@timurproko/a1 0.1.8-dev.279 → 0.1.8-dev.287

package/bin/ui.js

@@ -2,6 +2,16 @@
 
 const startup = await import("../dist/foundation/startup/index.js");
 startup.enableEnvironmentCompileCache(process.env);
+const profile = process.env.A1_LAUNCH_PROFILE ?? "a1";
+const { installFatalExit } = await import("../dist/foundation/terminal-cleanup/index.js");
+const { resolveProductPaths } = await import("../dist/foundation/lifecycle/index.js");
+const { join } = await import("node:path");
+let runningApplication;
+const fatal = profile === "a1" ? installFatalExit({
+  directory: join(resolveProductPaths().runtimeDir, "crashes"),
+  releaseId: process.env.A1_RELEASE_ID,
+  dispose: () => runningApplication?.dispose(),
+}) : undefined;
 // Performance: begin the exact launch graph together while the trace write is pending.
 // Direct owned-module entries avoid evaluating unrelated barrel exports before first paint.
 const modules = Promise.all([
@@ -32,7 +42,6 @@ assertSinglePiTuiModuleAtLaunch(fileURLToPath(new URL("..", import.meta.url)), m
 await startup.markStartupPhase(process.env, "ui-modules-loaded");
 
 const sessionSelection = parseSessionSelection(process.argv.slice(2));
-const profile = process.env.A1_LAUNCH_PROFILE ?? "a1";
 Promise.resolve().then(() => {
   if (sessionSelection && profile !== "a1") throw new Error("session selection requires the normal A1 profile");
   return runSelectedInteractiveRuntime(profile, {
@@ -45,12 +54,15 @@ Promise.resolve().then(() => {
         sessionForkPrompt: createConsoleSessionForkPrompt(),
         ...(sessionSelection === undefined ? {} : { sessionSelection }),
       });
+      runningApplication = application;
       return await runOwnedUi({ application, ...(settings === null ? {} : { settings }) });
     },
   });
 }).then(
-  code => { process.exitCode = code; },
+  code => { fatal?.remove(); process.exitCode = code; },
   error => {
+    if (fatal && error?.name !== "PiSessionSelectionError") { fatal.fail(error); return; }
+    fatal?.remove();
     console.error(error instanceof Error ? error.message : String(error));
     process.exitCode = error?.name === "PiSessionSelectionError" ? error.exitCode : 1;
   },

package/dist/contracts/owned-ui/image-attachments.d.ts

@@ -0,0 +1,20 @@
+import type { OwnedUiImageAttachment } from "./model.js";
+export declare const MAX_PROMPT_IMAGES = 8;
+/** Limit applies to canonical ASCII base64, not decoded image bytes. */
+export declare const MAX_IMAGE_DATA_BYTES: number;
+declare const MESSAGES: {
+    readonly "image-size": "Image exceeds the 8 MiB encoded base64 limit. Reduce the image size and paste it again.";
+    readonly "image-count": "A prompt supports at most 8 images. Remove an attachment before adding another.";
+    readonly "image-data": "Image data is invalid. Paste a valid image again.";
+    readonly "image-mime": "Image MIME type is invalid. Paste a supported image again.";
+};
+/** Trusted, payload-free diagnostics for user-correctable attachment failures. */
+export declare class ImageAttachmentError extends TypeError {
+    readonly code: keyof typeof MESSAGES;
+    constructor(code: keyof typeof MESSAGES);
+}
+/** Checks encoded length before decoding or copying a clipboard payload. */
+export declare function assertImageEncodedSize(data: string): void;
+/** Final command admission also covers restored and deferred non-clipboard inputs. */
+export declare function assertPromptImages(images: readonly OwnedUiImageAttachment[]): void;
+export {};

package/dist/contracts/owned-ui/image-attachments.js

@@ -0,0 +1,42 @@
+export const MAX_PROMPT_IMAGES = 8;
+/** Limit applies to canonical ASCII base64, not decoded image bytes. */
+export const MAX_IMAGE_DATA_BYTES = 8 * 1024 * 1024;
+const MESSAGES = {
+    "image-size": "Image exceeds the 8 MiB encoded base64 limit. Reduce the image size and paste it again.",
+    "image-count": "A prompt supports at most 8 images. Remove an attachment before adding another.",
+    "image-data": "Image data is invalid. Paste a valid image again.",
+    "image-mime": "Image MIME type is invalid. Paste a supported image again.",
+};
+/** Trusted, payload-free diagnostics for user-correctable attachment failures. */
+export class ImageAttachmentError extends TypeError {
+    code;
+    constructor(code) {
+        super(MESSAGES[code]);
+        this.code = code;
+        this.name = "ImageAttachmentError";
+    }
+}
+/** Checks encoded length before decoding or copying a clipboard payload. */
+export function assertImageEncodedSize(data) {
+    if (typeof data !== "string" || data.length === 0)
+        throw new ImageAttachmentError("image-data");
+    if (Math.ceil(data.length / 4) * 4 > MAX_IMAGE_DATA_BYTES)
+        throw new ImageAttachmentError("image-size");
+}
+/** Final command admission also covers restored and deferred non-clipboard inputs. */
+export function assertPromptImages(images) {
+    if (!Array.isArray(images) || images.length > MAX_PROMPT_IMAGES)
+        throw new ImageAttachmentError("image-count");
+    for (const image of images) {
+        if (!image || image.type !== "image")
+            throw new ImageAttachmentError("image-data");
+        assertImageEncodedSize(image.data);
+        if (!/^[A-Za-z0-9+/]+={0,2}$/.test(image.data) || image.data.length % 4 !== 0
+            || Buffer.from(image.data, "base64").toString("base64") !== image.data) {
+            throw new ImageAttachmentError("image-data");
+        }
+        if (typeof image.mimeType !== "string" || image.mimeType.length > 256 || !/^image\/[a-z0-9.+-]+$/i.test(image.mimeType)) {
+            throw new ImageAttachmentError("image-mime");
+        }
+    }
+}

package/dist/contracts/owned-ui/index.d.ts

@@ -1,4 +1,5 @@
 export * from "./extension-ui.js";
 export * from "./model.js";
+export * from "./image-attachments.js";
 export * from "./prompt-suggestions.js";
 export * from "./validation.js";

package/dist/contracts/owned-ui/index.js

@@ -1,4 +1,5 @@
 export * from "./extension-ui.js";
 export * from "./model.js";
+export * from "./image-attachments.js";
 export * from "./prompt-suggestions.js";
 export * from "./validation.js";

package/dist/contracts/owned-ui/validation.js

@@ -1,12 +1,11 @@
 import { OWNED_UI_CONTRACT_VERSION, } from "./model.js";
+import { assertPromptImages } from "./image-attachments.js";
 const MAX_ID_LENGTH = 128;
 const MAX_LABEL_LENGTH = 256;
 const MAX_MESSAGE_LENGTH = 4_096;
 const MAX_TEXT_BYTES = 256 * 1024;
 const MAX_PAYLOAD_BYTES = 64 * 1024;
 const MAX_SESSION_VIEW_BYTES = 1024 * 1024;
-const MAX_IMAGE_DATA_BYTES = 8 * 1024 * 1024;
-const MAX_PROMPT_IMAGES = 8;
 const MAX_BLOCKS = 10_000;
 const MAX_CUSTOMIZATIONS = 1_000;
 const MAX_DIAGNOSTICS = 1_000;
@@ -57,13 +56,7 @@ export function assertOwnedUiCommand(command) {
         case "follow-up":
             assertBoundedText(command.text, "owned-UI prompt text", MAX_TEXT_BYTES);
             if (command.images !== undefined) {
-                assertCollection(command.images, "owned-UI prompt images", MAX_PROMPT_IMAGES);
-                for (const image of command.images) {
-                    if (image.type !== "image")
-                        throw new TypeError("owned-UI prompt image type is invalid");
-                    assertBoundedText(image.data, "owned-UI prompt image data", MAX_IMAGE_DATA_BYTES);
-                    assertBoundedText(image.mimeType, "owned-UI prompt image MIME type", MAX_LABEL_LENGTH);
-                }
+                assertPromptImages(command.images);
             }
             return;
         case "abort":

package/dist/features/owned-ui/run.js

@@ -1,6 +1,9 @@
 import { markStartupPhase } from "../../foundation/startup/index.js";
+import { boundedCleanup } from "../../foundation/terminal-cleanup/index.js";
 export async function runOwnedUi(options) {
     const { application, settings } = options;
+    let failed = false;
+    let originalFailure;
     try {
         if (settings)
             await settings.load();
@@ -11,7 +14,19 @@ export async function runOwnedUi(options) {
             await application.waitUntilStopped();
         return 0;
     }
+    catch (error) {
+        failed = true;
+        originalFailure = error;
+        throw error;
+    }
     finally {
-        await application.dispose();
+        try {
+            await boundedCleanup(() => application.dispose(), 2500);
+        }
+        catch (error) {
+            if (failed)
+                throw new AggregateError([originalFailure, error], "Owned UI run and cleanup failed", { cause: originalFailure });
+            throw error;
+        }
     }
 }

package/dist/foundation/release/bootstrap.js

@@ -1,4 +1,5 @@
 import { spawn } from "node:child_process";
+import { restoreAfterOwnedExit } from "../terminal-cleanup/index.js";
 import { chmod, mkdir, readFile, rm, writeFile } from "node:fs/promises";
 import { connect } from "node:net";
 import { platform } from "node:os";
@@ -234,7 +235,7 @@ async function launchUi(release, environment, sessionArgs) {
             windowsHide: false,
         });
         child.once("error", rejectPromise);
-        child.once("close", (code, signal) => resolvePromise(code ?? (signal ? 1 : 0)));
+        child.once("close", (code, signal) => resolvePromise(restoreAfterOwnedExit(environment[PRODUCT_IDENTITY.environment.launchProfile] === "a1", code, signal)));
     });
 }
 export function releaseEnvironment(environment, release) {

package/dist/foundation/terminal-cleanup/fatal-exit.d.ts

@@ -0,0 +1,12 @@
+export interface FatalExitOptions {
+    readonly directory: string;
+    readonly releaseId?: string;
+    readonly restore?: () => void;
+    readonly dispose?: () => Promise<unknown> | void;
+    readonly timeoutMs?: number;
+}
+export declare function writeFatalDiagnostic(directory: string, origin: string, error: unknown, releaseId?: string): Promise<string | null>;
+export declare function installFatalExit(options: FatalExitOptions): {
+    fail(error: unknown): void;
+    remove(): void;
+};

package/dist/foundation/terminal-cleanup/fatal-exit.js

@@ -0,0 +1,85 @@
+import { randomUUID } from "node:crypto";
+import { mkdir, readdir, unlink, writeFile } from "node:fs/promises";
+import { writeSync } from "node:fs";
+import { join } from "node:path";
+import { boundedCleanup, restoreProcessTerminal } from "./terminal-reset.js";
+export async function writeFatalDiagnostic(directory, origin, error, releaseId) {
+    try {
+        // Security: only known classifications and code locations are retained. Error messages,
+        // function names, arbitrary paths, and request objects are never persisted.
+        const cleanupFailed = error instanceof AggregateError && error.cause instanceof Error;
+        const primary = cleanupFailed ? error.cause : error;
+        const classification = primary instanceof TypeError ? "TypeError" : primary instanceof RangeError ? "RangeError" : "Error";
+        const stack = primary instanceof Error && typeof primary.stack === "string" ? primary.stack.slice(0, 32768) : "";
+        const locations = stack.split("\n").slice(1).flatMap(line => {
+            const match = /\/(?:dist|src)\/([a-zA-Z0-9_./-]+\.[cm]?[jt]s):(\d+):(\d+)\)?$/.exec(line.replaceAll("\\", "/"));
+            return match ? [{ file: match[1].slice(0, 160), line: Number(match[2]), column: Number(match[3]) }] : [];
+        }).slice(0, 16);
+        const record = {
+            timestamp: new Date().toISOString(),
+            origin: ["uncaughtException", "unhandledRejection", "entry"].includes(origin) ? origin : "entry",
+            classification, cleanupFailed, locations, node: process.version, platform: process.platform,
+            releaseId: releaseId && /^[a-zA-Z0-9._-]{1,128}$/.test(releaseId) ? releaseId : "unknown",
+        };
+        await mkdir(directory, { recursive: true, mode: 0o700 });
+        const name = `fatal-${Date.now()}-${randomUUID()}.json`;
+        const path = join(directory, name);
+        const text = JSON.stringify(record, null, 2);
+        if (Buffer.byteLength(text) > 16 * 1024)
+            return null;
+        await writeFile(path, text, { flag: "wx", mode: 0o600 });
+        const names = (await readdir(directory)).filter(file => /^fatal-\d+-[a-f0-9-]+\.json$/.test(file)).sort().reverse();
+        await Promise.all(names.slice(10).map(file => unlink(join(directory, file)).catch(() => undefined)));
+        return path;
+    }
+    catch {
+        return null;
+    }
+}
+export function installFatalExit(options) {
+    let failing = false;
+    const restore = () => { try {
+        (options.restore ?? restoreProcessTerminal)();
+    }
+    catch { } };
+    const terminate = (origin, error) => {
+        if (failing)
+            return;
+        failing = true;
+        process.exitCode = 1;
+        // Security: stop accepting input immediately; fatal errors never resume normal work.
+        try {
+            process.stdin.pause();
+            process.stdin.removeAllListeners("data");
+        }
+        catch { }
+        restore();
+        let record = null;
+        let finished = false;
+        const finish = () => {
+            if (finished)
+                return;
+            finished = true;
+            restore();
+            try {
+                const location = record?.replace(/[\x00-\x1f\x7f]/g, "").slice(0, 512);
+                writeSync(2, `A1 stopped after an unexpected error.${location ? ` Diagnostic: ${location}` : " Diagnostic storage unavailable."}\n`);
+            }
+            catch { }
+            process.exit(1);
+        };
+        const deadline = setTimeout(finish, options.timeoutMs ?? 1000);
+        void Promise.all([
+            writeFatalDiagnostic(options.directory, origin, error, options.releaseId).then(path => { record = path; }),
+            boundedCleanup(() => options.dispose?.(), options.timeoutMs ?? 1000).catch(() => undefined),
+        ]).then(() => { clearTimeout(deadline); finish(); }, finish);
+    };
+    const exception = (error) => terminate("uncaughtException", error);
+    const rejection = (error) => terminate("unhandledRejection", error);
+    process.on("uncaughtException", exception);
+    process.on("unhandledRejection", rejection);
+    return {
+        fail: error => terminate("entry", error),
+        remove() { process.off("uncaughtException", exception); process.off("unhandledRejection", rejection); },
+    };
+}

package/dist/foundation/terminal-cleanup/index.d.ts

@@ -0,0 +1,2 @@
+export * from "./terminal-reset.js";
+export * from "./fatal-exit.js";

package/dist/foundation/terminal-cleanup/index.js

@@ -0,0 +1,2 @@
+export * from "./terminal-reset.js";
+export * from "./fatal-exit.js";

package/dist/foundation/terminal-cleanup/terminal-reset.d.ts

@@ -0,0 +1,4 @@
+export declare const EMERGENCY_TERMINAL_RESET: string;
+export declare function restoreProcessTerminal(): void;
+export declare function restoreAfterOwnedExit(ownsTerminal: boolean, code: number | null, signal: string | null, restore?: () => void): number;
+export declare function boundedCleanup(cleanup: () => Promise<unknown> | void, timeoutMs?: number): Promise<void>;

package/dist/foundation/terminal-cleanup/terminal-reset.js

@@ -0,0 +1,40 @@
+import { writeSync } from "node:fs";
+// Protocol: reset modes on both screens; setting keyboard flags to zero is idempotent,
+// unlike repeatedly popping a keyboard-protocol stack owned by a parent application.
+export const EMERGENCY_TERMINAL_RESET = "\x1b[?2026l\x1b[?1000l\x1b[?1002l\x1b[?1003l\x1b[?1004l\x1b[?1006l"
+    + "\x1b[?2004l\x1b[=0u\x1b[>4;0m\x1b]8;;\x1b\\\x1b[0m\x1b[r\x1b[?7h\x1b[?25h"
+    + "\x1b[?1049l\x1b[r\x1b[?7h\x1b[?25h\x1b]9;4;0\x07";
+export function restoreProcessTerminal() {
+    try {
+        if (process.stdout.isTTY)
+            writeSync(process.stdout.fd, EMERGENCY_TERMINAL_RESET);
+    }
+    catch { }
+    try {
+        if (process.stdin.isTTY)
+            process.stdin.setRawMode(false);
+    }
+    catch { }
+}
+export function restoreAfterOwnedExit(ownsTerminal, code, signal, restore = restoreProcessTerminal) {
+    const outcome = code ?? (signal ? 1 : 0);
+    if (ownsTerminal && outcome !== 0) {
+        try {
+            restore();
+        }
+        catch { }
+    }
+    return outcome;
+}
+export async function boundedCleanup(cleanup, timeoutMs = 1000) {
+    let timer;
+    try {
+        await Promise.race([
+            Promise.resolve().then(cleanup),
+            new Promise((_, reject) => { timer = setTimeout(() => reject(new Error("Cleanup deadline exceeded")), timeoutMs); }),
+        ]);
+    }
+    finally {
+        clearTimeout(timer);
+    }
+}

package/dist/integrations/pi/session-ui/clipboard-image.js

@@ -1,3 +1,4 @@
+import { assertImageEncodedSize } from "../../../contracts/owned-ui/index.js";
 const STANDARD_BASE64 = /^[A-Za-z0-9+/]*={0,2}$/u;
 /**
  * Converts valid padded or unpadded standard base64 into its unique padded form.
@@ -9,7 +10,10 @@ export function canonicalizeClipboardImage(image) {
     return data === null ? null : { data, mimeType: image.mimeType };
 }
 export function canonicalizeStandardBase64(value) {
-    if (value.length === 0 || !STANDARD_BASE64.test(value))
+    if (typeof value !== "string" || value.length === 0)
+        return null;
+    assertImageEncodedSize(value);
+    if (!STANDARD_BASE64.test(value))
         return null;
     const paddingStart = value.indexOf("=");
     const core = paddingStart < 0 ? value : value.slice(0, paddingStart);

package/dist/integrations/pi/session-ui/prompt-chips.d.ts

@@ -11,7 +11,7 @@ export interface PreparedPrompt {
 /** Owns semantic clipboard records while the prompt displays compact chips. */
 export declare class PromptChipStore {
     #private;
-    transformPastedContent(content: PiShellClipboardContent): string;
+    transformPastedContent(content: PiShellClipboardContent, currentText?: string): string;
     atomicRanges(line: string): readonly PiShellEditorTextRange[];
     hyperlinkRanges(text: string): readonly {
         start: number;

package/dist/integrations/pi/session-ui/prompt-chips.js

@@ -3,6 +3,7 @@ import { existsSync, statSync } from "node:fs";
 import path from "node:path";
 import { fileURLToPath } from "node:url";
 import { canonicalizeClipboardImage } from "./clipboard-image.js";
+import { assertImageEncodedSize, assertPromptImages } from "../../../contracts/owned-ui/index.js";
 const CHIP_PATTERN = /\[(?:📷 [^\]]+|📁 [^\]]+|📄 [^\]]+|🖼 {1,2}[^\]]+|🔗 [^\]]+)\]/gu;
 const IMAGE_EXTENSION = /\.(?:jpe?g|png|webp|gif|bmp|tiff?)$/iu;
 const URL_PATTERN = /^https?:\/\/[^\s\u0000-\u001f\u007f]+$/iu;
@@ -10,11 +11,13 @@ const URL_DISPLAY_LENGTH = 40;
 /** Owns semantic clipboard records while the prompt displays compact chips. */
 export class PromptChipStore {
     #chips = new Map();
-    transformPastedContent(content) {
+    transformPastedContent(content, currentText = "") {
         if (content.kind === "image") {
+            assertImageEncodedSize(content.data);
             const image = canonicalizeClipboardImage(content);
             if (image === null)
                 return "";
+            assertPromptImages([...this.prepareSubmission(currentText).images, { type: "image", ...image }]);
             const id = randomBytes(5).toString("hex");
             const tag = `[📷 screenshot-${id}.png]`;
             this.#chips.set(tag, {

package/dist/integrations/pi/session-ui/session-shell-root.d.ts

@@ -68,6 +68,7 @@ export declare class OwnedUiSessionShellRoot implements PiTuiComponentPort {
         readonly requestHyperlinkCleanup?: () => void;
         readonly enableDockInputReuse?: boolean;
         readonly onSubmit: (text: string) => void;
+        readonly onPasteRejected?: (error: unknown) => void;
         readonly onInterrupt: () => void;
         readonly onClear?: () => void;
         readonly onExit: () => void;

package/dist/integrations/pi/session-ui/session-shell-root.js

@@ -85,7 +85,15 @@ export class OwnedUiSessionShellRoot {
             ...handlers,
             keybindingProfile: this.#customViewport ? "a1" : "pi",
             paintEditorSelection: (line, from, to, atomic) => backgroundSgrSpan(line, from, to, atomic ? "\u001b[7m" : "\u001b[27m\u001b[48;2;38;79;120m", atomic ? "\u001b[27m" : "\u001b[49m", piShellVisibleWidth),
-            transformPastedContent: content => this.#promptChips.transformPastedContent(content),
+            transformPastedContent: content => {
+                try {
+                    return this.#promptChips.transformPastedContent(content, this.editor.getText());
+                }
+                catch (error) {
+                    handlers.onPasteRejected?.(error);
+                    return "";
+                }
+            },
             editorAtomicRanges: line => this.#promptChips.atomicRanges(line),
             decorateEditorRow: (row, width) => {
                 const plain = stripAnsi(row);

package/dist/integrations/pi/session-ui/session-shell.js

@@ -1,4 +1,6 @@
 import { PRODUCT_TEXT } from "../../../product-identity.js";
+import { boundedCleanup } from "../../../foundation/terminal-cleanup/index.js";
+import { assertOwnedUiCommand, assertPromptImages, ImageAttachmentError } from "../../../contracts/owned-ui/index.js";
 import { ContextualPromptSuggestionController } from "./prompt-suggestion-controller.js";
 import { MOUSE_TRACKING_OFF, MOUSE_TRACKING_ON, parseMouseInput, readVisibleHyperlinks } from "../../../ui/components/index.js";
 import { PINNED_PI_HIDDEN_COMMAND_NAMES, PINNED_PI_WORKFLOW_COMMAND_NAMES, } from "../engine/index.js";
@@ -27,6 +29,7 @@ export class OwnedUiSessionShell {
     #routeHost;
     #dialogHandle;
     #sequence = 0;
+    #editorRevision = 0;
     #started = false;
     #disposed = false;
     #pointerReporting = false;
@@ -76,7 +79,8 @@ export class OwnedUiSessionShell {
                 replacementSurfaceActive: !this.root.usesDefaultInputSurface(),
             }),
             enableDockInputReuse: options.inputPresentation?.viewportReuse !== false,
-            onSubmit: text => { void this.submit(text); },
+            onSubmit: text => { void this.submit(text).catch(() => this.#reportSubmissionError()); },
+            onPasteRejected: error => this.#reportSubmissionError(error),
             onInterrupt: () => { void this.interrupt(); },
             onClear: () => { void this.clearOrExit(); },
             onExit: () => { void this.shutdown(); },
@@ -88,11 +92,14 @@ export class OwnedUiSessionShell {
                 this.runtime.requestRender();
             },
             onMessageCopy: () => { void this.runWorkflow({ command: "copy", argument: "" }); },
-            onFollowUp: () => { void this.queueFollowUp(); },
+            onFollowUp: () => { void this.queueFollowUp().catch(() => this.#reportSubmissionError()); },
             onDequeue: () => this.restoreQueuedInput(),
-            onEditorChange: () => promptSuggestionController?.invalidate(),
+            onEditorChange: () => { this.#editorRevision++; promptSuggestionController?.invalidate(); },
             onPromptSuggestionAccepted: () => promptSuggestionController?.accept(),
-            onInputSurfaceChanged: () => promptSuggestionController?.invalidate(),
+            onInputSurfaceChanged: () => {
+                this.root.clearViewportPointerState();
+                promptSuggestionController?.invalidate();
+            },
             onCopyText: text => {
                 runtime?.writeControl(`\u001b]52;c;${Buffer.from(text, "utf8").toString("base64")}\u0007`);
                 const write = options.clipboard === undefined
@@ -103,7 +110,11 @@ export class OwnedUiSessionShell {
             readClipboardContent: async () => {
                 await pendingClipboardWrite;
                 if (options.clipboard === undefined)
-                    return readSystemClipboardContent();
+                    return readSystemClipboardContent().catch(error => {
+                        if (error instanceof ImageAttachmentError)
+                            this.#reportSubmissionError(error);
+                        return null;
+                    });
                 try {
                     const image = await options.clipboard.readImage?.();
                     if (image !== null && image !== undefined) {
@@ -112,7 +123,11 @@ export class OwnedUiSessionShell {
                             return { kind: "image", ...canonical };
                     }
                 }
-                catch {
+                catch (error) {
+                    if (error instanceof ImageAttachmentError) {
+                        this.#reportSubmissionError(error);
+                        return null;
+                    }
                     // Compatibility: treat an unavailable or malformed image as text-capable clipboard input.
                 }
                 const text = await options.clipboard.readText();
@@ -226,8 +241,11 @@ export class OwnedUiSessionShell {
                 // surface. Letting the transcript pre-router inspect those reports
                 // steals settings value menus and numeric +/- controls before the
                 // settings app can receive them.
-                if (this.runtime.hasOverlay() || !this.root.usesDefaultInputSurface())
+                if (this.runtime.hasOverlay() || !this.root.usesDefaultInputSurface()) {
+                    if (data.includes("\u001b[<"))
+                        this.root.clearViewportPointerState();
                     return undefined;
+                }
                 const routed = this.root.handleViewportPreInput(data, true);
                 if (routed.copyText !== undefined) {
                     this.runtime.writeControl(`\u001b]52;c;${Buffer.from(routed.copyText, "utf8").toString("base64")}\u0007`);
@@ -421,6 +439,9 @@ export class OwnedUiSessionShell {
         return this.#stopped;
     }
     async submit(text) {
+        return this.#guardSubmission(text, () => this.#submit(text));
+    }
+    async #submit(text) {
         this.#promptSuggestions?.invalidate();
         const displayInput = text.trim();
         if (!displayInput)
@@ -428,6 +449,7 @@ export class OwnedUiSessionShell {
         if (displayInput.startsWith("/"))
             return this.#slashCommand(displayInput);
         const prepared = this.root.preparePromptSubmission(displayInput);
+        assertPromptImages(prepared.images);
         const input = prepared.text.trim();
         if (input.startsWith("!")) {
             const excludeFromContext = input.startsWith("!!");
@@ -458,6 +480,7 @@ export class OwnedUiSessionShell {
             this.root.editor.addToHistory(displayInput);
             this.#compactionQueue.push({
                 text: input,
+                draft: displayInput,
                 type: "steer",
                 ...(prepared.images.length === 0 ? {} : { images: prepared.images }),
             });
@@ -474,7 +497,7 @@ export class OwnedUiSessionShell {
             sessionId: this.backend.sessionId,
             text: input,
             ...(prepared.images.length === 0 ? {} : { images: prepared.images }),
-        });
+        }, displayInput);
     }
     async clearOrExit(now = Date.now()) {
         this.#promptSuggestions?.invalidate();
@@ -565,10 +588,15 @@ export class OwnedUiSessionShell {
         return workflowAdapterResult(result);
     }
     async queueFollowUp() {
-        const displayInput = this.root.editor.getText().trim();
+        const draft = this.root.editor.getText();
+        return this.#guardSubmission(draft, () => this.#queueFollowUp(draft));
+    }
+    async #queueFollowUp(draft) {
+        const displayInput = draft.trim();
         if (!displayInput)
             return rejected("nothing to queue");
         const prepared = this.root.preparePromptSubmission(displayInput);
+        assertPromptImages(prepared.images);
         const text = prepared.text.trim();
         this.root.editor.addToHistory(displayInput);
         this.root.editor.setText("");
@@ -576,6 +604,7 @@ export class OwnedUiSessionShell {
         if (this.view().status.workingMessage?.startsWith("Compacting") === true) {
             this.#compactionQueue.push({
                 text,
+                draft: displayInput,
                 type: "follow-up",
                 ...(prepared.images.length === 0 ? {} : { images: prepared.images }),
             });
@@ -587,10 +616,10 @@ export class OwnedUiSessionShell {
             sessionId: this.backend.sessionId,
             text,
             ...(prepared.images.length === 0 ? {} : { images: prepared.images }),
-        });
+        }, displayInput);
     }
     restoreQueuedInput() {
-        const queued = [...this.backend.clearQueuedWorkflows(), ...this.#compactionQueue.map(item => item.text)];
+        const queued = [...this.backend.clearQueuedWorkflows(), ...this.#compactionQueue.map(item => item.draft)];
         this.#compactionQueue = [];
         if (queued.length === 0)
             return;
@@ -1082,34 +1111,40 @@ export class OwnedUiSessionShell {
         if (this.#disposed)
             return;
         this.#disposed = true;
-        this.root.clearViewportPointerState();
-        this.#setPointerReporting(false, true);
-        this.#removeViewportPreInput();
-        this.#streamPresentation.dispose();
-        this.#promptSuggestions?.dispose();
-        this.#unsubscribePromptSuggestions();
-        this.#unsubscribeSettings();
-        const exitMode = this.backend.disposed
-            ? this.#fullscreenExitOutput
-            : this.backend.pinnedSettingsSnapshot().fullscreenExitOutput;
-        const exitTranscript = this.root.exitTranscript(this.runtime.viewport().columns);
-        const resume = this.backend.currentSessionResumeMetadata();
-        const resumeHint = resume === null
-            ? ""
-            : `${dim("To resume this session:")} ${formatSessionResumeCommand(resume)}`;
-        const fullscreenExitText = this.runtime.mode !== "fullscreen"
-            ? ""
-            : exitMode === "resume-hint"
-                ? resumeHint
-                : [exitTranscript, resumeHint].filter(Boolean).join("\n\n");
-        this.#unbindPiSettings();
-        this.#unbindTerminalSettings();
-        this.#unbindShutdownSettings();
-        this.#unsubscribe();
-        this.#dialogHandle?.hide();
-        await this.backend.unbindExtensionUi();
-        this.#extensionBridge.dispose();
-        await this.runtime.dispose();
+        const failures = [];
+        const attempt = (action) => { try {
+            action();
+        }
+        catch (error) {
+            failures.push(error);
+        } };
+        attempt(() => this.root.clearViewportPointerState());
+        attempt(() => this.#setPointerReporting(false, true));
+        attempt(() => this.#removeViewportPreInput());
+        attempt(() => this.#streamPresentation.dispose());
+        attempt(() => this.#promptSuggestions?.dispose());
+        attempt(() => this.#unsubscribePromptSuggestions());
+        attempt(() => this.#unsubscribeSettings());
+        let fullscreenExitText = "";
+        attempt(() => {
+            const exitMode = this.backend.disposed ? this.#fullscreenExitOutput : this.backend.pinnedSettingsSnapshot().fullscreenExitOutput;
+            const exitTranscript = this.root.exitTranscript(this.runtime.viewport().columns);
+            const resume = this.backend.currentSessionResumeMetadata();
+            const resumeHint = resume === null ? "" : `${dim("To resume this session:")} ${formatSessionResumeCommand(resume)}`;
+            fullscreenExitText = this.runtime.mode !== "fullscreen" ? ""
+                : exitMode === "resume-hint" ? resumeHint : [exitTranscript, resumeHint].filter(Boolean).join("\n\n");
+        });
+        attempt(() => this.#unbindPiSettings());
+        attempt(() => this.#unbindTerminalSettings());
+        attempt(() => this.#unbindShutdownSettings());
+        attempt(() => this.#unsubscribe());
+        attempt(() => this.#dialogHandle?.hide());
+        attempt(() => this.#extensionBridge.dispose());
+        // Invariant: terminal restoration precedes any potentially stalled backend teardown.
+        await this.runtime.dispose().catch(error => failures.push(error));
+        await boundedCleanup(() => this.backend.unbindExtensionUi()).catch(error => failures.push(error));
+        if (failures.length > 0)
+            throw new AggregateError(failures, "Owned UI disposal failed");
         if (fullscreenExitText.length > 0)
             this.runtime.writeAfterStop(`${fullscreenExitText}\n`);
     }
@@ -1423,11 +1458,58 @@ export class OwnedUiSessionShell {
                 sessionId: this.backend.sessionId,
                 text: item.text,
                 ...(item.images === undefined ? {} : { images: item.images }),
-            });
+            }, item.draft);
         }
     }
-    async #execute(command) {
-        return this.backend.execute(command);
+    async #execute(command, draft) {
+        if (draft === undefined)
+            return this.backend.execute(command);
+        const revision = this.#editorRevision;
+        try {
+            assertOwnedUiCommand(command);
+        }
+        catch (error) {
+            return this.#recoverSubmission(draft, revision, error);
+        }
+        try {
+            const result = await this.backend.execute(command);
+            if (result.outcome === "rejected")
+                return this.#recoverSubmission(draft, revision);
+            return result;
+        }
+        catch {
+            // Security: dispatch might already have reached the provider. Never retry automatically.
+            this.root.editor.addToHistory(draft);
+            this.#reportSubmissionError(undefined, "Submission failed; delivery is uncertain. Check the conversation before retrying. Press Up to recover the draft.");
+            return { outcome: "failed", diagnostic: "submission delivery is uncertain" };
+        }
+    }
+    async #guardSubmission(draft, action) {
+        const revision = this.#editorRevision;
+        try {
+            return await action();
+        }
+        catch (error) {
+            return this.#recoverSubmission(draft, revision, error);
+        }
+    }
+    #recoverSubmission(draft, revision, error) {
+        this.root.editor.addToHistory(draft);
+        // Concurrency: never overwrite input typed (even typed and cleared) after this submission.
+        if (revision === this.#editorRevision && this.root.editor.getText().length === 0)
+            this.root.editor.setText(draft);
+        const message = error instanceof ImageAttachmentError ? error.message : "Submission rejected. Check the prompt and attachments.";
+        this.#reportSubmissionError(error, `${message} Press Up to recover the draft.`);
+        return rejected(message);
+    }
+    #reportSubmissionError(error, message) {
+        // Security: arbitrary provider/extension error messages can contain the entire request.
+        try {
+            this.root.appendWorkflowResult({ command: "debug", outcome: "failed", message: message
+                    ?? (error instanceof ImageAttachmentError ? error.message : "Submission failed. Check the prompt and try again.") });
+            this.runtime.requestRender();
+        }
+        catch { /* Security: error presentation cannot create another rejected submission callback. */ }
     }
     #simple(type) {
         return { type, correlationId: this.#correlation(type), sessionId: this.backend.sessionId };

package/dist/integrations/pi/session-ui/session-viewport-controller.js

@@ -159,8 +159,16 @@ export class SessionViewportController {
             this.#requestHyperlinkCleanup();
             this.#requestRender(true);
         }
-        if (this.#viewport.frame === null)
-            return { data, consumed: false };
+        if (this.#viewport.frame === null) {
+            // Invariant: a not-yet-painted A1 screen is not Pi's selection surface.
+            return routeMouseInput(data, event => {
+                if (event.kind === "press" && event.button === 0)
+                    this.#tailPointerSuppressed = true;
+                if (event.kind === "release")
+                    this.#tailPointerSuppressed = false;
+                return event.kind === "motion" || event.kind === "release" || (event.kind === "press" && event.button === 0);
+            });
+        }
         if (data === "\u0003") {
             if (this.#editor.hasSelection()) {
                 if (this.#viewport.clearSelection())
@@ -287,6 +295,8 @@ export class SessionViewportController {
                 }
                 if (event.button !== 0)
                     return false;
+                this.#dockPointerSuppressed = false;
+                this.#tailPointerSuppressed = false;
                 this.#stopSelectionAutoScroll();
                 if (this.#viewport.clearSelection())
                     repaint = true;
@@ -335,16 +345,16 @@ export class SessionViewportController {
                 }
                 if (event.row >= 1 && event.row <= hits.viewportHeight && event.column <= frame.contentWidth) {
                     if (!this.#viewport.pressSelection(event.column, event.row, now)) {
-                        // Invariant: a full drag begun on transient tail rows cannot become transcript selection.
-                        if (hits.transientTail.includes(event.row))
-                            this.#tailPointerSuppressed = true;
+                        // Invariant: empty rows and transient tail rows must never start Pi selection.
+                        this.#tailPointerSuppressed = true;
                         repaint = true;
-                        return this.#tailPointerSuppressed;
+                        return true;
                     }
                     repaint = true;
                     return true;
                 }
-                return false;
+                this.#tailPointerSuppressed = true;
+                return true;
             }
             if (event.kind === "release") {
                 if (this.#editor.ownsPointer() && this.#editorPointerFrame !== undefined) {

package/dist/integrations/pi/session-ui/system-clipboard.js

@@ -1,5 +1,6 @@
 import { execFile } from "node:child_process";
 import { canonicalizeClipboardImage } from "./clipboard-image.js";
+import { ImageAttachmentError, MAX_IMAGE_DATA_BYTES } from "../../../contracts/owned-ui/index.js";
 const MAX_CLIPBOARD_BYTES = 16 * 1024 * 1024;
 let nativeClipboardPromise;
 let pendingClipboardWrite = Promise.resolve();
@@ -27,7 +28,9 @@ export async function readSystemClipboardContent() {
             if (image !== null)
                 return { kind: "image", ...image };
         }
-        catch {
+        catch (error) {
+            if (error instanceof ImageAttachmentError)
+                throw error;
             // Compatibility: fall through to text and platform readers.
         }
     }
@@ -40,6 +43,8 @@ export async function readSystemClipboardImage(reader) {
     if (reader.getImageBinary !== undefined) {
         try {
             const bytes = await reader.getImageBinary();
+            if (Math.ceil(bytes.length / 3) * 4 > MAX_IMAGE_DATA_BYTES)
+                throw new ImageAttachmentError("image-size");
             if (bytes.length > 0 && bytes.every(byte => Number.isInteger(byte) && byte >= 0 && byte <= 255)) {
                 return canonicalizeClipboardImage({
                     data: Buffer.from(bytes).toString("base64"),
@@ -47,7 +52,9 @@ export async function readSystemClipboardImage(reader) {
                 });
             }
         }
-        catch {
+        catch (error) {
+            if (error instanceof ImageAttachmentError)
+                throw error;
             // Compatibility: older or partially available native bindings may still expose base64.
         }
     }
@@ -58,7 +65,9 @@ export async function readSystemClipboardImage(reader) {
                 mimeType: "image/png",
             });
         }
-        catch {
+        catch (error) {
+            if (error instanceof ImageAttachmentError)
+                throw error;
             // Compatibility: fall through to the caller's text path.
         }
     }

package/dist/integrations/pi/tui-runtime/adapter.js

@@ -1,4 +1,5 @@
 import { HStack, ProcessTerminal, ScrollView, TuiAltScreen, TuiMainScreen, VStack, visibleWidth, } from "#pi-tui";
+import { boundedCleanup, EMERGENCY_TERMINAL_RESET } from "../../../foundation/terminal-cleanup/index.js";
 import { InputPresentationCoordinator, } from "./input-presentation-coordinator.js";
 /** Identifies the Pi TUI lifecycle stage that failed while preserving the original cause. */
 export class PiTuiRuntimeError extends Error {
@@ -402,11 +403,16 @@ export class PiTuiRuntimeAdapter {
     }
     async #stop(options) {
         this.#state = "stopping";
-        this.#inputCoordinator?.flush();
         let failure;
+        try {
+            this.#inputCoordinator?.dispose(false);
+        }
+        catch (error) {
+            failure = new PiTuiRuntimeError("restoration", error);
+        }
         if (options.drainInput !== false) {
             try {
-                await this.#terminal.drainInput(options.drainMaxMs, options.drainIdleMs);
+                await boundedCleanup(() => this.#terminal.drainInput(options.drainMaxMs, options.drainIdleMs));
             }
             catch (error) {
                 failure = new PiTuiRuntimeError("input-drain", error);
@@ -559,6 +565,11 @@ export class PiTuiRuntimeAdapter {
     }
     #bestEffortTerminalRestore() {
         this.#clearTerminalProgress();
+        try {
+            if (this.mode === "fullscreen")
+                this.#terminal.write(EMERGENCY_TERMINAL_RESET);
+        }
+        catch { }
         try {
             this.#terminal.showCursor();
         }

package/dist/native/darwin-arm64/manifest.json

@@ -5,7 +5,7 @@
   "platform": "darwin",
   "architecture": "arm64",
   "capability": "supported",
-  "builtAt": "2026-09-07T08:48:09.287Z",
+  "builtAt": "2026-09-09T13:32:45.025Z",
   "artifact": {
     "filename": "process-guardian",
     "sha256": "dc03605e5780e2aeebb4ecafd62868dc673e22ddd38b024a369aff704ff136dc",

package/dist/native/linux-x64/manifest.json

@@ -5,7 +5,7 @@
   "platform": "linux",
   "architecture": "x64",
   "capability": "supported",
-  "builtAt": "2026-09-07T08:48:08.596Z",
+  "builtAt": "2026-09-09T13:32:36.719Z",
   "artifact": {
     "filename": "process-guardian",
     "sha256": "ee8a00eaaf79c707459bbbfb52518e9739314967049fbe5fa625f36ce33db9ee",

package/dist/native/win32-x64/manifest.json

@@ -5,10 +5,10 @@
   "platform": "win32",
   "architecture": "x64",
   "capability": "supported",
-  "builtAt": "2026-09-07T08:48:53.798Z",
+  "builtAt": "2026-09-09T13:34:58.223Z",
   "artifact": {
     "filename": "process-guardian.exe",
-    "sha256": "ec965cf23ffb3dd4f8db9b265c620c3bbc078418a6f7e330bdcbf4d0055f6393",
+    "sha256": "ed500da6662711b12a26dd40d4b2d659a201a0d9e43fd8d521d8a16e04889f4b",
     "size": 177664
   },
   "provenance": {

package/docs/architecture/boundaries.md

@@ -31,7 +31,8 @@ The owned Pi-backed surface is not an arbitrary-CLI terminal multiplexer. A feat
 - `storage`: SQLite migrations, prior-boot reconciliation, and plural launch-instance persistence. Legacy foreground rows are historical migration input and never authorize current ownership.
 - `supervisor`: endpoint identity, plural cohort ownership, per-instance reconciliation, and aggregate release shutdown coordination. It owns no terminal surface.
 - `pi-engine-adapter`, `pi-component-adapter`, `pi-tui-runtime-adapter`, and `pi-session-ui-integration`: isolate pinned Pi engine and presentation knowledge behind neutral contracts; product features do not import them directly. The session UI render root assembles semantic document and dock rows, while its focused viewport controller owns follow state, pointer routing, selection, and interaction timers. Owned-app route lifecycle belongs to the neutral `ui-apps` owner and is only hosted by the Pi session UI.
-- release/update/bootstrap: package-derived immutable release identity, process-guardian integrity, cohort selection, durable update transactions, rollback, and dependency-light command entry.
+- release/update/bootstrap: package-derived immutable release identity, process-guardian integrity, cohort selection, durable update transactions, rollback, and dependency-light command entry. After an unsuccessful bare-A1 child exit, the bootstrap restores owned terminal modes; neither guardian emits terminal controls.
+- `terminal-cleanup`: bounded, idempotent emergency restoration and fatal-exit diagnostics for an explicitly owned terminal. It does not inspect commands, relay terminal input/output, or emulate terminal state. The owned UI installs its fatal boundary before terminal activation; packaged bootstrap and checkout launch provide the surviving-owner fallback. Fatal records retain at most ten 16 KiB records with trusted classifications and code locations, never prompts, attachments, raw input, credentials, or arbitrary exception messages.
 
 ## Dependency direction
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@timurproko/a1",
-  "version": "0.1.8-dev.279",
+  "version": "0.1.8-dev.287",
   "description": "Standalone terminal workspace for supervised native and managed agents",
   "type": "module",
   "packageManager": "npm@11.13.0",