@timurproko/a1 0.1.8-dev.157 → 0.1.8-dev.214

package/README.md

@@ -78,6 +78,38 @@ npm run test:fast       # typecheck + fast suite (alias: npm test)
 npm run test:full       # complete non-physical suite
 ```
 
+Create every task worktree at `{working-dir}/.worktrees/<task-id>`, where
+`{working-dir}` is the session's initial working directory. For working directory
+`D:/Git/a1`, use `D:/Git/a1/.worktrees/<task-id>`—never a sibling such as
+`D:/Git/a1-<task-id>`. The primary worktree remains on `develop` for integration only.
+
+## Pull request integration
+
+Pull requests whose complete diff is only under `openspec/**`, under `docs/**`,
+exactly the root `README.md`, or a combination of those paths are automatically
+squash-merged after `Development validation required` succeeds. The automation
+reads the complete GitHub changed-file list, including both sides of renames, and
+runs only for trusted branches in this repository.
+
+Any other path makes the pull request code/operational. That includes source, tests,
+scripts, workflows, configuration, generated baselines, arbitrary root Markdown,
+and a mixed documentation-plus-code change. Those pull requests remain open after
+CI for local maintainer validation and explicit manual merge; automation disables
+auto-merge if it was armed. Documentation remains exempt from product builds and
+tests, but docs-sensitive generated governance and strict OpenSpec consistency are
+checked before integration.
+
+After any same-repository pull request into `develop` merges, trusted automation
+reconciles its remote topic branch. Human merges use the close-event workflow;
+documentation merges authored by `GITHUB_TOKEN` use a synchronous fallback because
+GitHub suppresses recursive workflow events. Both delete only an unprotected live
+ref that still equals the pull request's exact merged head SHA. Fork, advanced,
+reserved, protected, malformed, and unmerged refs are preserved and reported.
+
+Specification approval and implementation remain separate pull requests. An
+implementation starts from updated `origin/develop` only after its specification
+has merged and implementation was explicitly requested.
+
 ## Release
 
 Two channels, both published by CI from the exact bytes it validated — never from

package/bin/cli.js

@@ -5,7 +5,7 @@ const { fileURLToPath } = await import("node:url");
 const { readFile } = await import("node:fs/promises");
 const { cliCapabilities, dispatchCli } = await import("../dist/cli/index.js");
 
-// Which commands this build exposes follows from the build's own version, so a
+// Compatibility: which commands this build exposes follows from the build's own version, so a
 // released a1 cannot be argued into offering the development profiles.
 const capabilities = cliCapabilities(JSON.parse(await readFile(new URL("package.json", packageRoot), "utf8")).version);
 
@@ -16,7 +16,7 @@ process.exitCode = await dispatchCli(process.argv.slice(2), {
       import("../dist/foundation/release/index.js"),
       import("./module-identity.js"),
     ]);
-    // Self-heal the installed tree before the release store copies it: npm 12
+    // Compatibility: self-heal the installed tree before the release store copies it: npm 12
     // blocks install scripts by default, so the postinstall that normally
     // repairs module identity may never have run (see bin/module-identity.js).
     const packageRootPath = fileURLToPath(packageRoot);

package/bin/sync-pi-tui-proxy.js

@@ -35,7 +35,7 @@ const RE_EXPORT_LINE = /^export \* from "[^"]+";$/m;
  * pinned Pi resolves. Returns a discriminated outcome; never throws.
  */
 export function syncPiTuiProxy(packageRoot) {
-  // resolvePinnedPiTui answers with a canonical real path, so the directory the
+  // Platform: resolvePinnedPiTui answers with a canonical real path, so the directory the
   // relative specifier is computed from must be canonical too (Windows short
   // names, symlinked installs).
   const canonicalRoot = canonical(packageRoot);

package/bin/ui.js

@@ -3,7 +3,7 @@
 const { assertSinglePiTuiModuleAtLaunch } = await import("./module-identity.js");
 const { fileURLToPath } = await import("node:url");
 
-// Before the composition loads pinned Pi's terminal stack: confirm A1 and Pi
+// Compatibility: before the composition loads pinned Pi's terminal stack: confirm A1 and Pi
 // resolve it to the same copy, so extensions and the owned UI share one module
 // identity (see bin/module-identity.js for the full story). Nothing is repaired
 // here — A1's package manifest decides which copy wins, and this only reports
@@ -12,13 +12,28 @@ assertSinglePiTuiModuleAtLaunch(fileURLToPath(new URL("..", import.meta.url)), m
 
 const { runSelectedInteractiveRuntime } = await import("../dist/features/launch/index.js");
 
+const launchArgs = process.argv.slice(2);
+let sessionPath;
+if (launchArgs.length > 0) {
+  if (launchArgs.length !== 2 || launchArgs[0] !== "--session" || launchArgs[1].trim().length === 0) {
+    throw new Error("Usage: a1 [--session <session-file>]");
+  }
+  sessionPath = launchArgs[1];
+}
+
 runSelectedInteractiveRuntime(process.env.A1_LAUNCH_PROFILE ?? "a1", {
   ownedUi: async (profileId, ownedSurfaces) => {
-    const [{ runOwnedUi }, { composeOwnedUi }] = await Promise.all([
+    const [{ createConsoleProjectTrustPrompt, runOwnedUi }, { composeOwnedUi }] = await Promise.all([
       import("../dist/features/owned-ui/index.js"),
       import("../dist/composition/index.js"),
     ]);
-    const { application, settings } = await composeOwnedUi({ cwd: process.cwd(), profileId, ownedSurfaces });
+    const { application, settings } = await composeOwnedUi({
+      cwd: process.cwd(),
+      profileId,
+      ownedSurfaces,
+      projectTrustPrompt: createConsoleProjectTrustPrompt(),
+      ...(sessionPath === undefined ? {} : { sessionPath }),
+    });
     return await runOwnedUi({ application, ...(settings === null ? {} : { settings }) });
   },
 }).then(

package/dist/cli/dispatch.js

@@ -85,7 +85,7 @@ export function parseCliCommand(arguments_, capabilities) {
         return parseUpdate(rest);
     if (command?.startsWith("update:"))
         return { kind: "noop" };
-    // Unsupported and reserved command spaces are deliberately quiet. Help is
+    // Rationale: unsupported and reserved command spaces are deliberately quiet. Help is
     // explicit, and a typo must never start an interactive or maintenance path.
     return { kind: "noop" };
 }
@@ -98,7 +98,7 @@ function parseUpdate(rest) {
     if (rest.length === 0)
         return { kind: "update", channel: "stable" };
     const [selector, ...values] = rest;
-    // Removed compatibility notation is unsupported rather than deprecated.
+    // Compatibility: removed notation is unsupported rather than deprecated.
     if (selector === "self")
         return { kind: "noop" };
     if (selector === "--develop") {
@@ -121,7 +121,7 @@ function parseUpdate(rest) {
         return pinnedPiUpdateError();
     if (selector !== undefined && selector.startsWith("-"))
         return unknownOption(selector, "update");
-    // Positional update targets are reserved for a future A1-native plugin model.
+    // Rationale: positional update targets are reserved for a future A1-native plugin model.
     return { kind: "noop" };
 }
 function isDevelopmentTarget(target) {

package/dist/cli/packages.js

@@ -40,7 +40,7 @@ async function runVerb(port, request) {
     return request.verb === "install" ? await port.install(request.source) : await port.remove(request.source);
 }
 export function renderPackageOutcome(outcome, profileRoot, style = chalk) {
-    // Model refresh remains an A1 top-level command. The `a1 pi` compatibility
+    // Compatibility: model refresh remains an A1 top-level command. The `a1 pi` compatibility
     // transcript applies to package operations only.
     if (outcome.operation === "refresh-models") {
         if (outcome.status === "failed") {

package/dist/cli/version-stats.js

@@ -20,7 +20,7 @@ export async function runVersionStats(options) {
         output.stderr(`${PRODUCT_TEXT.diagnostic(`could not read its installed version: ${message(error)}`)}\n`);
         return 1;
     }
-    // Match Pi's release behavior: stable builds print only their installed version.
+    // Compatibility: match Pi's release behavior: stable builds print only their installed version.
     // Development builds retain channel visibility for preview comparison and updates.
     if (prerelease(installed) === null) {
         output.stdout(`${installed}\n`);
@@ -32,7 +32,7 @@ export async function runVersionStats(options) {
         output.stderr(`${PRODUCT_TEXT.diagnostic(`could not resolve npm dist-tags: ${remote.error}`)}\n`);
     return 0;
 }
-// npm view respects the user's .npmrc registry and proxy, so it stays primary; the direct
+// Rationale: npm view respects the user's .npmrc registry and proxy, so it stays primary; the direct
 // registry fetch below covers npm CLI versions whose --json output shape we cannot parse.
 async function queryDistTags(runner, fetcher) {
     const fromNpm = await queryDistTagsViaNpm(runner);
@@ -55,7 +55,7 @@ async function queryDistTagsViaNpm(runner) {
         return unavailable(`npm exited with status ${result.code ?? "unknown"}`);
     try {
         const parsed = JSON.parse(result.stdout);
-        // npm 12 wraps `npm view <pkg> dist-tags --json` output in a one-element array; older npm returns the bare object.
+        // Compatibility: npm 12 wraps `npm view <pkg> dist-tags --json` output in a one-element array; older npm returns the bare object.
         const metadata = Array.isArray(parsed) && parsed.length === 1 ? parsed[0] : parsed;
         return parseDistTags(metadata, "npm");
     }

package/dist/composition/owned-ui.d.ts

@@ -1,10 +1,12 @@
-import { type PiEngineAdapter } from "../integrations/pi/engine/index.js";
+import { type PiEngineAdapter, type PiProjectTrustPreflightPrompt } from "../integrations/pi/engine/index.js";
 import { OwnedUiSettingsSession } from "../ui/settings/index.js";
 import type { OwnedUiApplicationPort, PresentationTerminalPort } from "../contracts/presentation/index.js";
 export interface OwnedUiCompositionOptions {
     readonly cwd?: string;
     readonly terminal?: PresentationTerminalPort;
     readonly createPiAdapter?: () => Promise<PiEngineAdapter>;
+    /** Exact persisted session selected by the narrow `--session` launch form. */
+    readonly sessionPath?: string;
     /**
      * A1 profile whose settings this session reads and writes. Omitted keeps the
      * session settings-free, which is what the pinned comparison paths use.
@@ -15,6 +17,7 @@ export interface OwnedUiCompositionOptions {
      * use the same composition with those surfaces withheld.
      */
     readonly ownedSurfaces?: "on" | "off";
+    readonly projectTrustPrompt?: PiProjectTrustPreflightPrompt;
 }
 export interface OwnedUiComposition {
     readonly application: OwnedUiApplicationPort;

package/dist/composition/owned-ui.js

@@ -1,6 +1,6 @@
 import { resolveProductPaths } from "../foundation/lifecycle/index.js";
 import { applyConfiguredPiTheme, getAvailablePiThemes } from "../integrations/pi/components/index.js";
-import { createPiEngineAdapter } from "../integrations/pi/engine/index.js";
+import { createPiEngineAdapter, } from "../integrations/pi/engine/index.js";
 import { OwnedUiSessionShell } from "../integrations/pi/session-ui/index.js";
 import { OwnedUiSettingsSession, OwnedUiSettingsStore } from "../ui/settings/index.js";
 import { createPiTerminalBridge } from "../integrations/pi/tui-runtime/index.js";
@@ -12,18 +12,21 @@ export async function composeOwnedUi(options = {}) {
     const cwd = options.cwd ?? process.cwd();
     const adapter = options.createPiAdapter
         ? await options.createPiAdapter()
-        : await createPiEngineAdapter({ cwd, availableThemes: () => getAvailablePiThemes().map(theme => theme.name) });
+        : await createPiEngineAdapter({
+            cwd,
+            availableThemes: () => getAvailablePiThemes().map(theme => theme.name),
+            settingsProductMode: options.ownedSurfaces === "off" ? "comparison" : "bare",
+            ...(options.sessionPath === undefined ? {} : { sessionPath: options.sessionPath }),
+            ...(options.projectTrustPrompt === undefined ? {} : { projectTrustPrompt: options.projectTrustPrompt }),
+        });
     const ownedSurfaces = options.ownedSurfaces !== "off";
     const settings = options.profileId === undefined
         ? null
         : new OwnedUiSettingsSession({
             store: new OwnedUiSettingsStore({ configDir: resolveProductPaths().configDir, profileId: options.profileId }),
             agentProvider: () => adapter.settingsPort(),
-            ...(ownedSurfaces ? {
-                hiddenAgentSettingIds: ["tuiMode", "theme", "fullscreenScrollbar", "quietStartup"],
-            } : {}),
         });
-    // Bare A1 intentionally ships one visual target while its UI is being completed:
+    // Compatibility: bare A1 intentionally ships one visual target while its UI is being completed:
     // dark, regardless of terminal detection or a previously stored Pi theme. The
     // comparison profile keeps Pi's configured theme behavior and settings surface.
     applyConfiguredPiTheme(ownedSurfaces ? "dark" : adapter.configuredTheme());

package/dist/composition/settings-route-host.js

@@ -61,13 +61,15 @@ function pinnedTheme() {
     return {
         fg: (token, text) => piTheme().fg(token, text),
         bold: (text) => piTheme().bold(text),
-        // Unpainted, so a list reads against the terminal the reader actually has
+        // Rationale: unpainted, so a list reads against the terminal the reader actually has
         // rather than against the background the configured theme was built for.
         plain: (text) => text,
-        // Quiet, and quieter again: the terminal's own faint attribute over the
+        // Rationale: quiet, and quieter again: the terminal's own faint attribute over the
         // dimmest colour the theme has.
         disabled: (text) => faint(piTheme().fg("dim", text)),
-        highlight: (text) => `${text}`,
-        panel: (text) => `${text}`,
+        // Rationale: physical review requires the shared value menu to read as a floating
+        // product surface instead of blending into the settings rows behind it.
+        highlight: (text) => `\u001b[48;2;82;82;82m\u001b[97m${text}\u001b[39m\u001b[49m`,
+        panel: (text) => `\u001b[48;2;55;55;55m${text}\u001b[49m`,
     };
 }

package/dist/contracts/agent-engine/capability-ports.d.ts

@@ -1,4 +1,4 @@
-import type { AgentJsonValue, AgentModelDescriptor, AgentResourceDescriptor, AgentSettingDescriptor } from "./domain.js";
+import type { AgentJsonValue, AgentModelDescriptor, AgentSettingChangeOutcome, AgentResourceDescriptor, AgentSettingDescriptor } from "./domain.js";
 export interface AgentModelPort {
     readonly capabilities: {
         readonly selection: boolean;
@@ -26,7 +26,7 @@ export interface AgentSettingsPort {
     };
     listSettings(): Promise<readonly AgentSettingDescriptor[]>;
     readSetting(key: string): Promise<AgentJsonValue | undefined>;
-    writeSetting?(key: string, value: AgentJsonValue): Promise<void>;
+    writeSetting?(key: string, value: AgentJsonValue): Promise<AgentSettingChangeOutcome>;
     flush?(): Promise<void>;
 }
 export interface AgentResourcesPort {

package/dist/contracts/agent-engine/domain-validation.js

@@ -52,10 +52,28 @@ export function assertAgentUsage(value) { for (const amount of [value.inputToken
     nonNegative(amount, "usage token count"); if (value.cost !== null && (!(typeof value.cost === "number") || !Number.isFinite(value.cost) || value.cost < 0))
     throw new TypeError("usage cost is invalid"); }
 export function assertAgentModelDescriptor(value) { id(value.providerId, "model provider id"); id(value.modelId, "model id"); text(value.displayName, "model display name"); nonNegative(value.contextWindow, "model context window"); unique(value.thinkingLevels, undefined, "model thinking levels"); }
-export function assertAgentSettingDescriptor(value) { id(value.key, "setting key"); if (!["boolean", "number", "string", "enum", "json"].includes(value.valueType) || typeof value.writable !== "boolean")
-    throw new TypeError("setting descriptor is invalid"); if (value.choices)
-    for (const choice of value.choices)
-        json(choice, "setting choice"); }
+export function assertAgentSettingDescriptor(value) {
+    id(value.key, "setting key");
+    if (!["boolean", "number", "string", "enum", "json"].includes(value.valueType)
+        || typeof value.writable !== "boolean"
+        || !["live", "next-session", "next-start", "current-exit"].includes(value.application)
+        || !["agent", "shell", "terminal", "startup", "shutdown", "installation"].includes(value.owner)
+        || typeof value.available !== "boolean"
+        || !(value.limitationReason === null || typeof value.limitationReason === "string")) {
+        throw new TypeError("setting descriptor is invalid");
+    }
+    json(value.storedValue, "stored setting value");
+    json(value.effectiveValue, "effective setting value");
+    if ((value.available && value.limitationReason !== null)
+        || (!value.available && (value.limitationReason === null || value.limitationReason.length === 0))) {
+        throw new TypeError("setting descriptor availability is contradictory");
+    }
+    if (value.writable && !value.available)
+        throw new TypeError("unavailable setting cannot be writable");
+    if (value.choices)
+        for (const choice of value.choices)
+            json(choice, "setting choice");
+}
 export function assertAgentResourceDescriptor(value) { id(value.id, "resource id"); if (!["command", "prompt", "skill", "extension", "other"].includes(value.kind))
     throw new TypeError("resource kind is invalid"); text(value.label, "resource label"); json(value.metadata, "resource metadata"); }
 export function assertAgentThemeDescriptor(value) { id(value.id, "theme id"); text(value.label, "theme label"); if (!value.tokens || typeof value.tokens !== "object" || Object.values(value.tokens).some(token => typeof token !== "string"))

package/dist/contracts/agent-engine/domain.d.ts

@@ -48,10 +48,27 @@ export interface AgentModelDescriptor {
     readonly contextWindow: number;
     readonly thinkingLevels: readonly string[];
 }
+export type AgentSettingApplicationBoundary = "live" | "next-session" | "next-start" | "current-exit";
+export type AgentSettingOwner = "agent" | "shell" | "terminal" | "startup" | "shutdown" | "installation";
+export interface AgentSettingChangeOutcome {
+    readonly status: "applied" | "deferred" | "unavailable" | "failed";
+    readonly application: AgentSettingApplicationBoundary;
+    readonly storedValue: AgentJsonValue;
+    readonly effectiveValue: AgentJsonValue;
+    readonly failure: string | null;
+    readonly limitationReason: string | null;
+}
 export interface AgentSettingDescriptor {
     readonly key: string;
     readonly valueType: "boolean" | "number" | "string" | "enum" | "json";
+    /** A setting is writable only when its declared owner/effect is available. */
     readonly writable: boolean;
+    readonly application: AgentSettingApplicationBoundary;
+    readonly owner: AgentSettingOwner;
+    readonly available: boolean;
+    readonly limitationReason: string | null;
+    readonly storedValue: AgentJsonValue;
+    readonly effectiveValue: AgentJsonValue;
     readonly choices?: readonly AgentJsonValue[];
     /** Label the engine shows for this setting, when it has one. */
     readonly label?: string;

package/dist/contracts/owned-ui/model.d.ts

@@ -91,6 +91,12 @@ export interface OwnedUiOverlay {
     readonly modal: boolean;
     readonly payload: unknown;
 }
+export interface OwnedUiTranscriptImageReference {
+    readonly assetId: OwnedUiEntityId;
+    readonly mimeType: string;
+    readonly byteLength: number;
+    readonly source: "user" | "tool-result";
+}
 export interface OwnedUiTranscriptBlock {
     readonly id: OwnedUiEntityId;
     readonly kind: OwnedUiTranscriptBlockKind;
@@ -99,6 +105,8 @@ export interface OwnedUiTranscriptBlock {
     readonly title: string | null;
     readonly text: string;
     readonly payload: unknown;
+    /** Bounded opaque references; image bytes remain in the session-scoped engine asset store. */
+    readonly imageReferences?: readonly OwnedUiTranscriptImageReference[];
 }
 export type OwnedUiSlotId = "theme" | "transcript-block" | "tool-card" | "editor" | "status" | "command" | "selector" | "dialog" | "overlay" | "layout";
 export interface OwnedUiCustomization {

package/dist/contracts/owned-ui/validation.js

@@ -14,6 +14,7 @@ const MAX_QUEUE = 32;
 const MAX_BADGES = 32;
 const MAX_STATUS_DIAGNOSTICS = 32;
 const MAX_ACTIVE_COMMANDS = 64;
+const IMAGE_REFERENCE_SOURCES = new Set(["user", "tool-result"]);
 const BLOCK_KINDS = new Set([
     "user",
     "assistant",
@@ -225,6 +226,16 @@ export function assertOwnedUiTranscriptBlock(block) {
     assertOptionalText(block.title, "owned-UI transcript block title", MAX_LABEL_LENGTH);
     assertPossiblyEmptyText(block.text, "owned-UI transcript block text", MAX_TEXT_BYTES);
     assertJsonValue(block.payload, "owned-UI transcript block payload", MAX_PAYLOAD_BYTES);
+    if (block.imageReferences !== undefined) {
+        assertCollection(block.imageReferences, "owned-UI transcript image references", 16);
+        for (const reference of block.imageReferences) {
+            assertId(reference.assetId, "owned-UI transcript image asset id");
+            if (!/^image\/[a-z0-9.+-]+$/i.test(reference.mimeType))
+                throw new TypeError("owned-UI transcript image MIME type is invalid");
+            assertIntegerInRange(reference.byteLength, 1, 20 * 1024 * 1024, "owned-UI transcript image byte length");
+            assertEnum(reference.source, IMAGE_REFERENCE_SOURCES, "owned-UI transcript image source");
+        }
+    }
 }
 export function assertOwnedUiEditorState(editor) {
     assertPossiblyEmptyText(editor.text, "owned-UI editor text", MAX_TEXT_BYTES);

package/dist/features/launch/development-launch.js

@@ -12,7 +12,7 @@ export function resolveDevelopmentLaunchEnvironment(canonicalPackageRoot, releas
     const selectedDevelopmentRoot = source[PRODUCT_IDENTITY.environment.developmentRoot];
     const developmentRoot = resolve(selectedDevelopmentRoot
         ?? join(checkoutRoot, releaseId, "instances", instanceId));
-    // Runtime/data remain instance-isolated, but product settings are user
+    // Rationale: runtime/data remain instance-isolated, but product settings are user
     // preferences and must survive a fresh local launch (and a rebuilt candidate).
     // An explicit development root retains its historical self-contained policy.
     const persistentConfigDir = selectedDevelopmentRoot

package/dist/features/owned-ui/customization.d.ts

@@ -12,6 +12,7 @@ export interface OwnedCommandHandlerContext {
     readonly correlationId: string;
 }
 export type OwnedCommandHandler = (context: OwnedCommandHandlerContext) => OwnedUiCommand | Promise<OwnedUiCommand>;
+/** Registers owned UI commands and assigns a monotonic correlation identifier to each dispatch. */
 export declare class OwnedCommandSurface {
     #private;
     register(name: string, handler: OwnedCommandHandler): () => void;
@@ -22,6 +23,7 @@ export interface ResolvedOwnedUiSlot {
     readonly customization: OwnedUiCustomization;
     readonly implementation: OwnedUiSlotImplementation;
 }
+/** Resolves one customization per slot by precedence and version while preserving registration identity. */
 export declare class OwnedUiCustomizationRegistry {
     #private;
     register(customization: OwnedUiCustomization, implementation: OwnedUiSlotImplementation): () => void;

package/dist/features/owned-ui/customization.js

@@ -1,4 +1,5 @@
 import { assertOwnedUiCustomization, } from "../../contracts/owned-ui/index.js";
+/** Registers owned UI commands and assigns a monotonic correlation identifier to each dispatch. */
 export class OwnedCommandSurface {
     #handlers = new Map();
     #sequence = 0;
@@ -17,6 +18,7 @@ export class OwnedCommandSurface {
         return handler({ sessionId, correlationId: `ui-command-${this.#sequence}` });
     }
 }
+/** Resolves one customization per slot by precedence and version while preserving registration identity. */
 export class OwnedUiCustomizationRegistry {
     #registrations = new Map();
     register(customization, implementation) {

package/dist/features/owned-ui/diagnostics.d.ts

@@ -17,6 +17,7 @@ export interface OwnedUiDiagnosticsSnapshot {
     readonly resources: OwnedUiResourceObservation | null;
     readonly terminalRestorationFailed: boolean;
 }
+/** Retains bounded, redacted UI diagnostics together with frame and resource observations. */
 export declare class OwnedUiDiagnosticsRecorder {
     #private;
     readonly maximumEntries: number;

package/dist/features/owned-ui/diagnostics.js

@@ -1,3 +1,4 @@
+/** Retains bounded, redacted UI diagnostics together with frame and resource observations. */
 export class OwnedUiDiagnosticsRecorder {
     maximumEntries;
     #entries = [];

package/dist/features/owned-ui/index.d.ts

@@ -1,4 +1,5 @@
 export * from "./customization.js";
 export * from "./diagnostics.js";
 export * from "./run.js";
+export * from "./project-trust-prompt.js";
 export * from "./settings-app.js";

package/dist/features/owned-ui/index.js

@@ -1,4 +1,5 @@
 export * from "./customization.js";
 export * from "./diagnostics.js";
 export * from "./run.js";
+export * from "./project-trust-prompt.js";
 export * from "./settings-app.js";

package/dist/features/owned-ui/project-trust-prompt.d.ts

@@ -0,0 +1,25 @@
+import type { Readable, Writable } from "node:stream";
+export interface OwnedProjectTrustPromptRequest {
+    readonly cwd: string;
+    readonly defaultDecision: "ask" | "always" | "never";
+}
+export type OwnedProjectTrustPrompt = (request: OwnedProjectTrustPromptRequest) => Promise<boolean | null>;
+interface RawTtyInput extends Readable {
+    readonly isTTY?: boolean;
+    readonly isRaw?: boolean;
+    setRawMode?(enabled: boolean): this;
+}
+export interface ConsoleProjectTrustPromptOptions {
+    readonly input?: RawTtyInput;
+    readonly output?: Writable & {
+        readonly isTTY?: boolean;
+        readonly columns?: number;
+    };
+}
+/**
+ * Pre-resource startup selector. It uses only fixed product wording and terminal
+ * controls: no project setting, theme, extension, prompt, package, or skill is
+ * consulted before the trust result exists.
+ */
+export declare function createConsoleProjectTrustPrompt(options?: ConsoleProjectTrustPromptOptions): OwnedProjectTrustPrompt;
+export {};

package/dist/features/owned-ui/project-trust-prompt.js

@@ -0,0 +1,149 @@
+const ENTER_ALTERNATE_SCREEN = "\u001b[?1049h";
+const LEAVE_ALTERNATE_SCREEN = "\u001b[?1049l";
+const HIDE_CURSOR = "\u001b[?25l";
+const SHOW_CURSOR = "\u001b[?25h";
+const CLEAR_HOME = "\u001b[2J\u001b[H";
+const ACCENT = "\u001b[38;2;138;190;183m";
+const MUTED = "\u001b[38;2;128;128;128m";
+const DIM = "\u001b[38;2;102;102;102m";
+const RESET_FG = "\u001b[39m";
+const BOLD = "\u001b[1m";
+const RESET_BOLD = "\u001b[22m";
+/**
+ * Pre-resource startup selector. It uses only fixed product wording and terminal
+ * controls: no project setting, theme, extension, prompt, package, or skill is
+ * consulted before the trust result exists.
+ */
+export function createConsoleProjectTrustPrompt(options = {}) {
+    const input = options.input ?? process.stdin;
+    const output = options.output ?? process.stdout;
+    return async ({ cwd }) => {
+        if (input.isTTY !== true || output.isTTY !== true) {
+            throw new Error("an interactive terminal is unavailable");
+        }
+        const wasRaw = input.isRaw === true;
+        let selected = 0;
+        let restored = false;
+        const restore = () => {
+            if (restored)
+                return;
+            restored = true;
+            input.setRawMode?.(wasRaw);
+            output.write(`${CLEAR_HOME}${SHOW_CURSOR}${LEAVE_ALTERNATE_SCREEN}`);
+        };
+        const render = () => {
+            const width = Math.max(20, output.columns ?? 80);
+            const lines = [
+                `${BOLD}${ACCENT}Trust project folder?${RESET_FG}${RESET_BOLD}`,
+                cwd,
+                "",
+                "This allows A1 to load project settings and resources, install missing project packages, and execute project extensions.",
+                "",
+                optionRow("Trust", selected === 0),
+                optionRow("Do not trust", selected === 1),
+                "",
+                `${DIM}  ↑/↓ to navigate · Enter to select · Esc to cancel${RESET_FG}`,
+            ];
+            output.write(`${CLEAR_HOME}${lines.map(line => clipAnsiSafe(line, width)).join("\n")}`);
+        };
+        try {
+            output.write(`${ENTER_ALTERNATE_SCREEN}${HIDE_CURSOR}`);
+            input.setRawMode?.(true);
+            render();
+            return await new Promise((resolve, reject) => {
+                let settled = false;
+                const finish = (value) => {
+                    if (settled)
+                        return;
+                    settled = true;
+                    cleanup();
+                    restore();
+                    resolve(value);
+                };
+                const fail = (error) => {
+                    if (settled)
+                        return;
+                    settled = true;
+                    cleanup();
+                    restore();
+                    reject(error);
+                };
+                const onData = (chunk) => {
+                    const data = chunk.toString();
+                    for (let index = 0; index < data.length;) {
+                        if (data.startsWith("\u001b[A", index)) {
+                            selected = 0;
+                            index += 3;
+                            render();
+                            continue;
+                        }
+                        if (data.startsWith("\u001b[B", index) || data[index] === "\t") {
+                            selected = selected === 0 ? 1 : 0;
+                            index += data[index] === "\t" ? 1 : 3;
+                            render();
+                            continue;
+                        }
+                        const key = data[index] ?? "";
+                        index += 1;
+                        if (key === "\r" || key === "\n") {
+                            finish(selected === 0);
+                            return;
+                        }
+                        if (key === "\u001b" || key === "\u0003") {
+                            finish(null);
+                            return;
+                        }
+                        // Compatibility: retain y/n aliases for terminals or automation that cannot send
+                        // navigation keys; the visible interaction remains selector-first.
+                        if (key === "y" || key === "Y") {
+                            finish(true);
+                            return;
+                        }
+                        if (key === "n" || key === "N") {
+                            finish(false);
+                            return;
+                        }
+                    }
+                };
+                const onEnd = () => finish(null);
+                const onError = (error) => fail(error);
+                const cleanup = () => {
+                    input.off("data", onData);
+                    input.off("end", onEnd);
+                    input.off("error", onError);
+                };
+                input.on("data", onData);
+                input.once("end", onEnd);
+                input.once("error", onError);
+                input.resume();
+            });
+        }
+        finally {
+            restore();
+        }
+    };
+}
+function optionRow(label, selected) {
+    return selected
+        ? `${ACCENT}→ ${label}${RESET_FG}`
+        : `  ${label}`;
+}
+/** Avoid replaying or manufacturing control payloads while keeping fixed SGR. */
+function clipAnsiSafe(line, width) {
+    let visible = 0;
+    let output = "";
+    for (let index = 0; index < line.length && visible < width;) {
+        if (line[index] === "\u001b") {
+            const match = line.slice(index).match(/^\u001b\[[0-9;:]*m/);
+            if (match !== null) {
+                output += match[0];
+                index += match[0].length;
+                continue;
+            }
+        }
+        output += line[index];
+        index += 1;
+        visible += 1;
+    }
+    return `${output}${RESET_FG}${RESET_BOLD}`;
+}