@timurproko/a1 0.1.8-dev.468 → 0.1.8-dev.472

package/dist/integrations/pi/session-ui/response-copy-transport.js

@@ -93,17 +93,21 @@ function startHelper(snapshot, mode, controlLimit, phase, helper) {
     let prepared = [], preparedBytes = 0, expectedBytes;
     const observedPhases = new Set();
     let cleanup;
-    const cancel = () => {
+    const stop = (discard) => {
         if (stopping)
             return;
         stopping = true;
-        prepared = [];
+        if (discard)
+            prepared = [];
         iterator = undefined;
         child.kill("SIGKILL");
         // Concurrency: a kernel-stuck child is quarantined by the coordinator, not allowed to pin UI shutdown.
         cleanup = setTimeout(() => { child.unref(); child.channel?.unref(); }, COPY_CLEANUP_MS);
         cleanup.unref();
     };
+    const cancel = () => stop(true);
+    // Invariant: reaping keeps a complete result's prepared text; discarding it would write "" to the clipboard.
+    const reap = () => stop(false);
     const result = new Promise(resolve => {
         let settled = false;
         const settle = () => {
@@ -160,8 +164,8 @@ function startHelper(snapshot, mode, controlLimit, phase, helper) {
             else if (message?.kind === "result" && ["delivered", "submitted-unverified", "failed"].includes(message.result?.outcome)) {
                 outcome = message;
                 iterator = undefined;
-                // Concurrency: a result is not an exit fence. Bound a malformed helper that sends a result but never exits.
-                cleanup = setTimeout(cancel, COPY_CLEANUP_MS);
+                // Concurrency: a result is not an exit fence; bound a helper that sends a result but never exits.
+                cleanup = setTimeout(reap, COPY_CLEANUP_MS);
                 cleanup.unref();
             }
             else

package/dist/integrations/pi/session-ui/session-shell-root.d.ts

@@ -72,6 +72,15 @@ export interface OwnedUiSessionShellOptions {
         readonly intervalMs?: number;
         readonly scheduler?: StreamPresentationScheduler;
     };
+    /**
+     * Minimum time the reload box stays visible so a fast reload still reads as one.
+     * Production uses the default hold; tests inject `now`/`sleep` for determinism.
+     */
+    readonly reloadPresentation?: {
+        readonly minVisibleMs?: number;
+        readonly now?: () => number;
+        readonly sleep?: (ms: number) => Promise<void>;
+    };
     /** Optional deterministic seam for keyboard scheduling and phase evidence. */
     readonly promptSuggestions?: {
         readonly diagnostics?: SuggestionDiagnosticObserver;

package/dist/integrations/pi/session-ui/session-shell.js

@@ -56,6 +56,7 @@ export class OwnedUiSessionShell {
     #unbindClipboardWriter;
     #damageTerminal;
     #quitOutro;
+    #reloadPresentation;
     #streamPresentation;
     #removeViewportPreInput;
     #unsubscribeSettings;
@@ -251,6 +252,7 @@ export class OwnedUiSessionShell {
         this.runtime = runtime;
         this.#damageTerminal = damageTerminal ?? null;
         this.#quitOutro = options.quitOutro;
+        this.#reloadPresentation = options.reloadPresentation;
         const presentationInterval = options.streamPresentation?.intervalMs ?? STREAM_PRESENTATION_INTERVAL_MS;
         streamPresentation = options.streamPresentation?.scheduler === undefined
             ? new StreamPresentationCoalescer(() => this.runtime.requestRender(), presentationInterval)
@@ -1153,6 +1155,8 @@ export class OwnedUiSessionShell {
             }, "Creating gist...")
             : undefined;
         const operationSurface = shareSurface ?? (request.command === "reload" ? createPiShellReloadBox() : undefined);
+        const now = this.#reloadPresentation?.now ?? Date.now;
+        const shownAt = now();
         if (operationSurface) {
             this.root.setInputSurface(operationSurface);
             this.runtime.requestRender();
@@ -1163,6 +1167,10 @@ export class OwnedUiSessionShell {
         }
         finally {
             if (operationSurface) {
+                // Rationale: a near-instant reload would flash the box for a frame or skip it entirely; holding it
+                // briefly keeps the reload legible regardless of how fast the resources actually load.
+                if (request.command === "reload")
+                    await this.#holdReloadSurface(now() - shownAt);
                 this.root.setInputSurface(null);
                 this.runtime.requestRender();
             }
@@ -1207,6 +1215,14 @@ export class OwnedUiSessionShell {
         this.runtime.requestRender();
         return workflowAdapterResult(result);
     }
+    async #holdReloadSurface(visibleMs) {
+        const minVisibleMs = this.#reloadPresentation?.minVisibleMs ?? RELOAD_SURFACE_MIN_VISIBLE_MS;
+        const remaining = minVisibleMs - visibleMs;
+        if (remaining <= 0 || this.#disposed)
+            return;
+        const sleep = this.#reloadPresentation?.sleep ?? ((ms) => new Promise(resolve => setTimeout(resolve, ms)));
+        await sleep(remaining);
+    }
     showTrustSelector() {
         const context = this.backend.pinnedProjectTrustContext();
         const close = () => {
@@ -1853,6 +1869,7 @@ function workflowAdapterResult(result) {
 }
 const INTERRUPT = "\u0003";
 const INTERRUPT_CHORD_MS = 1_500;
+const RELOAD_SURFACE_MIN_VISIBLE_MS = 400;
 function isWorkflowRoute(value) {
     return PINNED_PI_WORKFLOW_COMMAND_NAMES.includes(value)
         || PINNED_PI_HIDDEN_COMMAND_NAMES.includes(value);

package/dist/native/darwin-arm64/manifest.json

@@ -5,7 +5,7 @@
   "platform": "darwin",
   "architecture": "arm64",
   "capability": "supported",
-  "builtAt": "2026-09-17T18:35:35.556Z",
+  "builtAt": "2026-09-18T06:59:11.094Z",
   "artifact": {
     "filename": "process-guardian",
     "sha256": "9db1726bbe3fc2e8292f2ead1e7e9d0fd4d7d0dc9217b372582bf354b0f565dc",

package/dist/native/linux-x64/manifest.json

@@ -5,7 +5,7 @@
   "platform": "linux",
   "architecture": "x64",
   "capability": "supported",
-  "builtAt": "2026-09-17T18:35:34.322Z",
+  "builtAt": "2026-09-18T06:59:16.149Z",
   "artifact": {
     "filename": "process-guardian",
     "sha256": "d8cda6b0c7cb36c0cc41e90802aceebf6c02eaebbc08a83d7d963d2e918dbd7a",

package/dist/native/win32-x64/manifest.json

@@ -5,10 +5,10 @@
   "platform": "win32",
   "architecture": "x64",
   "capability": "supported",
-  "builtAt": "2026-09-17T18:36:08.573Z",
+  "builtAt": "2026-09-18T07:00:04.002Z",
   "artifact": {
     "filename": "process-guardian.exe",
-    "sha256": "2e6e2de410d516ae2f78b20e7253e0feb789fc460de8b5de9ec3a22219395309",
+    "sha256": "fe38413d952c311619532245f5fad4fef8461e7f23f4c0d3b3d72326f2516e56",
     "size": 177664
   },
   "provenance": {

package/docs/architecture/response-copy-delivery.md

@@ -19,7 +19,7 @@ A generated probe on Windows Node 24.16.0 copied the same eight-character range
 - Copy: 5-second admission deadline, one executing request and one newest pending request, at most 16 MiB UTF-8 text. Source snapshots retain only selected rows, capped at 65,536 rows and 32 Mi UTF-16 code units; they do not keep an obsolete whole-transcript graph.
 - Paste: eight distinct admitted requests, a 5-second acquisition budget including the captured write wait, and a 15-second deadline through insertion. A canceled executor counts against capacity until its stop fence. Image conversion has one process-wide slot. Copy supersession is deliberately not used for paste edits.
 - Text transfer: 16 MiB UTF-8 cap; IPC fragments are at most 16,384 code units and preserve surrogate pairs. The receiver acknowledges each fragment. Prepared large text is stored behind the existing compact chip rather than inserted as millions of editor characters. Existing source-image, pixel, encoded-output and attachment-count limits remain unchanged.
-- Clipboard executors have a 250 ms stop grace. POSIX command fallbacks share the paste helper's isolated process group; strict command reads use a forceful kill signal. Unconfirmed executor termination retains its capacity instead of allowing unbounded replacements or late A1-controlled writes. No helper inherits the UI terminal or places clipboard payloads in argv, temporary files, or logs.
+- Clipboard executors have a 250 ms stop grace. A helper that has already reported a complete prepared result and lingers past that grace is reaped, not canceled: it is still terminated, but its prepared text is delivered exactly rather than replaced with an empty payload. Only an explicit cancellation, a protocol violation, or an incomplete byte count discards prepared text. POSIX command fallbacks share the paste helper's isolated process group; strict command reads use a forceful kill signal. Unconfirmed executor termination retains its capacity instead of allowing unbounded replacements or late A1-controlled writes. No helper inherits the UI terminal or places clipboard payloads in argv, temporary files, or logs.
 - Local copy prefers native delivery outside the terminal. OSC 52 uses the existing writer only on a non-blocking supported output route and is capped at a complete 64 KiB control, or a lower advertised limit. Submission is not clipboard acknowledgment. Remote/multiplexed sessions never silently read or write a different host's clipboard. Native Ctrl+V acquisition is unavailable when only the remote terminal owns the desired clipboard; normal terminal-provided paste remains supported.
 - URL-chip decoration: at most 65,536 UTF-8 bytes of added OSC 8 metadata per editor render pass across rows and repeated occurrences, including opening/closing pairs and cleanup closes. Targets that do not fit are omitted whole before control construction; a UTF-16 length precheck avoids scanning huge backing values. The budget resets each pass. Full chip data, atomic editing and exact copy/history/submission expansion remain intact; ordinary in-budget links retain their targets. Terminal automatic URL recognition is separate from explicit metadata.
 - Path-list presentation: the isolated classifier budgets 4,096 UTF-16 units per paste for existing individual tags plus 20 suffix-reserve units per occurrence. Over-budget lists use one existing text-paste chip backed by all classified full paths concatenated in order, including repetitions, without extra separators or re-normalization. No individual members are adopted into the UI before compaction. Small lists retain their file/folder/image-file chips; failed/timed-out classification retains the existing original-text fallback. Existing draft/history chips and the synchronous compatibility classifier are unchanged.

package/docs/ci-release-runbook.md

@@ -250,6 +250,7 @@ Rules that do not bend:
   path, and use the confirmed apply mode only for an accepted mutable policy change.
 - **Nightly documentation review fails:** inspect the reported paths and rules, identify the introducing merge from the nightly interval, and repair the invariant before unrelated work proceeds.
 - **Development publication fails:** fix the cause and rerun `npm run develop`; an npm version that already exists is never overwritten.
+- **Registry verification times out:** a `has not propagated` failure after a successful `npm publish` means npm is still ingesting the upload; it warns that a provenance-signed package "may take a few minutes" and the publisher polls for ten minutes. Confirm the version and its shasum on `https://registry.npmjs.org/<name>/<version>`, then rerun the failed jobs: the final registry check finds the exact bytes, skips `npm publish`, and verification passes. A digest or tag mismatch is not a timeout and is never repaired by rerunning.
 - **Stable preparation stops before dispatch:** inspect the reported version PR/worktree. After preserving work, an exact matching pending PR can be observed again. If develop already declares the prepared stable version, use its exact target (for example `npm run release -- 0.1.8`) only after verifying that source's merged PR and confirming the registry/tag guards still permit it. Do not use `patch` from stable develop to retry the same version: that deliberately selects the next patch.
 - **Stable publication fails or is uncertain:** inspect the workflow, registry version/digest, tag, and release before choosing recovery. No reopening PR is prepared. Never republish immutable bytes or move a release tag.
 - **Stable publication succeeded but reopening stops:** the stable version is already published. Inspect and finish the reported next-development PR manually; do not repeat stable publication. If no reopening PR was created, prepare the next-development version through a separately validated manual PR after inspecting remote state.

package/docs/local-worktree-cleanup.md

@@ -207,4 +207,4 @@ Dependency-free focused fixtures (temporary repositories only, no live PR mutati
 node --test test/repository-governance/local-cleanup.node.mjs test/repository-governance/local-cleanup-evidence.node.mjs test/repository-governance/local-cleanup-watch.node.mjs
 ```
 
-The Vitest bridge includes these fixtures in ordinary fast CI, whose runner is Windows. On Windows the suite exercises an actual exclusive file handle and a junction; a non-Windows run explicitly skips the Windows-only handle case rather than claiming it passed. Required current-head CI and a separately authorized live archive lifecycle remain necessary before acceptance; fixtures and preview do not replace those gates.
+The Vitest bridge includes these fixtures in ordinary fast CI, whose runner is Windows. On Windows the suite exercises an actual exclusive file handle and a junction; a non-Windows run explicitly skips the Windows-only handle case rather than claiming it passed. The handle fixture starts one throwaway `powershell.exe` when the file loads so the hosted runner's interpreter cold start overlaps the earlier tests instead of the fixture's timed hold; its bounds and release protocol are unchanged. Required current-head CI and a separately authorized live archive lifecycle remain necessary before acceptance; fixtures and preview do not replace those gates.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@timurproko/a1",
-  "version": "0.1.8-dev.468",
+  "version": "0.1.8-dev.472",
   "description": "Standalone terminal workspace for supervised native and managed agents",
   "type": "module",
   "privateLaunchContract": "neutral-launch-v1",