@timurproko/a1 0.1.8-dev.226 → 0.1.8-dev.259

package/dist/native/darwin-arm64/manifest.json

@@ -4,12 +4,12 @@
   "crateVersion": "0.1.0-dev",
   "platform": "darwin",
   "architecture": "arm64",
-  "capability": "unsupported",
-  "builtAt": "2026-09-03T18:06:08.893Z",
+  "capability": "supported",
+  "builtAt": "2026-09-06T11:53:56.572Z",
   "artifact": {
     "filename": "process-guardian",
-    "sha256": "7524bf568992517f50ed53196c861c5edeba0d7275633bb4735ab45bd5963a28",
-    "size": 356368
+    "sha256": "dc03605e5780e2aeebb4ecafd62868dc673e22ddd38b024a369aff704ff136dc",
+    "size": 393152
   },
   "provenance": {
     "language": "Rust",

package/dist/native/linux-x64/manifest.json

@@ -5,7 +5,7 @@
   "platform": "linux",
   "architecture": "x64",
   "capability": "supported",
-  "builtAt": "2026-09-03T18:05:58.567Z",
+  "builtAt": "2026-09-06T11:53:48.191Z",
   "artifact": {
     "filename": "process-guardian",
     "sha256": "ee8a00eaaf79c707459bbbfb52518e9739314967049fbe5fa625f36ce33db9ee",

package/dist/native/win32-x64/manifest.json

@@ -5,10 +5,10 @@
   "platform": "win32",
   "architecture": "x64",
   "capability": "supported",
-  "builtAt": "2026-09-03T18:06:42.554Z",
+  "builtAt": "2026-09-06T11:54:20.386Z",
   "artifact": {
     "filename": "process-guardian.exe",
-    "sha256": "5e8247ce99c85457ecef2f8f0fd56bbd42796613037563a570fa8ad2b2fb2567",
+    "sha256": "4fc782bdb0b01e3aa12377e9d79d5e8d6222d58b6f0672d60c0dafbef9987586",
     "size": 177664
   },
   "provenance": {

package/dist/ui/components/index.d.ts

@@ -11,6 +11,7 @@ export * from "./revision.js";
 export * from "./scrollbar.js";
 export * from "./shortcuts.js";
 export * from "./spans.js";
+export * from "./visible-hyperlinks.js";
 export * from "./status-line.js";
 export * from "./submitted-prompt.js";
 export * from "./stepper.js";

package/dist/ui/components/index.js

@@ -11,6 +11,7 @@ export * from "./revision.js";
 export * from "./scrollbar.js";
 export * from "./shortcuts.js";
 export * from "./spans.js";
+export * from "./visible-hyperlinks.js";
 export * from "./status-line.js";
 export * from "./submitted-prompt.js";
 export * from "./stepper.js";

package/dist/ui/components/text-selection.js

@@ -15,40 +15,16 @@ export function orderedTextSelection(selection) {
             ...(selection.throughFinalColumn ? { throughFinalColumn: true } : {}),
         };
     }
-    if (selection.cell) {
-        const anchorFirst = comparePoints(anchor, head) <= 0;
-        const first = anchorFirst ? anchor : head;
-        const last = anchorFirst ? head : anchor;
-        return {
-            start: { line: first.line, column: pointBefore(first) },
-            end: { line: last.line, column: pointAfter(last) },
-            ...(selection.throughFinalColumn ? { throughFinalColumn: true } : {}),
-        };
-    }
-    if (selection.dragged !== true)
-        return undefined;
-    const direction = comparePoints(anchor, head);
-    if (direction === 0)
-        return undefined;
-    if (sameGrapheme(anchor, head)) {
-        return {
-            start: { line: anchor.line, column: pointBefore(anchor) },
-            end: { line: anchor.line, column: pointAfter(anchor) },
-        };
-    }
-    const ordered = direction < 0
-        ? {
-            start: { line: anchor.line, column: pointBefore(anchor) },
-            end: { line: head.line, column: pointBefore(head) },
-        }
-        : {
-            start: { line: head.line, column: pointAfter(head) },
-            end: { line: anchor.line, column: pointAfter(anchor) },
-        };
-    if (ordered.start.line === ordered.end.line && ordered.start.column >= ordered.end.column)
+    if (!selection.cell && selection.dragged !== true)
         return undefined;
+    // Invariant: an accepted drag includes both endpoint graphemes, even after returning
+    // to its anchor. Only an unextended point press is empty; paint and copy stay half-open.
+    const anchorFirst = comparePoints(anchor, head) <= 0;
+    const first = anchorFirst ? anchor : head;
+    const last = anchorFirst ? head : anchor;
     return {
-        ...ordered,
+        start: { line: first.line, column: pointBefore(first) },
+        end: { line: last.line, column: pointAfter(last) },
         ...(selection.throughFinalColumn ? { throughFinalColumn: true } : {}),
     };
 }
@@ -224,9 +200,6 @@ function pointBefore(point) {
 function pointAfter(point) {
     return point.to ?? Math.max(0, point.column);
 }
-function sameGrapheme(left, right) {
-    return left.line === right.line && pointBefore(left) === pointBefore(right) && pointAfter(left) === pointAfter(right);
-}
 function comparePoints(left, right) {
     return left.line === right.line ? left.column - right.column : left.line - right.line;
 }

package/dist/ui/components/transcript-viewport.d.ts

@@ -34,6 +34,11 @@ export interface TranscriptViewportFrameInput {
      * notification rows cannot make the control jump vertically.
      */
     readonly bottomControlRow?: number;
+    /** Latest reported one-based terminal coordinates; bottom hover uses this frame's hit region. */
+    readonly pointerPosition?: {
+        readonly column: number;
+        readonly row: number;
+    };
     readonly now?: number;
     readonly theme?: TranscriptViewportTheme;
 }
@@ -56,6 +61,8 @@ export interface TranscriptViewportHitRegions {
         readonly columnStart: number;
         readonly columnEnd: number;
     } | null;
+    /** Transient non-selectable document-tail rows currently visible in the viewport. */
+    readonly transientTail: readonly number[];
 }
 export interface TranscriptViewportFrameDescriptor {
     readonly frameId: number;
@@ -122,7 +129,6 @@ export declare class TranscriptViewport {
     setRailHovered(hovered: boolean): void;
     setRailDragging(dragging: boolean): void;
     setStickyHovered(hovered: boolean): void;
-    setBottomHovered(hovered: boolean): void;
     get selectionActive(): boolean;
     get hasSelection(): boolean;
     pressSelection(column: number, viewportRow: number, now?: number): boolean;
@@ -135,7 +141,7 @@ export declare class TranscriptViewport {
     scrollToEnd(now?: number): boolean;
     /** Jumps to the pinned prompt governing this position, then earlier prompts. */
     scrollToPreviousPrompt(now?: number): boolean;
-    /** Jumps to the next submitted prompt after the prompt at the current stop. */
+    /** Jumps to the next submitted prompt, or resumes following at the bottom. */
     scrollToNextPrompt(now?: number): boolean;
     reset(): void;
     clearTransient(): void;

package/dist/ui/components/transcript-viewport.js

@@ -30,7 +30,6 @@ export class TranscriptViewport {
     #railHovered = false;
     #railDragging = false;
     #stickyHovered = false;
-    #bottomHovered = false;
     #selection;
     #selectionClick;
     #selectionRevision = 0;
@@ -73,7 +72,6 @@ export class TranscriptViewport {
     setRailHovered(hovered) { this.#railHovered = hovered; }
     setRailDragging(dragging) { this.#railDragging = dragging; }
     setStickyHovered(hovered) { this.#stickyHovered = hovered; }
-    setBottomHovered(hovered) { this.#bottomHovered = hovered; }
     get selectionActive() { return this.#selection?.selecting === true; }
     get hasSelection() { return orderedTextSelection(this.#selection) !== undefined; }
     pressSelection(column, viewportRow, now = Date.now()) {
@@ -193,7 +191,7 @@ export class TranscriptViewport {
         const destination = target === earliest ? 0 : target;
         return target >= 0 && this.scrollTo(destination, now);
     }
-    /** Jumps to the next submitted prompt after the prompt at the current stop. */
+    /** Jumps to the next submitted prompt, or resumes following at the bottom. */
     scrollToNextPrompt(now = Date.now()) {
         if (this.#promptAnchors.length === 0)
             return false;
@@ -206,7 +204,7 @@ export class TranscriptViewport {
             if (anchor.firstRow > after && anchor.firstRow < target)
                 target = anchor.firstRow;
         }
-        return Number.isFinite(target) && this.scrollTo(target, now);
+        return Number.isFinite(target) ? this.scrollTo(target, now) : this.scrollToEnd(now);
     }
     reset() {
         this.#scrollTop = 0;
@@ -234,7 +232,6 @@ export class TranscriptViewport {
         this.#railHovered = false;
         this.#railDragging = false;
         this.#stickyHovered = false;
-        this.#bottomHovered = false;
     }
     compose(input) {
         const width = Math.max(1, input.width);
@@ -359,8 +356,12 @@ export class TranscriptViewport {
                 const fallbackRow = Math.max(0, viewportHeight - 1);
                 const row = clamp(input.bottomControlRow ?? fallbackRow, 0, frameRows.length - 1);
                 const left = Math.floor((contentWidth - labelWidth) / 2);
-                frameRows[row] = overlaySpan(padRowPreservingBackground(frameRows[row] ?? "", width), left, left + labelWidth, `${CONTROL_STYLE_RESET}${theme.bottomControl(label, this.#bottomHovered)}`);
                 bottomHit = { row: row + 1, columnStart: left + 1, columnEnd: left + labelWidth };
+                // Invariant: appearance and hit testing share current geometry, even when no mouse moves.
+                const pointer = input.pointerPosition;
+                const bottomHovered = pointer !== undefined && pointer.row === bottomHit.row
+                    && pointer.column >= bottomHit.columnStart && pointer.column <= bottomHit.columnEnd;
+                frameRows[row] = overlaySpan(padRowPreservingBackground(frameRows[row] ?? "", width), left, left + labelWidth, `${CONTROL_STYLE_RESET}${theme.bottomControl(label, bottomHovered)}`);
             }
         }
         const nextDocumentRange = {
@@ -415,6 +416,7 @@ export class TranscriptViewport {
             },
             sticky: stickyActive ? { row: 1, target: governing.firstRow, width: contentWidth } : null,
             bottom: bottomHit,
+            transientTail: Array.from({ length: Math.max(0, Math.min(input.documentRows.length, this.#scrollTop + viewportHeight) - Math.max(this.#scrollTop, this.#selectableDocumentRowCount)) }, (_row, index) => Math.max(this.#scrollTop, this.#selectableDocumentRowCount) - this.#scrollTop + index + 1),
         };
         const frame = {
             rows: frameRows,

package/dist/ui/components/visible-hyperlinks.d.ts

@@ -0,0 +1,19 @@
+export interface VisibleHyperlinkRange {
+    readonly from: number;
+    readonly to: number;
+    readonly target: string;
+    readonly kind: "explicit" | "candidate";
+}
+export interface VisibleHyperlinkRow {
+    readonly ranges: readonly VisibleHyperlinkRange[];
+    /** False for unclosed links, malformed escapes, images, or row-moving controls. */
+    readonly replaySafe: boolean;
+    readonly width: number;
+    /** Paint identity includes labels, not just targets; it never changes source bytes. */
+    readonly signature: string;
+}
+/**
+ * Reads final visible row geometry without decorating text. Candidate ranges
+ * only invalidate host-hover paint; they never invent an explicit link target.
+ */
+export declare function readVisibleHyperlinks(line: string, widthOf?: (text: string) => number): VisibleHyperlinkRow;

package/dist/ui/components/visible-hyperlinks.js

@@ -0,0 +1,64 @@
+import { displayWidth } from "./text.js";
+const TOKENS = /\u001b\[[0-?]*[ -/]*[@-~]|\u001b\][^\u0007\u001b]*(?:\u0007|\u001b\\)|[^\u001b]+|\u001b/gu;
+const LINK = /^\u001b\]8;[^;\u0007\u001b]*;([^\u0007\u001b]*)(?:\u0007|\u001b\\)$/u;
+const SGR = /^\u001b\[[\d;:]*m$/u;
+const SEMANTIC_ZONE = /^\u001b\]133;[ABC](?:\u0007|\u001b\\)$/u;
+// Platform: this is a conservative cleanup detector, NOT a link-activation
+// parser. Hosts recognize URLs, domains and file-like labels without OSC 8.
+const CANDIDATE = /(?:[a-z][a-z\d+.-]*:\/\/[^\s<>"']+|www\.[^\s<>"']+|(?:[a-z]:[\\/]|\.{1,2}[\\/])[^\s<>"']+|[\p{L}\p{N}_-]+(?:\.\p{L}[\p{L}\p{N}_-]+)+(?:[\\/][^\s<>"']+)?)/giu;
+/**
+ * Reads final visible row geometry without decorating text. Candidate ranges
+ * only invalidate host-hover paint; they never invent an explicit link target.
+ */
+export function readVisibleHyperlinks(line, widthOf = displayWidth) {
+    const ranges = [];
+    let plain = "";
+    let column = 0;
+    let active;
+    let replaySafe = true;
+    const finish = () => {
+        if (active !== undefined && column > active.from) {
+            ranges.push({ from: active.from, to: column, target: active.target, kind: "explicit" });
+        }
+        active = undefined;
+    };
+    for (const match of line.matchAll(TOKENS)) {
+        const token = match[0];
+        if (token.startsWith("\u001b")) {
+            const link = LINK.exec(token);
+            if (link !== null) {
+                finish();
+                if (link[1])
+                    active = { from: column, target: link[1] };
+            }
+            else if (!SGR.test(token) && !SEMANTIC_ZONE.test(token))
+                replaySafe = false;
+        }
+        else {
+            if (/[\u0000-\u001f\u007f]/u.test(token))
+                replaySafe = false;
+            plain += token;
+            column += widthOf(token);
+        }
+    }
+    if (active !== undefined) {
+        replaySafe = false;
+        finish();
+    }
+    for (const match of plain.matchAll(CANDIDATE)) {
+        const from = widthOf(plain.slice(0, match.index));
+        const to = from + widthOf(match[0]);
+        if (!ranges.some(range => from < range.to && to > range.from)) {
+            ranges.push({ from, to, target: match[0], kind: "candidate" });
+        }
+    }
+    ranges.sort((left, right) => left.from - right.from);
+    return {
+        ranges,
+        replaySafe,
+        width: column,
+        // Rationale: a path with spaces or a wrapped host match may extend beyond
+        // the conservative candidate. Changes anywhere in that row invalidate it.
+        signature: ranges.length === 0 ? "" : JSON.stringify([ranges, plain]),
+    };
+}

package/docs/architecture/process-guardian-provenance.md

@@ -8,6 +8,8 @@ The executable owns platform process containment and launches one immutable `a1-
 
 On Windows it uses `windows-sys 0.61.2` to create a Job Object, enables `JOB_OBJECT_LIMIT_KILL_ON_JOB_CLOSE`, assigns the runtime before resuming it, denies silent breakaway by never enabling breakaway limits, monitors the verified Node parent process, and terminates remaining job members after root or parent exit.
 
+On Linux and macOS it creates a dedicated POSIX process group before exec, transfers foreground-terminal ownership only when a terminal is present, monitors the verified parent, applies bounded TERM/KILL cleanup to that group, and restores the prior foreground group. Linux derives process start identity from procfs. macOS derives it from the native `proc_pidinfo(PROC_PIDTBSDINFO)` start timestamp; PID liveness alone is never treated as identity.
+
 ## Artifact contract
 
 Release builds place the exact executable at:
@@ -19,7 +21,7 @@ dist/native/darwin-x64/process-guardian
 dist/native/darwin-arm64/process-guardian
 ```
 
-Each supported artifact must be named in the release integrity manifest with target triple, crate version, guardian protocol version, SHA-256, byte size, build provenance, and signature/attestation status. A missing, altered, incompatible, or wrong-platform artifact is a concise unsupported-containment launch error; A1 never silently falls back to PID-only cleanup.
+Each supported artifact must be named in the release integrity manifest with target triple, crate version, guardian protocol version, SHA-256, byte size, build provenance, and signature/attestation status. The build marks a platform supported only after its native containment integration runs on that platform. A missing, altered, incompatible, unsupported, or wrong-platform artifact is a concise containment launch error; A1 never silently falls back to PID-only cleanup.
 
 ## Licensing
 

package/docs/architecture/ui-reference-provenance.md

@@ -35,6 +35,8 @@ its own `core` facade layer; A1 is a product, so the port adapts imports and kee
 
 | A1 module | Pinned Pi source | Adaptation |
 | --- | --- | --- |
+| `src/cli/package-messages.ts`, `src/cli/packages.ts`, and `src/integrations/pi/engine/package-integration.ts` — package/model CLI messages | Pi 0.84.2 `packages/coding-agent/src/package-manager-cli.ts` and public `DefaultPackageManager` at commit `914cf1472e715297caa30db4b9535d534a9eb718` | Preserves terminal-aware Chalk success/error/progress styling, literal model-refresh messages, operational details, and user-settings warnings. Focused syntax/help substitutes the `a1 pi` namespace and supported grammar; A1 syntax exit status remains two. Profile isolation and independent-Pi-update rejection remain intentional. Independent CLI evidence: `test/cli/package-message-parity.test.ts` runs the untouched pinned CLI presenter in an isolated process with model-runtime test substitution, not A1-generated expected strings. This does not certify the still-pending interactive message outcomes. |
+| `pi-engine-adapter/adapter.ts`, `engine/workflows.ts`, and `pi-session-ui/session-shell.ts` — interactive command outcomes | Pi 0.84.2 `modes/interactive/interactive-mode.ts`, `core/model-resolver.ts`, and `config.ts` at commit `914cf1472e715297caa30db4b9535d534a9eb718` | Preserves route-specific status/warning/error semantics, authentication partial-success sequences, stored-credential logout wording, fork/clone empty states, import context/recovery, share URL and failure/cancellation behavior, and post-login warning lifetime. A1 deliberately returns recoverable failed workflow results instead of adopting Pi's process-owning shutdown/exit for fatal `/new`, `/resume`, and `/import` outcomes. Focused outcome evidence is in `test/integrations/pi/engine/workflows.test.ts` and `test/integrations/pi/session-ui/session-shell.test.ts`; terminal-cell geometry remains a separate milestone. |
 | `pi-engine-adapter/settings-integration.ts` — `SETTING_LABELS` | pinned Pi settings selector | Labels and descriptions transcribed so an owned screen reads as the vanilla route words it. Ids are mapped from the selector kebab-case to the exposed camelCase keys. |
 | `pi-engine/session-integration.ts` and `pi-components/shell-footer-status.ts` — steering queue | pinned Pi interactive mode `onSubmit` and `updatePendingMessagesDisplay` | Steering/follow-up uses `prompt(..., { streamingBehavior })`, allowing Pi to emit the accepted user row, while remaining steering rows preserve Pi's opening spacer, dim `Steering:` labels, dequeue hint, and order before `Working`. |
 | `ui-components/list-view.ts`, `dialog-panel.ts`, `value-menu.ts`, and `features/owned-ui/settings-app.ts` — setting presentation | pinned Pi `SettingsSelectorComponent`, Pi TUI `SettingsList`, `SelectList`, and `Input` at `0.84.2` | Cursor, selected label/value accents, unselected muted values, the 30-column label cap, dialog styling, notices, and narrow-width geometry retain pinned semantics. Scalar-menu placement and input remain shared, while A1/Agent grouping, pointer steppers, explicit `/` search, ruled shared input, shortcut-derived status hints, suppressed selected descriptions, `scrollbarSpeed`-driven wheel movement, and the dark floating menu with lighter active row and effective-value check mark are declared product-owned differences. Independent row evidence: `test/features/owned-ui/pinned-settings-presentation-parity.test.ts`; owned interaction evidence: `test/features/owned-ui/settings-app.test.ts`, `test/ui/components/value-menu.test.ts`, and `test/composition/settings-route-host.test.ts`. |

package/docs/ci-release-runbook.md

@@ -98,7 +98,7 @@ node scripts/release/report-resource-sensitive-validation.mjs --repeats 3 --outp
 
 ## Pull request integration
 
-`Development validation required` remains the merge gate for every pull request.
+`Development validation required` remains the merge gate for every pull request. For code changes, it also requires a dedicated Defender-enabled exact-package startup matrix on Windows Node 22 and 24. Each matrix lane runs the package-install startup scenarios once: a failed budget remains failed and is never retried to obtain a warmed result. Both post-update profiles must reach input-ready state within five seconds, and both warm profiles must remain within three seconds.
 Documentation auto-merge reads the complete GitHub changed-file response and arms
 squash auto-merge for an eligible pull request while required validation is pending;
 branch protection prevents integration until `Development validation required`

package/docs/features/launch-profiles.md

@@ -4,7 +4,8 @@
 
 | Command | Purpose | Pi user profile |
 |---|---|---|
-| `a1` | A1-owned Pi-compatible UI | `~/.a1/agent` |
+| `a1` | Fresh A1-owned Pi-compatible UI session | `~/.a1/agent` |
+| `a1 --session <path\|id>` | Resume a persisted A1 session | `~/.a1/agent` (or explicitly selected storage) |
 | `a1 pi` | Pi-compatible comparison surface using the ordinary Pi profile | ordinary `~/.pi/agent` |
 
 `a1 pi` is a development instrument for comparing A1 against pinned Pi. Prerelease builds — what `a1 update --develop` or `a1 update --develop <number>` installs — expose it. A release build does not recognize the launch form. Repository development can run the comparison directly with `npm start:pi`.
@@ -30,6 +31,21 @@ npm/
 
 Run Pi’s normal `/login` independently in each profile that needs stored authentication. Provider credentials supplied through supported environment variables remain available to Pi, but profile authentication files never fall back to another root automatically.
 
+## Resume a session
+
+After a conversation has been persisted, exit A1 and run the command it prints from the original project directory:
+
+```sh
+a1 --session <id>
+a1 --session-dir '/path/to/session store' --session <id>
+```
+
+`--session` also accepts a `.jsonl` file path; `--session-dir` may come before or after it. Explicit storage overrides `PI_CODING_AGENT_SESSION_DIR`, which overrides default storage. IDs are searched in the current project before other projects within the A1 store. A cross-project ID match asks before creating a fork with a new identity; an explicit file resumes directly using its stored working directory. Missing or invalid targets fail rather than create an empty replacement.
+
+Resume uses the shipped Pi's public restoration behavior, including the compaction format it writes. It sends no model prompt by itself and does not recover, convert, or modify an unrelated conversation. Bare `a1` remains a fresh launch. Pi picker/continue CLI aliases and `a1 pi --session` are not supported by this repair; in-UI `/resume` is unchanged.
+
+Regression evidence creates disposable sessions through Pi 0.84.2, then executes the emitted command through the packed public entry, bootstrap, guardian, and owned UI. Default/custom storage, Windows Git Bash quoting, supervisor restart, failure cleanup, and simultaneous distinct selections are covered in `test/foundation/release/session-resume.integration.test.ts`. CI runs it in the resource-sensitive `package-smoke` scope, not the fast remainder. Unsupported synthetic retained-tail certification is separate deferred work.
+
 ## Pi comparison profile
 
 `a1 pi` uses the same A1-owned rendering and input pipeline as bare `a1`, but withholds A1-specific screens and removes A1’s Pi configuration-root override. The pinned Pi engine therefore uses its normal `~/.pi/agent` settings, authentication, sessions, resources, packages, and trust decisions. Running the standalone `pi` command remains the independent upstream reference.

package/docs/manual-ghost-link-baseline.md

@@ -0,0 +1,89 @@
+# Ghost hyperlink underline baseline
+
+## Status and scope
+
+This is the diagnostic stage of `fix-ghost-link-underlines`, accepted in specification PR #237. It does **not** repair production rendering or claim the screenshot's root cause is proven.
+
+Two executable regressions reproduce the code gaps: the damage adapter removes a requested full clear when the last visible link disappears; the viewport controller does not request cleanup when a hovered link changes bounds on the same row with the same target. Both were run as ordinary tests and failed at those exact assertions, with the other 22 controller/adapter tests passing. During baseline review they use Vitest's `it.fails`, not a skip: the known failure must still occur, and an unexpected pass fails the suite. The repair must remove those markers in tasks 2.2 and 3.2.
+
+The standalone protocol fixture drives the **real A1 damage adapter** with the pinned complete-row write grammar. It does not launch A1, Pi, or an agent and does not simulate their complete rendering/input pipeline. In particular it cannot establish shell overlay, selection, or streaming acceptance. It separates emitted-byte evidence from the host's native-hover decoration so those later tests do not mistake a passing controller assertion for a fixed visual bug.
+
+## Confirmed physical baseline
+
+The user reports that in **mode 2 (auto-detected)**, wheel scrolling moves the hovered link upward while its underline remains under the stationary pointer briefly, then disappears. That transient trail is a failure, not successful cleanup.
+
+The clean `f3613bb` run at 123 columns by 29 rows (`run-smbQ70/trace.jsonl`) records `ghost: true` in auto-detected mode after a downward wheel scroll at scroll position 9. The immediately preceding frame, 214, contains no explicit OSC 8 target opens, and the adapter reports `suppressed-redundant-clear`; its forwarded write has no full-screen clear. This confirms an auto-detection reproduction but does not prove that restoring the clear will fix it. The recorded one-shot `f` comparisons were in explicit mode, with no observation establishing their effect on the auto-detected case. Terminal version and the precise host detection setting remain unrecorded.
+
+The persistent-clear comparison below avoids asking the user to press `f` before the short-lived artifact disappears. It changes the diagnostic write path only; production behavior and terminal settings remain unchanged. The user reports that **CLEAR:ON helps** for the confirmed mode-2 case. This supports preserving the complete clear in the production repair, but does not by itself prove the artifact is completely absent in the built A1 candidate.
+
+The test host is Windows Terminal `1.24.2607.10001`, determined from the running executable after the comparison. Its settings file contains no explicit global, profile-default, or per-profile `experimental.detectURLs` override; therefore the effective host default applies. The fixture geometry was 123 by 29. Explicit-mode reproduction remains unconfirmed and is recorded as unknown rather than assumed clean.
+
+## Run in Windows Terminal / Git Bash
+
+From the implementation checkout, with dependencies installed:
+
+```sh
+./scripts/pi/reproduce-ghost-link-underlines
+```
+
+This shell entry preserves VT color. It uses `tsx` directly, so no application build is needed for this standalone probe. It is not a substitute for the eventual built-candidate `./scripts/dev` acceptance run.
+
+Optional host facts can be recorded explicitly; use the actual version from Windows Terminal's About page and the actual automatic URL-detection setting, without changing either:
+
+```sh
+./scripts/pi/reproduce-ghost-link-underlines --terminal-version YOUR_VERSION --url-detection enabled
+```
+
+Missing facts are recorded as `unknown`, not inferred. Use a terminal wide enough to display the controls (192 columns by 54 rows is a useful comparison geometry).
+
+## Persistent clear comparison for the confirmed auto-detection case
+
+```sh
+./scripts/pi/reproduce-ghost-link-underlines --auto --preserve-clears
+```
+
+This starts directly in mode 2 with **CLEAR:ON**. Every frame, including every wheel-scroll frame, sends the requested complete synchronized clear-and-repaint directly to the terminal. It is a labelled control experiment, not an implemented A1 fix.
+
+Hover a link and scroll with the wheel while keeping the pointer stationary. Record **y** if any underline trail remains, even if it disappears shortly afterward; record **n** only if this case stays clean. Press **p** to switch to **CLEAR:OFF**, restore the same content position with **r**, and compare the same gesture through the existing adapter. **p** persists across subsequent scrolls, mode changes, and resets. The status row always shows its state. Press **q** to exit.
+
+Trace format 2 records `preserveClears` and actual `bypass` state separately on frames and observations. If the trail survives CLEAR:ON, merely preserving the full clear is insufficient for this reproduced host behavior; further diagnosis is required before choosing the production cleanup strategy.
+
+## Observe and record
+
+1. Press **1** for explicit OSC 8 links. Hover the long label, a file label, or a wrapped URL. Keep the pointer stationary and press **x** to replace the content with blank green rows. Also inspect those former cells by hovering them again.
+2. Press **y** if a ghost underline is visible or **n** if the current case is clean. These keys record a **human** observation of the preceding action; capture a screenshot before pressing them because feedback itself repaints.
+3. If a ghost is visible, press **f**. This sends the complete clear directly to the terminal, bypassing the optimizer for this one control experiment. Record **y** or **n** again. The trace labels bypass writes so they cannot be mistaken for production output.
+4. Press **r** to restore the current mode. Hover the long label at its left side and press **b** to shorten/reposition it. Record the result. This visual fixture does not exercise the controller's hover-key logic; the controller regression covers that independently.
+5. Restore with **r** and use the wheel or **j/k** to scroll while the pointer remains stationary. Scroll until all links are above the screen, then hover plain text and blank rows. Record the result, including cases that do **not** reproduce.
+6. Press **2** for the same labels without explicit OSC 8 targets; repeat blanking, scrolling, and the forced-clear comparison. Whether these labels become links is controlled by Windows Terminal's own detection. The file-like tool rows are deliberately not wrapped in OSC 8 in either mode.
+7. Press **q** or Ctrl+C to restore the terminal. Report the terminal version, automatic URL-detection setting, observations, and screenshot if the symptom occurs.
+
+The fixture does not implement link activation. The host may still handle its normal hyperlink gestures; the explicit file target is this checkout's `package.json`, and web targets use the reserved `example.invalid` domain.
+
+## Built A1 candidate
+
+The implementation branch `fix/ghost-link-underlines` now carries the production repair. Build it, launch the color-preserving repository entry, produce output containing web URLs, file paths, and linked file labels, and test all of the following while leaving the pointer stationary over a link:
+
+- wheel-scroll the link upward and downward;
+- use Home/End, Shift+Up/Down, the scrollbar, and followed streaming output;
+- resize or reflow the terminal so the link changes row or width;
+- select linked content, edge-auto-scroll, release, and copy;
+- let linked content leave the viewport and hover the resulting plain and blank cells.
+
+Expected: the underline moves with current link cells and never remains under the pointer, even briefly; current links remain clickable and retain their colors; copied text is unchanged; no blank intermediate screen is visible. The implementation limits complete cleanup frames to transitions involving visible explicit or conservative host-detected link candidates. Stable dock typing and motion within one unchanged link retain bounded differential paint.
+
+Known gaps before acceptance: the exact built candidate still needs physical Windows Terminal review; explicit-mode baseline behavior was not confirmed; required code CI has not yet been recorded; and user acceptance remains open.
+
+## Evidence and limitations
+
+Each run creates its own ignored `.artifacts/ghost-link-baseline/run-*/trace.jsonl`. It records checkout commit and dirty status, supplied host facts, geometry, requested writes, actual forwarded writes, adapter decisions, probe input, and explicit human observations. It captures only the synthetic fixture, not an agent conversation. Review local file targets before sharing the trace.
+
+For noninteractive protocol evidence:
+
+```sh
+./scripts/pi/reproduce-ghost-link-underlines --capture
+```
+
+Capture mode always records `physical-result: not-observed`. Final text, closed OSC 8 sequences, and a preserved clear cannot prove that Windows Terminal discarded its hover overlay. A clean probe also does not disprove the original A1 screenshot: the complete UI pipeline still needs review.
+
+Baseline task 1.2 remains incomplete: the mode-2 failure, host facts, and a helpful persistent-clear comparison are recorded, but explicit-mode and fully-clean control outcomes have not been confirmed. The remaining production repair and exact-candidate acceptance tasks remain open. If the preserved-clear control still ghosts, that is evidence to investigate before assuming clear preservation alone is sufficient.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@timurproko/a1",
-  "version": "0.1.8-dev.226",
+  "version": "0.1.8-dev.259",
   "description": "Standalone terminal workspace for supervised native and managed agents",
   "type": "module",
   "packageManager": "npm@11.13.0",