@timurproko/a1 0.1.8-dev.443 → 0.1.8-dev.447

package/dist/integrations/pi/startup-public.manifest.json

@@ -3,8 +3,8 @@
   "publicEntry": "@earendil-works/pi-coding-agent",
   "output": {
     "path": "dist/integrations/pi/startup-public.js",
-    "bytes": 8287198,
-    "sha256": "bb67e0c4d0448ee596fc34a13c834416ec865c79a3d47c9d949d56e44be2ad57"
+    "bytes": 8355791,
+    "sha256": "98c412f7a4340a4fa4057df12f8a7f8ba25caa10dfa882de5d4c68786d20489e"
   },
   "external": [
     "#pi-tui",
@@ -298,10 +298,10 @@
     }
   ],
   "totals": {
-    "files": 1898,
-    "loadedFiles": 1744,
-    "sourceBytes": 11968510,
-    "evaluatedBytes": 8283311
+    "files": 1908,
+    "loadedFiles": 1754,
+    "sourceBytes": 12058402,
+    "evaluatedBytes": 8351904
   },
   "inputs": [
     {
@@ -973,8 +973,8 @@
     {
       "path": "node_modules/@earendil-works/pi-ai/dist/api/bedrock-converse-stream.lazy.js",
       "group": "pi-public",
-      "sourceBytes": 1521,
-      "evaluatedBytes": 866
+      "sourceBytes": 1544,
+      "evaluatedBytes": 357
     },
     {
       "path": "node_modules/@earendil-works/pi-ai/dist/api/constrained-sampling.js",
@@ -1138,11 +1138,71 @@
       "sourceBytes": 2092,
       "evaluatedBytes": 1097
     },
+    {
+      "path": "node_modules/@earendil-works/pi-ai/dist/auth/oauth/anthropic.js",
+      "group": "pi-public",
+      "sourceBytes": 11509,
+      "evaluatedBytes": 8459
+    },
+    {
+      "path": "node_modules/@earendil-works/pi-ai/dist/auth/oauth/device-code.js",
+      "group": "pi-public",
+      "sourceBytes": 3262,
+      "evaluatedBytes": 2089
+    },
+    {
+      "path": "node_modules/@earendil-works/pi-ai/dist/auth/oauth/github-copilot.js",
+      "group": "pi-public",
+      "sourceBytes": 13026,
+      "evaluatedBytes": 9714
+    },
+    {
+      "path": "node_modules/@earendil-works/pi-ai/dist/auth/oauth/kimi-coding.js",
+      "group": "pi-public",
+      "sourceBytes": 10644,
+      "evaluatedBytes": 7943
+    },
     {
       "path": "node_modules/@earendil-works/pi-ai/dist/auth/oauth/load.js",
       "group": "pi-public",
-      "sourceBytes": 2527,
-      "evaluatedBytes": 1687
+      "sourceBytes": 2450,
+      "evaluatedBytes": 1361
+    },
+    {
+      "path": "node_modules/@earendil-works/pi-ai/dist/auth/oauth/oauth-page.js",
+      "group": "pi-public",
+      "sourceBytes": 3114,
+      "evaluatedBytes": 3130
+    },
+    {
+      "path": "node_modules/@earendil-works/pi-ai/dist/auth/oauth/openai-codex.js",
+      "group": "pi-public",
+      "sourceBytes": 16962,
+      "evaluatedBytes": 13098
+    },
+    {
+      "path": "node_modules/@earendil-works/pi-ai/dist/auth/oauth/openrouter.js",
+      "group": "pi-public",
+      "sourceBytes": 10765,
+      "evaluatedBytes": 7821
+    },
+    {
+      "path": "node_modules/@earendil-works/pi-ai/dist/auth/oauth/pkce.js",
+      "group": "pi-public",
+      "sourceBytes": 1003,
+      "evaluatedBytes": 711
+    },
+    {
+      "path": "node_modules/@earendil-works/pi-ai/dist/auth/oauth/radius.js",
+      "group": "pi-public",
+      "sourceBytes": 12158,
+      "evaluatedBytes": 8910
+    },
+    {
+      "path": "node_modules/@earendil-works/pi-ai/dist/auth/oauth/xai.js",
+      "group": "pi-public",
+      "sourceBytes": 7503,
+      "evaluatedBytes": 5919
     },
     {
       "path": "node_modules/@earendil-works/pi-ai/dist/auth/resolve.js",
@@ -1214,7 +1274,7 @@
       "path": "node_modules/@earendil-works/pi-ai/dist/model-catalog.js",
       "group": "pi-public",
       "sourceBytes": 156,
-      "evaluatedBytes": 147
+      "evaluatedBytes": 286
     },
     {
       "path": "node_modules/@earendil-works/pi-ai/dist/models-store.js",
@@ -1226,7 +1286,7 @@
       "path": "node_modules/@earendil-works/pi-ai/dist/models.generated.js",
       "group": "pi-public",
       "sourceBytes": 4639,
-      "evaluatedBytes": 1318
+      "evaluatedBytes": 1347
     },
     {
       "path": "node_modules/@earendil-works/pi-ai/dist/models.js",
@@ -1256,7 +1316,7 @@
       "path": "node_modules/@earendil-works/pi-ai/dist/providers/amazon-bedrock.models.js",
       "group": "pi-public",
       "sourceBytes": 390,
-      "evaluatedBytes": 87
+      "evaluatedBytes": 108
     },
     {
       "path": "node_modules/@earendil-works/pi-ai/dist/providers/ant-ling.js",
@@ -1268,7 +1328,7 @@
       "path": "node_modules/@earendil-works/pi-ai/dist/providers/ant-ling.models.js",
       "group": "pi-public",
       "sourceBytes": 366,
-      "evaluatedBytes": 69
+      "evaluatedBytes": 90
     },
     {
       "path": "node_modules/@earendil-works/pi-ai/dist/providers/anthropic.js",
@@ -1280,7 +1340,7 @@
       "path": "node_modules/@earendil-works/pi-ai/dist/providers/anthropic.models.js",
       "group": "pi-public",
       "sourceBytes": 370,
-      "evaluatedBytes": 72
+      "evaluatedBytes": 93
     },
     {
       "path": "node_modules/@earendil-works/pi-ai/dist/providers/azure-openai-responses.js",
@@ -1292,7 +1352,7 @@
       "path": "node_modules/@earendil-works/pi-ai/dist/providers/azure-openai-responses.models.js",
       "group": "pi-public",
       "sourceBytes": 422,
-      "evaluatedBytes": 111
+      "evaluatedBytes": 132
     },
     {
       "path": "node_modules/@earendil-works/pi-ai/dist/providers/baseten.js",
@@ -1304,7 +1364,7 @@
       "path": "node_modules/@earendil-works/pi-ai/dist/providers/baseten.models.js",
       "group": "pi-public",
       "sourceBytes": 362,
-      "evaluatedBytes": 66
+      "evaluatedBytes": 87
     },
     {
       "path": "node_modules/@earendil-works/pi-ai/dist/providers/cerebras.js",
@@ -1316,7 +1376,7 @@
       "path": "node_modules/@earendil-works/pi-ai/dist/providers/cerebras.models.js",
       "group": "pi-public",
       "sourceBytes": 366,
-      "evaluatedBytes": 69
+      "evaluatedBytes": 90
     },
     {
       "path": "node_modules/@earendil-works/pi-ai/dist/providers/cloudflare-ai-gateway.js",
@@ -1328,7 +1388,7 @@
       "path": "node_modules/@earendil-works/pi-ai/dist/providers/cloudflare-ai-gateway.models.js",
       "group": "pi-public",
       "sourceBytes": 418,
-      "evaluatedBytes": 108
+      "evaluatedBytes": 129
     },
     {
       "path": "node_modules/@earendil-works/pi-ai/dist/providers/cloudflare-auth.js",
@@ -1352,7 +1412,7 @@
       "path": "node_modules/@earendil-works/pi-ai/dist/providers/cloudflare-workers-ai.models.js",
       "group": "pi-public",
       "sourceBytes": 418,
-      "evaluatedBytes": 108
+      "evaluatedBytes": 129
     },
     {
       "path": "node_modules/@earendil-works/pi-ai/dist/providers/data/.manifest.json",
@@ -1424,7 +1484,7 @@
       "path": "node_modules/@earendil-works/pi-ai/dist/providers/data/github-copilot.json",
       "group": "pi-public",
       "sourceBytes": 20036,
-      "evaluatedBytes": 18254
+      "evaluatedBytes": 18431
     },
     {
       "path": "node_modules/@earendil-works/pi-ai/dist/providers/data/google-vertex.json",
@@ -1604,7 +1664,7 @@
       "path": "node_modules/@earendil-works/pi-ai/dist/providers/deepseek.models.js",
       "group": "pi-public",
       "sourceBytes": 366,
-      "evaluatedBytes": 69
+      "evaluatedBytes": 90
     },
     {
       "path": "node_modules/@earendil-works/pi-ai/dist/providers/faux.js",
@@ -1622,19 +1682,19 @@
       "path": "node_modules/@earendil-works/pi-ai/dist/providers/fireworks.models.js",
       "group": "pi-public",
       "sourceBytes": 370,
-      "evaluatedBytes": 72
+      "evaluatedBytes": 93
     },
     {
       "path": "node_modules/@earendil-works/pi-ai/dist/providers/github-copilot.js",
       "group": "pi-public",
       "sourceBytes": 1667,
-      "evaluatedBytes": 911
+      "evaluatedBytes": 940
     },
     {
       "path": "node_modules/@earendil-works/pi-ai/dist/providers/github-copilot.models.js",
       "group": "pi-public",
       "sourceBytes": 390,
-      "evaluatedBytes": 87
+      "evaluatedBytes": 313
     },
     {
       "path": "node_modules/@earendil-works/pi-ai/dist/providers/google-vertex.js",
@@ -1646,7 +1706,7 @@
       "path": "node_modules/@earendil-works/pi-ai/dist/providers/google-vertex.models.js",
       "group": "pi-public",
       "sourceBytes": 386,
-      "evaluatedBytes": 84
+      "evaluatedBytes": 105
     },
     {
       "path": "node_modules/@earendil-works/pi-ai/dist/providers/google.js",
@@ -1658,7 +1718,7 @@
       "path": "node_modules/@earendil-works/pi-ai/dist/providers/google.models.js",
       "group": "pi-public",
       "sourceBytes": 358,
-      "evaluatedBytes": 63
+      "evaluatedBytes": 84
     },
     {
       "path": "node_modules/@earendil-works/pi-ai/dist/providers/groq.js",
@@ -1670,7 +1730,7 @@
       "path": "node_modules/@earendil-works/pi-ai/dist/providers/groq.models.js",
       "group": "pi-public",
       "sourceBytes": 350,
-      "evaluatedBytes": 57
+      "evaluatedBytes": 78
     },
     {
       "path": "node_modules/@earendil-works/pi-ai/dist/providers/huggingface.js",
@@ -1682,7 +1742,7 @@
       "path": "node_modules/@earendil-works/pi-ai/dist/providers/huggingface.models.js",
       "group": "pi-public",
       "sourceBytes": 378,
-      "evaluatedBytes": 78
+      "evaluatedBytes": 99
     },
     {
       "path": "node_modules/@earendil-works/pi-ai/dist/providers/images/register-builtins.js",
@@ -1700,7 +1760,7 @@
       "path": "node_modules/@earendil-works/pi-ai/dist/providers/kimi-coding.models.js",
       "group": "pi-public",
       "sourceBytes": 378,
-      "evaluatedBytes": 78
+      "evaluatedBytes": 99
     },
     {
       "path": "node_modules/@earendil-works/pi-ai/dist/providers/minimax-cn.js",
@@ -1712,7 +1772,7 @@
       "path": "node_modules/@earendil-works/pi-ai/dist/providers/minimax-cn.models.js",
       "group": "pi-public",
       "sourceBytes": 374,
-      "evaluatedBytes": 75
+      "evaluatedBytes": 96
     },
     {
       "path": "node_modules/@earendil-works/pi-ai/dist/providers/minimax.js",
@@ -1724,7 +1784,7 @@
       "path": "node_modules/@earendil-works/pi-ai/dist/providers/minimax.models.js",
       "group": "pi-public",
       "sourceBytes": 362,
-      "evaluatedBytes": 66
+      "evaluatedBytes": 87
     },
     {
       "path": "node_modules/@earendil-works/pi-ai/dist/providers/mistral.js",
@@ -1736,7 +1796,7 @@
       "path": "node_modules/@earendil-works/pi-ai/dist/providers/mistral.models.js",
       "group": "pi-public",
       "sourceBytes": 362,
-      "evaluatedBytes": 66
+      "evaluatedBytes": 87
     },
     {
       "path": "node_modules/@earendil-works/pi-ai/dist/providers/moonshotai-cn.js",
@@ -1748,7 +1808,7 @@
       "path": "node_modules/@earendil-works/pi-ai/dist/providers/moonshotai-cn.models.js",
       "group": "pi-public",
       "sourceBytes": 386,
-      "evaluatedBytes": 84
+      "evaluatedBytes": 105
     },
     {
       "path": "node_modules/@earendil-works/pi-ai/dist/providers/moonshotai.js",
@@ -1760,7 +1820,7 @@
       "path": "node_modules/@earendil-works/pi-ai/dist/providers/moonshotai.models.js",
       "group": "pi-public",
       "sourceBytes": 374,
-      "evaluatedBytes": 75
+      "evaluatedBytes": 96
     },
     {
       "path": "node_modules/@earendil-works/pi-ai/dist/providers/nvidia.js",
@@ -1772,7 +1832,7 @@
       "path": "node_modules/@earendil-works/pi-ai/dist/providers/nvidia.models.js",
       "group": "pi-public",
       "sourceBytes": 358,
-      "evaluatedBytes": 63
+      "evaluatedBytes": 84
     },
     {
       "path": "node_modules/@earendil-works/pi-ai/dist/providers/openai-codex.js",
@@ -1784,7 +1844,7 @@
       "path": "node_modules/@earendil-works/pi-ai/dist/providers/openai-codex.models.js",
       "group": "pi-public",
       "sourceBytes": 382,
-      "evaluatedBytes": 81
+      "evaluatedBytes": 102
     },
     {
       "path": "node_modules/@earendil-works/pi-ai/dist/providers/openai.js",
@@ -1796,7 +1856,7 @@
       "path": "node_modules/@earendil-works/pi-ai/dist/providers/openai.models.js",
       "group": "pi-public",
       "sourceBytes": 358,
-      "evaluatedBytes": 63
+      "evaluatedBytes": 84
     },
     {
       "path": "node_modules/@earendil-works/pi-ai/dist/providers/opencode-go.js",
@@ -1808,7 +1868,7 @@
       "path": "node_modules/@earendil-works/pi-ai/dist/providers/opencode-go.models.js",
       "group": "pi-public",
       "sourceBytes": 378,
-      "evaluatedBytes": 78
+      "evaluatedBytes": 99
     },
     {
       "path": "node_modules/@earendil-works/pi-ai/dist/providers/opencode.js",
@@ -1820,7 +1880,7 @@
       "path": "node_modules/@earendil-works/pi-ai/dist/providers/opencode.models.js",
       "group": "pi-public",
       "sourceBytes": 366,
-      "evaluatedBytes": 69
+      "evaluatedBytes": 90
     },
     {
       "path": "node_modules/@earendil-works/pi-ai/dist/providers/openrouter-images.js",
@@ -1838,7 +1898,7 @@
       "path": "node_modules/@earendil-works/pi-ai/dist/providers/openrouter.models.js",
       "group": "pi-public",
       "sourceBytes": 374,
-      "evaluatedBytes": 75
+      "evaluatedBytes": 96
     },
     {
       "path": "node_modules/@earendil-works/pi-ai/dist/providers/qwen-token-plan-cn.js",
@@ -1850,7 +1910,7 @@
       "path": "node_modules/@earendil-works/pi-ai/dist/providers/qwen-token-plan-cn.models.js",
       "group": "pi-public",
       "sourceBytes": 406,
-      "evaluatedBytes": 99
+      "evaluatedBytes": 120
     },
     {
       "path": "node_modules/@earendil-works/pi-ai/dist/providers/qwen-token-plan-individual.js",
@@ -1862,7 +1922,7 @@
       "path": "node_modules/@earendil-works/pi-ai/dist/providers/qwen-token-plan-individual.models.js",
       "group": "pi-public",
       "sourceBytes": 438,
-      "evaluatedBytes": 123
+      "evaluatedBytes": 144
     },
     {
       "path": "node_modules/@earendil-works/pi-ai/dist/providers/qwen-token-plan.js",
@@ -1874,19 +1934,19 @@
       "path": "node_modules/@earendil-works/pi-ai/dist/providers/qwen-token-plan.models.js",
       "group": "pi-public",
       "sourceBytes": 394,
-      "evaluatedBytes": 90
+      "evaluatedBytes": 111
     },
     {
       "path": "node_modules/@earendil-works/pi-ai/dist/providers/radius-config.js",
       "group": "pi-public",
       "sourceBytes": 2541,
-      "evaluatedBytes": 2377
+      "evaluatedBytes": 2545
     },
     {
       "path": "node_modules/@earendil-works/pi-ai/dist/providers/radius.js",
       "group": "pi-public",
       "sourceBytes": 2939,
-      "evaluatedBytes": 1583
+      "evaluatedBytes": 1604
     },
     {
       "path": "node_modules/@earendil-works/pi-ai/dist/providers/together.js",
@@ -1898,7 +1958,7 @@
       "path": "node_modules/@earendil-works/pi-ai/dist/providers/together.models.js",
       "group": "pi-public",
       "sourceBytes": 366,
-      "evaluatedBytes": 69
+      "evaluatedBytes": 90
     },
     {
       "path": "node_modules/@earendil-works/pi-ai/dist/providers/vercel-ai-gateway.js",
@@ -1910,7 +1970,7 @@
       "path": "node_modules/@earendil-works/pi-ai/dist/providers/vercel-ai-gateway.models.js",
       "group": "pi-public",
       "sourceBytes": 402,
-      "evaluatedBytes": 96
+      "evaluatedBytes": 117
     },
     {
       "path": "node_modules/@earendil-works/pi-ai/dist/providers/xai.js",
@@ -1922,7 +1982,7 @@
       "path": "node_modules/@earendil-works/pi-ai/dist/providers/xai.models.js",
       "group": "pi-public",
       "sourceBytes": 346,
-      "evaluatedBytes": 54
+      "evaluatedBytes": 75
     },
     {
       "path": "node_modules/@earendil-works/pi-ai/dist/providers/xiaomi-token-plan-ams.js",
@@ -1934,7 +1994,7 @@
       "path": "node_modules/@earendil-works/pi-ai/dist/providers/xiaomi-token-plan-ams.models.js",
       "group": "pi-public",
       "sourceBytes": 418,
-      "evaluatedBytes": 108
+      "evaluatedBytes": 129
     },
     {
       "path": "node_modules/@earendil-works/pi-ai/dist/providers/xiaomi-token-plan-cn.js",
@@ -1946,7 +2006,7 @@
       "path": "node_modules/@earendil-works/pi-ai/dist/providers/xiaomi-token-plan-cn.models.js",
       "group": "pi-public",
       "sourceBytes": 414,
-      "evaluatedBytes": 105
+      "evaluatedBytes": 126
     },
     {
       "path": "node_modules/@earendil-works/pi-ai/dist/providers/xiaomi-token-plan-sgp.js",
@@ -1958,7 +2018,7 @@
       "path": "node_modules/@earendil-works/pi-ai/dist/providers/xiaomi-token-plan-sgp.models.js",
       "group": "pi-public",
       "sourceBytes": 418,
-      "evaluatedBytes": 108
+      "evaluatedBytes": 129
     },
     {
       "path": "node_modules/@earendil-works/pi-ai/dist/providers/xiaomi.js",
@@ -1970,7 +2030,7 @@
       "path": "node_modules/@earendil-works/pi-ai/dist/providers/xiaomi.models.js",
       "group": "pi-public",
       "sourceBytes": 358,
-      "evaluatedBytes": 63
+      "evaluatedBytes": 84
     },
     {
       "path": "node_modules/@earendil-works/pi-ai/dist/providers/zai-coding-cn.js",
@@ -1982,7 +2042,7 @@
       "path": "node_modules/@earendil-works/pi-ai/dist/providers/zai-coding-cn.models.js",
       "group": "pi-public",
       "sourceBytes": 386,
-      "evaluatedBytes": 84
+      "evaluatedBytes": 105
     },
     {
       "path": "node_modules/@earendil-works/pi-ai/dist/providers/zai.js",
@@ -1994,7 +2054,7 @@
       "path": "node_modules/@earendil-works/pi-ai/dist/providers/zai.models.js",
       "group": "pi-public",
       "sourceBytes": 346,
-      "evaluatedBytes": 54
+      "evaluatedBytes": 75
     },
     {
       "path": "node_modules/@earendil-works/pi-ai/dist/session-resources.js",
@@ -2300,7 +2360,7 @@
       "path": "node_modules/@earendil-works/pi-coding-agent/dist/core/export-html/ansi-to-html.js",
       "group": "pi-public",
       "sourceBytes": 7711,
-      "evaluatedBytes": 3687
+      "evaluatedBytes": 3691
     },
     {
       "path": "node_modules/@earendil-works/pi-coding-agent/dist/core/export-html/index.js",
@@ -3596,7 +3656,7 @@
       "path": "node_modules/google-auth-library/build/src/auth/externalAccountAuthorizedUserClient.js",
       "group": "pi-public",
       "sourceBytes": 10005,
-      "evaluatedBytes": 4515
+      "evaluatedBytes": 4517
     },
     {
       "path": "node_modules/google-auth-library/build/src/auth/externalclient.js",
@@ -3662,7 +3722,7 @@
       "path": "node_modules/google-auth-library/build/src/auth/oauth2client.js",
       "group": "pi-public",
       "sourceBytes": 33662,
-      "evaluatedBytes": 17741
+      "evaluatedBytes": 17753
     },
     {
       "path": "node_modules/google-auth-library/build/src/auth/oauth2common.js",
@@ -3692,7 +3752,7 @@
       "path": "node_modules/google-auth-library/build/src/auth/refreshclient.js",
       "group": "pi-public",
       "sourceBytes": 6650,
-      "evaluatedBytes": 2947
+      "evaluatedBytes": 2962
     },
     {
       "path": "node_modules/google-auth-library/build/src/auth/stscredentials.js",
@@ -5108,7 +5168,7 @@
       "path": "node_modules/jiti/dist/babel.cjs",
       "group": "pi-public",
       "sourceBytes": 1526691,
-      "evaluatedBytes": 1634975
+      "evaluatedBytes": 1634978
     },
     {
       "path": "node_modules/jiti/dist/jiti.cjs",
@@ -9404,7 +9464,7 @@
       "path": "node_modules/typebox/build/type/types/_codec.mjs",
       "group": "pi-public",
       "sourceBytes": 2402,
-      "evaluatedBytes": 1201
+      "evaluatedBytes": 1212
     },
     {
       "path": "node_modules/typebox/build/type/types/_immutable.mjs",

package/dist/native/darwin-arm64/manifest.json

@@ -5,7 +5,7 @@
   "platform": "darwin",
   "architecture": "arm64",
   "capability": "supported",
-  "builtAt": "2026-09-16T18:44:13.029Z",
+  "builtAt": "2026-09-17T07:00:33.413Z",
   "artifact": {
     "filename": "process-guardian",
     "sha256": "9db1726bbe3fc2e8292f2ead1e7e9d0fd4d7d0dc9217b372582bf354b0f565dc",

package/dist/native/linux-x64/manifest.json

@@ -5,7 +5,7 @@
   "platform": "linux",
   "architecture": "x64",
   "capability": "supported",
-  "builtAt": "2026-09-16T18:44:05.437Z",
+  "builtAt": "2026-09-17T07:00:55.073Z",
   "artifact": {
     "filename": "process-guardian",
     "sha256": "d8cda6b0c7cb36c0cc41e90802aceebf6c02eaebbc08a83d7d963d2e918dbd7a",

package/dist/native/win32-x64/manifest.json

@@ -5,10 +5,10 @@
   "platform": "win32",
   "architecture": "x64",
   "capability": "supported",
-  "builtAt": "2026-09-16T18:44:34.962Z",
+  "builtAt": "2026-09-17T07:01:11.858Z",
   "artifact": {
     "filename": "process-guardian.exe",
-    "sha256": "47b347f1a5782f17d232cf3e2619fdba4c91a96427d931b2a9b716b888c7470d",
+    "sha256": "41a34706be8b325fe7bc342a0e8d62e55962addf7cd22c2a6b37553a9b8c579c",
     "size": 177664
   },
   "provenance": {

package/docs/ci-release-runbook.md

@@ -106,12 +106,12 @@ node scripts/release/report-resource-sensitive-validation.mjs --repeats 3 --outp
 
 `Development validation required` remains the merge gate for every pull request. For applicable code changes, it requires the dedicated Defender-enabled exact-package startup lane on Windows Node 22. Development validation (including manual dispatch) does not schedule a Windows Node 24 startup lane. The Node 22 lane retains the complete package-install, image preparation/package, and durable-history checks plus startup evidence artifacts. A missing, cancelled, failed, or unexpectedly skipped required startup result still blocks the aggregate; documentation-only, version-only, and draft exemptions are unchanged.
 
-| Startup runtime | Development validation (PR or manual) | Nightly/release validation | Manual Full regression |
-| --- | --- | --- | --- |
-| Windows Node 22 | Required for applicable changes | Retained | Retained |
-| Windows Node 24 | Not scheduled | Retained | Retained |
+| Startup runtime | Development validation (PR or manual) | Development preview (`npm run develop`) | Nightly and stable publication | Manual Full regression |
+| --- | --- | --- | --- | --- |
+| Windows Node 22 | Required for applicable changes | Not scheduled | Retained | Retained |
+| Windows Node 24 | Not scheduled | Retained | Retained | Retained |
 
-Each selected startup lane runs the package-install scenarios once: a failed budget remains failed and is never retried to obtain a warmed result. Both post-update profiles must reach input-ready state within five seconds, and both warm profiles must remain within three seconds. Node 24 runtime support, other PR jobs, Defender, and publication gates are unchanged. Full validation retains every deferred startup, image, and history test through its existing suite owners.
+Each selected startup lane runs the package-install scenarios once: a failed budget remains failed and is never retried to obtain a warmed result. The budgets are the ones the `a1-shell` capability declares (2 seconds after an update and on a warm launch, 2.5 seconds with no live supervisor); development validation and development previews record an overrun as a warning, while nightly, stable, and Full regression fail on it (see `STARTUP_BUDGET_ENFORCEMENT` in [validation](validation.md)). The publication lane set comes from `scripts/release/publication-validation-matrix.mjs`: a numbered preview validates on the Windows, Linux, and macOS Node 24 lanes, and nightly covers the same head on Windows Node 22 within a day. Node 24 runtime support, other PR jobs, Defender, and publication gates are unchanged. Full validation retains every deferred startup, image, and history test through its existing suite owners.
 
 The trade-off is delayed detection: a Node-24-specific regression can reach `develop` before nightly catches it, and the same is true for a real published-predecessor regression. A green bounded PR check does not certify Node 24 or real historical predecessor execution, and nightly failure still blocks its publication. When deferred feedback is needed before nightly, explicitly request the non-publishing Full regression workflow for the desired branch or tag:
 

package/docs/validation.md

@@ -44,6 +44,23 @@ A build receipt binds checkout head, complete build inputs, toolchain, emitted f
 
 Npm download bytes may be reused with integrity checks and `--prefer-offline`, with normal network fallback. Every installation prefix remains fresh. Installed package trees, dependency certification, startup/profile state, mutable fixture repositories, passing outcomes, and publication evidence are never restored from caches.
 
+## Shared exact-package preparation
+
+A publication or Full regression lane installs the exact candidate once and shares that installation between `package-startup` and `package-contracts`. The installation is a separate command from the one that runs those owners, so the workflow can change runner state in between:
+
+```
+node scripts/release/run-validation-tier.mjs --prepare-exact-package --handoff <path>
+node scripts/release/run-validation-tier.mjs --exact-package-handoff <path> --result <path>
+```
+
+The preparing command verifies the existing build receipt and the package receipt for the exact candidate, installs once, and writes an `a1-exact-package-handoff-v1` document with its consumers, prepared paths, measured duration, and verified receipt. The receipt's `preparation.phases` splits that duration into `installMs` (the npm global install), `proxySynchronizationMs` (the pi-tui proxy repair), and `installedIdentityMs` (the installed-package identity walk); on hosted Windows runners the install phase is the cost, because npm writes roughly 13,000 dependency files there. It runs no other planned command, so Full regression's real work is not executed twice.
+
+The consuming command re-verifies that handoff against the lane, candidate digest, installation policy, declared consumers, and installed bytes before any owner runs, and records the result as `verified-shared-preparation`. A malformed handoff, one that contradicts the plan, or one that fails verification produces a single failed `exact-package-preparation` outcome and stops the run; it never falls back to a second installation. Removing the prepared installation stays with the consuming command either way.
+
+Without `--exact-package-handoff`, preparation stays lazy and bound to the first consuming invocation. Local runs and ordinary pull-request CI are unchanged.
+
+This split exists so Windows Defender real-time protection can be enabled between installation and the gates that launch the packaged product. Dependency installation and candidate extraction run in the runner's default protection state; the `defender-prerequisite` phase inside the startup gate remains the authority that protection is on when the product actually launches. To roll back, put the Defender step before `npm ci` again and drop both flags; do not remove the phase check or the receipt verification.
+
 ## Startup budget enforcement
 
 The exact-package startup gate always measures both profiles and all three launch kinds on the first attempt and never retries a measurement. `STARTUP_BUDGET_ENFORCEMENT` decides only what a timing overrun does:

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@timurproko/a1",
-  "version": "0.1.8-dev.443",
+  "version": "0.1.8-dev.447",
   "description": "Standalone terminal workspace for supervised native and managed agents",
   "type": "module",
   "privateLaunchContract": "neutral-launch-v1",