disposed() { return adapter.disposed; },
@@ -38,3 +49,13 @@ export async function composeOwnedUi(options = {}) {
     };
     return { application, settings };
 }
+function viewportSettingsSnapshot(settings) {
+    const appearance = settings.value("scrollbarAppearance");
+    const style = settings.value("scrollbarStyle");
+    const speed = settings.value("scrollbarSpeed");
+    return {
+        scrollbarAppearance: appearance === "always" || appearance === "hidden" ? appearance : "auto",
+        scrollbarStyle: style === "thick" ? "thick" : "thin",
+        scrollbarSpeed: speed === "high" ? "high" : speed === "fast" ? "fast" : "normal",
+    };
+}

package/dist/composition/settings-route-host.d.ts

@@ -1,5 +1,5 @@
-import type { UiRouteHost } from "../integrations/pi/owned-ui/index.js";
 import type { OwnedUiSettingsSession } from "../ui/settings/index.js";
+import { type UiRouteHost } from "../ui/apps/index.js";
 /**
  * Registers the A1-owned screens and adapts the app host to the shell's route
  * seam. The shell mounts whatever surface it is handed and forwards keys; it

package/dist/composition/settings-route-host.js

@@ -1,6 +1,6 @@
 import { SETTINGS_APP_ID, SETTINGS_ROUTE, SettingsApp } from "../features/owned-ui/index.js";
 import { piTheme } from "../integrations/pi/components/index.js";
-import { UiAppHost, UiAppRegistry } from "../ui/apps/index.js";
+import { UiAppHost, UiAppRegistry, } from "../ui/apps/index.js";
 import { faint } from "../ui/components/index.js";
 /**
  * Registers the A1-owned screens and adapts the app host to the shell's route

package/dist/contracts/owned-ui/model.d.ts

@@ -12,12 +12,28 @@ export interface OwnedUiModelInfo {
     readonly displayName: string;
 }
 export type OwnedUiThinkingLevel = "off" | "minimal" | "low" | "medium" | "high" | "xhigh";
+export interface OwnedUiViewportSettings {
+    readonly scrollbarAppearance: "auto" | "always" | "hidden";
+    readonly scrollbarStyle: "thin" | "thick";
+    /** normal is baseline; fast is 2x normal; high is normal plus fast. */
+    readonly scrollbarSpeed: "normal" | "fast" | "high";
+}
+/** Narrow live settings boundary consumed by the bare-A1 shell composition. */
+export interface OwnedUiViewportSettingsPort {
+    snapshot(): OwnedUiViewportSettings;
+    onChange(listener: (settings: OwnedUiViewportSettings) => void): () => void;
+}
 export interface OwnedUiTerminalSurface {
     readonly columns: number;
     readonly rows: number;
     readonly focusedRegion: "transcript" | "editor" | "dialog" | "overlay" | "status";
     readonly hardwareCursor: boolean;
 }
+export interface OwnedUiImageAttachment {
+    readonly type: "image";
+    readonly data: string;
+    readonly mimeType: string;
+}
 export interface OwnedUiEditorState {
     readonly text: string;
     readonly queuedSubmissions: readonly string[];
@@ -122,11 +138,13 @@ export type OwnedUiCommand = {
     readonly correlationId: OwnedUiCorrelationId;
     readonly sessionId: OwnedUiSessionId;
     readonly text: string;
+    readonly images?: readonly OwnedUiImageAttachment[];
 } | {
     readonly type: "steer" | "follow-up";
     readonly correlationId: OwnedUiCorrelationId;
     readonly sessionId: OwnedUiSessionId;
     readonly text: string;
+    readonly images?: readonly OwnedUiImageAttachment[];
 } | {
     readonly type: "abort" | "retry" | "compact" | "shutdown";
     readonly correlationId: OwnedUiCorrelationId;
@@ -189,6 +207,16 @@ export type OwnedUiEvent = {
     readonly sessionId: OwnedUiSessionId;
     readonly sequence: number;
     readonly block: OwnedUiTranscriptBlock;
+} | {
+    /** One completed assistant reply; never a tool row or transcript rebuild. */
+    readonly type: "assistant-message-completed";
+    readonly sessionId: OwnedUiSessionId;
+    readonly sequence: number;
+} | {
+    /** A fresh agent run has started, used by follow-mode surfaces. */
+    readonly type: "agent-run-started";
+    readonly sessionId: OwnedUiSessionId;
+    readonly sequence: number;
 } | {
     readonly type: "editor-state";
     readonly sessionId: OwnedUiSessionId;

package/dist/contracts/owned-ui/validation.js

@@ -5,6 +5,8 @@ const MAX_MESSAGE_LENGTH = 4_096;
 const MAX_TEXT_BYTES = 256 * 1024;
 const MAX_PAYLOAD_BYTES = 64 * 1024;
 const MAX_SESSION_VIEW_BYTES = 1024 * 1024;
+const MAX_IMAGE_DATA_BYTES = 8 * 1024 * 1024;
+const MAX_PROMPT_IMAGES = 8;
 const MAX_BLOCKS = 10_000;
 const MAX_CUSTOMIZATIONS = 1_000;
 const MAX_DIAGNOSTICS = 1_000;
@@ -53,6 +55,15 @@ export function assertOwnedUiCommand(command) {
         case "steer":
         case "follow-up":
             assertBoundedText(command.text, "owned-UI prompt text", MAX_TEXT_BYTES);
+            if (command.images !== undefined) {
+                assertCollection(command.images, "owned-UI prompt images", MAX_PROMPT_IMAGES);
+                for (const image of command.images) {
+                    if (image.type !== "image")
+                        throw new TypeError("owned-UI prompt image type is invalid");
+                    assertBoundedText(image.data, "owned-UI prompt image data", MAX_IMAGE_DATA_BYTES);
+                    assertBoundedText(image.mimeType, "owned-UI prompt image MIME type", MAX_LABEL_LENGTH);
+                }
+            }
             return;
         case "abort":
         case "retry":
@@ -103,6 +114,9 @@ export function assertOwnedUiEvent(event) {
         case "transcript-block":
             assertOwnedUiTranscriptBlock(event.block);
             return;
+        case "assistant-message-completed":
+        case "agent-run-started":
+            return;
         case "editor-state":
             assertOwnedUiEditorState(event.editor);
             return;

package/dist/features/launch/development-launch.js

@@ -8,8 +8,16 @@ export function resolveDevelopmentLaunchEnvironment(canonicalPackageRoot, releas
     const instanceId = selectedInstanceId
         ? createHash("sha256").update(selectedInstanceId).digest("hex").slice(0, 16)
         : randomUUID().replaceAll("-", "").slice(0, 16);
-    const developmentRoot = resolve(source[PRODUCT_IDENTITY.environment.developmentRoot]
-        ?? join(temporaryDirectory, PRODUCT_IDENTITY.state.developmentDirectory, checkoutId, releaseId, "instances", instanceId));
+    const checkoutRoot = resolve(temporaryDirectory, PRODUCT_IDENTITY.state.developmentDirectory, checkoutId);
+    const selectedDevelopmentRoot = source[PRODUCT_IDENTITY.environment.developmentRoot];
+    const developmentRoot = resolve(selectedDevelopmentRoot
+        ?? join(checkoutRoot, releaseId, "instances", instanceId));
+    // Runtime/data remain instance-isolated, but product settings are user
+    // preferences and must survive a fresh local launch (and a rebuilt candidate).
+    // An explicit development root retains its historical self-contained policy.
+    const persistentConfigDir = selectedDevelopmentRoot
+        ? join(developmentRoot, "config")
+        : join(checkoutRoot, "config");
     const dataDir = resolve(source[PRODUCT_IDENTITY.environment.dataDir] ?? join(developmentRoot, "data"));
     return {
         checkoutId,
@@ -19,7 +27,7 @@ export function resolveDevelopmentLaunchEnvironment(canonicalPackageRoot, releas
         environment: {
             ...source,
             [PRODUCT_IDENTITY.environment.developmentInstanceId]: instanceId,
-            [PRODUCT_IDENTITY.environment.configDir]: resolve(source[PRODUCT_IDENTITY.environment.configDir] ?? join(developmentRoot, "config")),
+            [PRODUCT_IDENTITY.environment.configDir]: resolve(source[PRODUCT_IDENTITY.environment.configDir] ?? persistentConfigDir),
             [PRODUCT_IDENTITY.environment.dataDir]: dataDir,
             [PRODUCT_IDENTITY.environment.runtimeDir]: resolve(source[PRODUCT_IDENTITY.environment.runtimeDir] ?? join(developmentRoot, "runtime")),
             [PRODUCT_IDENTITY.environment.databasePath]: resolve(source[PRODUCT_IDENTITY.environment.databasePath] ?? join(dataDir, PRODUCT_IDENTITY.endpoint.databaseFilename)),

package/dist/features/launch/index.d.ts

@@ -3,5 +3,4 @@ export * from "./initialize-profile.js";
 export * from "./intent.js";
 export * from "./profile-paths.js";
 export * from "./prepare-launch.js";
-export * from "./profiles.js";
 export * from "./runtime-selection.js";

package/dist/features/launch/index.js

@@ -3,5 +3,4 @@ export * from "./initialize-profile.js";
 export * from "./intent.js";
 export * from "./profile-paths.js";
 export * from "./prepare-launch.js";
-export * from "./profiles.js";
 export * from "./runtime-selection.js";

package/dist/features/launch/intent.d.ts

@@ -1,7 +1,8 @@
-import { type LaunchProfileContract, type LaunchProfileId } from "./profiles.js";
+import type { LaunchProfileId } from "../../foundation/lifecycle/index.js";
+export type { LaunchProfileId } from "../../foundation/lifecycle/index.js";
 export interface InteractiveLaunchIntent {
     readonly kind: "interactive";
-    readonly profile: LaunchProfileContract;
+    readonly profileId: LaunchProfileId;
 }
 export type LaunchIntent = InteractiveLaunchIntent;
 export declare function interactiveLaunchIntent(profileId: LaunchProfileId): InteractiveLaunchIntent;

package/dist/features/launch/intent.js

@@ -1,4 +1,3 @@
-import { launchProfileContract } from "./profiles.js";
 export function interactiveLaunchIntent(profileId) {
-    return Object.freeze({ kind: "interactive", profile: launchProfileContract(profileId) });
+    return Object.freeze({ kind: "interactive", profileId });
 }

package/dist/features/launch/prepare-launch.d.ts

@@ -2,9 +2,7 @@ import { type LaunchProfilePathOptions } from "./profile-paths.js";
 import { initializeProductProfile } from "./initialize-profile.js";
 import type { InteractiveLaunchIntent } from "./intent.js";
 export interface PreparedInteractiveLaunch {
-    readonly intent: InteractiveLaunchIntent;
     readonly environment: NodeJS.ProcessEnv;
-    readonly piArguments: readonly string[];
     readonly configurationRoot: string | null;
 }
 export interface PrepareInteractiveLaunchOptions extends LaunchProfilePathOptions {

package/dist/features/launch/prepare-launch.js

@@ -2,7 +2,7 @@ import { configurationRootForProfile, resolveLaunchProfilePaths } from "./profil
 import { initializeProductProfile } from "./initialize-profile.js";
 export async function prepareInteractiveLaunch(intent, environment = process.env, options = {}) {
     const paths = resolveLaunchProfilePaths({ ...options, environment });
-    const configurationRoot = configurationRootForProfile(intent.profile.id, paths);
+    const configurationRoot = configurationRootForProfile(intent.profileId, paths);
     if (configurationRoot !== null)
         await (options.initializeProfile ?? initializeProductProfile)(configurationRoot);
     const childEnvironment = { ...environment };
@@ -10,12 +10,5 @@ export async function prepareInteractiveLaunch(intent, environment = process.env
         delete childEnvironment.PI_CODING_AGENT_DIR;
     else
         childEnvironment.PI_CODING_AGENT_DIR = configurationRoot;
-    const piArguments = intent.profile.projectTrust === "ignore" ? ["--no-approve"] : [];
-    childEnvironment.A1_LAUNCH_ARGUMENTS_JSON = JSON.stringify(piArguments);
-    return Object.freeze({
-        intent,
-        environment: childEnvironment,
-        piArguments: Object.freeze(piArguments),
-        configurationRoot,
-    });
+    return Object.freeze({ environment: childEnvironment, configurationRoot });
 }

package/dist/features/launch/profile-paths.d.ts

@@ -1,9 +1,8 @@
-import type { LaunchProfileId } from "./profiles.js";
+import type { LaunchProfileId } from "./intent.js";
 export interface LaunchProfilePaths {
     readonly home: string;
     readonly managedStateRoot: string;
     readonly agentProfile: string;
-    readonly sandbox: string;
 }
 export interface LaunchProfilePathOptions {
     readonly environment?: NodeJS.ProcessEnv;

package/dist/features/launch/profile-paths.js

@@ -7,20 +7,14 @@ export function resolveLaunchProfilePaths(options = {}) {
     const selectedHome = options.home ?? environment[PRODUCT_IDENTITY.environment.profileHome] ?? options.readHome?.() ?? homedir();
     const home = validateAbsolutePath(selectedHome, "effective user home", path);
     const agentProfile = path.resolve(home, PRODUCT_IDENTITY.state.piAgentProfile);
-    const managedStateRoot = path.dirname(agentProfile);
     return Object.freeze({
         home,
-        managedStateRoot,
+        managedStateRoot: path.dirname(agentProfile),
         agentProfile,
-        sandbox: path.resolve(home, PRODUCT_IDENTITY.state.piSandboxProfile),
     });
 }
 export function configurationRootForProfile(profileId, paths) {
-    if (profileId === "a1")
-        return paths.agentProfile;
-    if (profileId === "sandbox")
-        return paths.sandbox;
-    return null;
+    return profileId === "a1" ? paths.agentProfile : null;
 }
 function validateAbsolutePath(value, name, path) {
     if (value.length === 0 || value.includes("\0"))

package/dist/features/launch/runtime-selection.d.ts

@@ -1,10 +1,7 @@
 import { type LaunchProfileId } from "../../foundation/lifecycle/index.js";
 /**
- * Every interactive command is the same composition. What differs is the
- * configuration root each one reads and whether A1's own screens are reachable:
- * bare `a1` is the product, while `a1 pi` and `a1 sandbox` present pinned Pi's
- * interface and nothing of A1's own, against Pi's own profile and against an
- * isolated one.
+ * Both interactive commands use the owned composition. Bare A1 enables product
+ * surfaces; the Pi comparison command withholds them and reads Pi's own profile.
  */
 export type OwnedUiProfileId = LaunchProfileId;
 export interface InteractiveRuntimeSelection {

package/dist/features/owned-ui/settings-app.js

@@ -1,4 +1,4 @@
-import { GLOBAL_SCOPE, LineInput, PLAIN_THEME, ShortcutRegistry, PROMPT_GLYPH, blockJumpTarget, dialogValueColumn, numericValues, RAIL_COLUMNS, renderDialogPanel, renderEmptyState, renderGroupHeader, renderInputRow, renderStatusLine, renderListRow, renderNote, dialogRowAt, menuRowAt, regionAt, renderValueMenu, withScrollbarRail, stepperEnds, steppedValue, valueColumnFor, valueMenuFrame, promptRule, caretCell, blockRowSpan, displayWidth, faint, handleLineInputKey, humanizeLabel, humanizeTitle, indexOfKey, isThumbRow, layoutList, moveSelection, rowKey, scrollForSelection, scrollbarGeometry, selectableIndexes, } from "../../ui/components/index.js";
+import { GLOBAL_SCOPE, LineInput, PLAIN_THEME, ShortcutRegistry, assertNoShortcutConflicts, PROMPT_GLYPH, blockJumpTarget, dialogValueColumn, numericValues, RAIL_COLUMNS, renderDialogPanel, renderEmptyState, renderGroupHeader, renderInputRow, renderStatusLine, renderListRow, renderNote, dialogRowAt, menuRowAt, regionAt, renderValueMenu, withScrollbarRail, stepperEnds, steppedValue, valueColumnFor, valueMenuFrame, promptRule, caretCell, blockRowSpan, displayWidth, faint, handleLineInputKey, humanizeLabel, humanizeTitle, indexOfKey, isThumbRow, layoutList, moveSelection, rowKey, scrollForSelection, scrollbarGeometry, selectableIndexes, } from "../../ui/components/index.js";
 export const SETTINGS_APP_ID = "settings";
 export const SETTINGS_ROUTE = "settings";
 const SCOPE = SETTINGS_APP_ID;
@@ -29,6 +29,7 @@ SETTINGS_SHORTCUTS.declare({ key: "left", scope: DIALOG_SCOPE, description: "Cha
 SETTINGS_SHORTCUTS.declare({ key: "right", scope: DIALOG_SCOPE, description: "Change this part", section: "Parts" }, "part-change");
 SETTINGS_SHORTCUTS.declare({ key: "up", scope: DIALOG_SCOPE, description: "Previous part", section: "Parts" }, "part-previous");
 SETTINGS_SHORTCUTS.declare({ key: "down", scope: DIALOG_SCOPE, description: "Next part", section: "Parts" }, "part-next");
+assertNoShortcutConflicts(SETTINGS_SHORTCUTS.assemble());
 const KEYS = {
     "\u001b[A": "up",
     "\u001b[B": "down",
@@ -56,6 +57,8 @@ export class SettingsApp {
     #session;
     #selectedKey;
     #scroll = 0;
+    /** Keyboard navigation requests visibility once; pointer scrolling then stays free. */
+    #selectionNeedsReveal = true;
     #reveal;
     #notice = null;
     #filter = null;
@@ -96,9 +99,13 @@ export class SettingsApp {
         this.#panelTop = this.#panelTopForFrame;
         const bodyHeight = Math.max(0, rect.height - footer.length);
         const selected = indexOfKey(rows, this.#selectedKey);
-        this.#scroll = scrollForSelection(rows, bodyHeight, this.#scroll, selected, this.#reveal);
+        if (this.#selectionNeedsReveal) {
+            this.#scroll = scrollForSelection(rows, bodyHeight, this.#scroll, selected, this.#reveal);
+            this.#selectionNeedsReveal = false;
+        }
         this.#reveal = undefined;
         const layout = layoutList(rows, bodyHeight, this.#scroll);
+        this.#scroll = layout.scroll;
         const contentWidth = Math.max(0, rect.width - RAIL_COLUMNS);
         const valueColumn = this.#valueColumn(rows);
         const geometry = scrollbarGeometry({
@@ -121,14 +128,13 @@ export class SettingsApp {
             for (const index of layout.rowIndexes) {
                 const row = rows[index];
                 if (row !== undefined && row.kind === "element") {
+                    const view = this.#viewRow(row.value);
                     this.#frameRows.push({
-                        key: `${row.value.backend}:${row.value.id}`,
+                        key: view.key,
                         screenRow: body.length,
                         valueColumn,
-                        valueWidth: row.value.structured
-                            ? CONFIGURE.length
-                            : row.value.value === null ? 0 : displayWidth(displayValue(row.value.value)),
-                        stepper: isStepper(row.value),
+                        valueWidth: displayWidth(view.value),
+                        stepper: view.stepper !== undefined,
                     });
                 }
                 body.push(this.#renderRow(row, index === selected, contentWidth, valueColumn, theme));
@@ -189,8 +195,11 @@ export class SettingsApp {
                 // End lands on the very last setting, not on the head of its section.
                 const selectable = selectableIndexes(rows);
                 const target = action === "last" ? selectable.at(-1) : selectable[0];
-                if (target !== undefined)
-                    this.#jump(rows, target);
+                if (target !== undefined) {
+                    this.#select(rows, target);
+                    if (action === "first")
+                        this.#scroll = 0;
+                }
                 return { consumed: true };
             }
             case "previous-value":
@@ -263,6 +272,14 @@ export class SettingsApp {
             }
             return { consumed: true, render: false };
         }
+        if (event.kind === "wheel-up" || event.kind === "wheel-down") {
+            // The whole list pane owns wheel scrolling, including blank space beside
+            // short labels. It must not depend on finding an item under the pointer.
+            if (event.row < 1 || event.row > this.#panelTopForFrame)
+                return { consumed: false };
+            this.#scroll = Math.max(0, this.#scroll + (event.kind === "wheel-down" ? 3 : -3));
+            return { consumed: true };
+        }
         const row = this.#frameRows.find(candidate => candidate.screenRow === event.row - 1);
         const previousKey = this.#hoverKey;
         const previousRegion = this.#hoverRegion;
@@ -288,10 +305,6 @@ export class SettingsApp {
             }
             return { consumed: true };
         }
-        if (event.kind === "wheel-up" || event.kind === "wheel-down") {
-            this.#scroll = Math.max(0, this.#scroll + (event.kind === "wheel-down" ? 3 : -3));
-            return { consumed: true };
-        }
         const changed = previousKey !== this.#hoverKey || previousRegion !== this.#hoverRegion;
         return { consumed: event.kind !== "motion", render: changed };
     }
@@ -403,6 +416,17 @@ export class SettingsApp {
         if (input === null)
             return { consumed: false };
         const key = KEYS[data];
+        if (key === "home" || key === "end") {
+            const rows = this.#rows();
+            const selectable = selectableIndexes(rows);
+            const target = key === "end" ? selectable.at(-1) : selectable[0];
+            if (target !== undefined) {
+                this.#select(rows, target);
+                if (key === "home")
+                    this.#scroll = 0;
+            }
+            return { consumed: true };
+        }
         if (key === "up" || key === "down" || key === "shift+up" || key === "shift+down") {
             const rows = this.#rows();
             // Nothing found means nothing to move through; the key is still swallowed
@@ -485,6 +509,7 @@ export class SettingsApp {
         if (index < 0)
             return;
         this.#selectedKey = rowKey(rows[index]);
+        this.#selectionNeedsReveal = true;
         this.#notice = null;
     }
     #rows() {
@@ -554,7 +579,6 @@ export class SettingsApp {
             key: `${entry.backend}:${entry.id}`,
             label: labelOf(entry),
             value,
-            ...(entry.origin === "default" ? { suffix: "(default)" } : {}),
             ...(typeof shown === "number" && entry.editable ? { stepper: stepperEnds(range, shown) } : {}),
         };
     }

package/dist/foundation/lifecycle/model.d.ts

@@ -1,4 +1,4 @@
-export type LaunchProfileId = "a1" | "pi" | "sandbox";
+export type LaunchProfileId = "a1" | "pi";
 export type GenerationId = string;
 export type DriverProfileId = string;
 export type RequestId = string;

package/dist/foundation/lifecycle/model.js

@@ -1,6 +1,6 @@
 import { PRODUCT_TEXT } from "../../product-identity.js";
 export function assertLaunchProfileId(value) {
-    if (value !== "a1" && value !== "pi" && value !== "sandbox")
+    if (value !== "a1" && value !== "pi")
         throw new TypeError(PRODUCT_TEXT.diagnostic(`launch profile is invalid: ${String(value)}`));
 }
 export function assertDimensions(dimensions) {

package/dist/foundation/release/bootstrap.d.ts

@@ -7,9 +7,7 @@ export interface BootstrapOptions {
     readonly packageRoot: string;
     readonly launchIntent?: {
         readonly kind: "interactive";
-        readonly profile: {
-            readonly id: LaunchProfileId;
-        };
+        readonly profileId: LaunchProfileId;
     };
     readonly environment?: NodeJS.ProcessEnv;
     readonly output?: Pick<NodeJS.WriteStream, "write">;

package/dist/foundation/release/bootstrap.js

@@ -13,7 +13,7 @@ import { consumeMaterializationProof, materializeRelease, readCertifiedReleaseMa
 import { PRODUCT_IDENTITY, PRODUCT_TEXT } from "../../product-identity.js";
 export async function runBootstrap(options) {
     const environment = { ...(options.environment ?? process.env) };
-    const launchProfileId = options.launchIntent?.profile.id ?? "a1";
+    const launchProfileId = options.launchIntent?.profileId ?? "a1";
     assertLaunchProfileId(launchProfileId);
     environment[PRODUCT_IDENTITY.environment.launchProfile] = launchProfileId;
     const output = options.output ?? process.stderr;

package/dist/foundation/storage/control-store.js

@@ -30,8 +30,8 @@ export class ControlStore {
     migrate() {
         const versionRow = this.database.prepare("PRAGMA user_version").get();
         const version = versionRow.user_version;
-        if (version > 5)
-            throw new Error(`control database version ${version} is newer than supported version 5`);
+        if (version > 6)
+            throw new Error(`control database version ${version} is newer than supported version 6`);
         if (version !== 0)
             this.#assertCurrentControlSchema();
         if (version === 0) {
@@ -187,7 +187,7 @@ export class ControlStore {
         CREATE TABLE launch_instances (
           id TEXT PRIMARY KEY,
           owner_client_id TEXT NOT NULL,
-          profile_id TEXT NOT NULL CHECK (profile_id IN ('a1', 'pi', 'sandbox')),
+          profile_id TEXT NOT NULL CHECK (profile_id IN ('a1', 'pi')),
           state TEXT NOT NULL CHECK (state IN ('requested', 'active', 'stopping', 'completed', 'interrupted')),
           shutdown_policy TEXT NOT NULL CHECK (shutdown_policy = 'terminate-tree-on-close'),
           guardian_identity_json TEXT NOT NULL CHECK (json_valid(guardian_identity_json)),
@@ -208,6 +208,40 @@ export class ControlStore {
         CREATE INDEX idx_launch_instances_boot ON launch_instances(owner_boot_nonce, state);
         PRAGMA user_version = 5;
         COMMIT;
+      `);
+        }
+        if (version <= 5) {
+            this.database.exec(`
+        BEGIN IMMEDIATE;
+        ALTER TABLE launch_instances RENAME TO launch_instances_v5;
+        DROP INDEX idx_launch_instances_owner;
+        DROP INDEX idx_launch_instances_boot;
+        CREATE TABLE launch_instances (
+          id TEXT PRIMARY KEY,
+          owner_client_id TEXT NOT NULL,
+          profile_id TEXT NOT NULL CHECK (profile_id IN ('a1', 'pi')),
+          state TEXT NOT NULL CHECK (state IN ('requested', 'active', 'stopping', 'completed', 'interrupted')),
+          shutdown_policy TEXT NOT NULL CHECK (shutdown_policy = 'terminate-tree-on-close'),
+          guardian_identity_json TEXT NOT NULL CHECK (json_valid(guardian_identity_json)),
+          root_identity_json TEXT CHECK (root_identity_json IS NULL OR json_valid(root_identity_json)),
+          containment_identity_json TEXT CHECK (containment_identity_json IS NULL OR json_valid(containment_identity_json)),
+          created_at TEXT NOT NULL,
+          activated_at TEXT,
+          stopping_at TEXT,
+          completed_at TEXT,
+          outcome_json TEXT CHECK (outcome_json IS NULL OR json_valid(outcome_json)),
+          owner_boot_nonce TEXT NOT NULL,
+          CHECK ((state = 'requested' AND root_identity_json IS NULL AND containment_identity_json IS NULL AND activated_at IS NULL AND stopping_at IS NULL AND completed_at IS NULL AND outcome_json IS NULL)
+            OR (state = 'active' AND root_identity_json IS NOT NULL AND containment_identity_json IS NOT NULL AND activated_at IS NOT NULL AND stopping_at IS NULL AND completed_at IS NULL AND outcome_json IS NULL)
+            OR (state = 'stopping' AND root_identity_json IS NOT NULL AND containment_identity_json IS NOT NULL AND activated_at IS NOT NULL AND stopping_at IS NOT NULL AND completed_at IS NULL AND outcome_json IS NULL)
+            OR (state IN ('completed', 'interrupted') AND completed_at IS NOT NULL AND outcome_json IS NOT NULL))
+        );
+        INSERT INTO launch_instances SELECT * FROM launch_instances_v5 WHERE profile_id IN ('a1', 'pi');
+        DROP TABLE launch_instances_v5;
+        CREATE INDEX idx_launch_instances_owner ON launch_instances(owner_client_id, state);
+        CREATE INDEX idx_launch_instances_boot ON launch_instances(owner_boot_nonce, state);
+        PRAGMA user_version = 6;
+        COMMIT;
       `);
         }
         if (version === 0) {