@timurproko/a1 0.2.0 → 0.2.1-dev.590

package/bin/ui.js

@@ -53,7 +53,7 @@ Promise.resolve().then(() => {
         cwd: process.cwd(),
         profileId,
         ownedSurfaces,
-        projectTrustPrompt: createConsoleProjectTrustPrompt(),
+        projectTrustPrompt: createConsoleProjectTrustPrompt({ presentation: profile === "a1" ? "bare" : "comparison" }),
         sessionForkPrompt: createConsoleSessionForkPrompt(),
         ...(sessionSelection === undefined ? {} : { sessionSelection }),
       });

package/dist/features/owned-ui/project-trust-dialog.d.ts

@@ -0,0 +1,2 @@
+/** Fixed startup-safe rendering only; project-derived presentation is forbidden before trust resolves. */
+export declare function renderProjectTrustDialog(cwd: string, selected: number, terminalWidth: number, terminalRows: number): readonly string[];

package/dist/features/owned-ui/project-trust-dialog.js

@@ -0,0 +1,55 @@
+const ACCENT = "\u001b[38;2;138;190;183m";
+const BORDER = "\u001b[38;2;95;135;255m";
+const MUTED = "\u001b[38;2;128;128;128m";
+const DIM = "\u001b[38;2;102;102;102m";
+const RESET_FG = "\u001b[39m";
+const BOLD = "\u001b[1m";
+const RESET_BOLD = "\u001b[22m";
+const EXPLANATION = "This allows to load project settings and resources, install missing project packages, and execute project extensions.";
+/** Fixed startup-safe rendering only; project-derived presentation is forbidden before trust resolves. */
+export function renderProjectTrustDialog(cwd, selected, terminalWidth, terminalRows) {
+    const width = Math.max(1, terminalWidth);
+    const rule = `${BORDER}${"─".repeat(width)}${RESET_FG}`;
+    const title = ` ${BOLD}${ACCENT}Trust project folder?${RESET_FG}${RESET_BOLD}`;
+    const path = ` ${MUTED}${sanitize(cwd)}${RESET_FG}`;
+    const choices = [choice("Trust", selected === 0), choice("Do not trust", selected === 1)];
+    const hint = ` ${DIM}↑/↓${MUTED} to navigate  ${DIM}Enter${MUTED} to select  ${DIM}Esc${MUTED} to cancel${RESET_FG}`;
+    const explanation = wrap(EXPLANATION, Math.max(1, width - 2)).map(line => ` ${line}`);
+    const preferred = [rule, title, path, "", ...explanation, "", ...choices, "", hint, rule];
+    if (preferred.length <= terminalRows)
+        return preferred;
+    const ruled = [rule, title, path, ...choices, hint, rule];
+    if (ruled.length <= terminalRows)
+        return ruled;
+    const compact = [title, path, ...choices, hint];
+    if (compact.length <= terminalRows)
+        return compact;
+    const essential = [title, ...choices, hint];
+    if (essential.length <= terminalRows)
+        return essential;
+    if (terminalRows >= 3)
+        return [...choices, hint];
+    if (terminalRows === 2)
+        return choices;
+    return [choices[selected] ?? choices[0] ?? ""];
+}
+function choice(label, selected) {
+    return selected ? ` ${ACCENT}→ ${label}${RESET_FG}` : `   ${label}`;
+}
+function wrap(text, width) {
+    const lines = [];
+    let line = "";
+    for (const word of text.split(/\s+/u)) {
+        if (line && line.length + word.length + 1 > width) {
+            lines.push(line);
+            line = "";
+        }
+        line += `${line ? " " : ""}${word}`;
+    }
+    if (line)
+        lines.push(line);
+    return lines;
+}
+function sanitize(text) {
+    return text.replace(/[\u0000-\u001f\u007f-\u009f]/gu, "�");
+}

package/dist/features/owned-ui/project-trust-prompt.d.ts

@@ -14,12 +14,10 @@ export interface ConsoleProjectTrustPromptOptions {
     readonly output?: Writable & {
         readonly isTTY?: boolean;
         readonly columns?: number;
+        readonly rows?: number;
     };
+    readonly presentation?: "bare" | "comparison";
 }
-/**
- * Pre-resource startup selector. It uses only fixed product wording and terminal
- * controls: no project setting, theme, extension, prompt, package, or skill is
- * consulted before the trust result exists.
- */
+/** Fixed pre-resource selector; no project resource is available. */
 export declare function createConsoleProjectTrustPrompt(options?: ConsoleProjectTrustPromptOptions): OwnedProjectTrustPrompt;
 export {};

package/dist/features/owned-ui/project-trust-prompt.js

@@ -9,11 +9,7 @@ const DIM = "\u001b[38;2;102;102;102m";
 const RESET_FG = "\u001b[39m";
 const BOLD = "\u001b[1m";
 const RESET_BOLD = "\u001b[22m";
-/**
- * Pre-resource startup selector. It uses only fixed product wording and terminal
- * controls: no project setting, theme, extension, prompt, package, or skill is
- * consulted before the trust result exists.
- */
+/** Fixed pre-resource selector; no project resource is available. */
 export function createConsoleProjectTrustPrompt(options = {}) {
     const input = options.input ?? process.stdin;
     const output = options.output ?? process.stdout;
@@ -21,6 +17,8 @@ export function createConsoleProjectTrustPrompt(options = {}) {
         if (input.isTTY !== true || output.isTTY !== true) {
             throw new Error("an interactive terminal is unavailable");
         }
+        const renderBareDialog = options.presentation === "comparison"
+            ? undefined : (await import("./project-trust-dialog.js")).renderProjectTrustDialog;
         const wasRaw = input.isRaw === true;
         let selected = 0;
         let restored = false;
@@ -32,8 +30,9 @@ export function createConsoleProjectTrustPrompt(options = {}) {
             output.write(`${CLEAR_HOME}${SHOW_CURSOR}${LEAVE_ALTERNATE_SCREEN}`);
         };
         const render = () => {
-            const width = Math.max(20, output.columns ?? 80);
-            const lines = [
+            const width = Math.max(renderBareDialog ? 1 : 20, output.columns ?? 80);
+            const rows = Math.max(1, output.rows ?? 24);
+            const lines = (renderBareDialog?.(cwd, selected, width, rows) ?? [
                 `${BOLD}${ACCENT}Trust project folder?${RESET_FG}${RESET_BOLD}`,
                 cwd,
                 "",
@@ -43,8 +42,9 @@ export function createConsoleProjectTrustPrompt(options = {}) {
                 optionRow("Do not trust", selected === 1),
                 "",
                 `${DIM}↑/↓${MUTED} to navigate  ${DIM}Enter${MUTED} to select  ${DIM}Esc${MUTED} to cancel${RESET_FG}`,
-            ];
-            output.write(`${CLEAR_HOME}${lines.map(line => clipAnsiSafe(line, width)).join("\n")}`);
+            ]).map(line => clipAnsiSafe(line, width));
+            const padding = renderBareDialog === undefined ? "" : "\n".repeat(Math.max(0, rows - lines.length));
+            output.write(`${CLEAR_HOME}${padding}${lines.join("\n")}`);
         };
         try {
             output.write(`${ENTER_ALTERNATE_SCREEN}${HIDE_CURSOR}`);

package/dist/integrations/pi/engine/project-trust-preflight.d.ts

@@ -5,14 +5,13 @@ export interface PiProjectTrustPreflightRequest {
 export type PiProjectTrustPreflightPrompt = (request: PiProjectTrustPreflightRequest) => Promise<boolean | null>;
 export interface PiProjectTrustPreflightResult {
     readonly trusted: boolean;
-    readonly source: "no-project-resources" | "saved" | "default" | "interactive" | "fail-closed";
+    readonly source: "saved" | "default" | "interactive" | "fail-closed";
     readonly diagnostic: string | null;
 }
 export interface ResolvePiProjectTrustPreflightOptions {
     readonly cwd: string;
     readonly agentDir: string;
     readonly prompt?: PiProjectTrustPreflightPrompt;
-    readonly hasProjectResources?: (cwd: string) => boolean;
 }
 /**
  * Resolves trust from global state only. It never constructs a project-trusted

package/dist/integrations/pi/engine/project-trust-preflight.js

@@ -1,14 +1,10 @@
-import { hasTrustRequiringProjectResources, ProjectTrustStore, SettingsManager, } from "../startup-public.js";
+import { ProjectTrustStore, SettingsManager, } from "../startup-public.js";
 /**
  * Resolves trust from global state only. It never constructs a project-trusted
  * settings manager or resource loader; callers may do that only after this
  * result exists.
  */
 export async function resolvePiProjectTrustPreflight(options) {
-    const hasProjectResources = options.hasProjectResources ?? hasTrustRequiringProjectResources;
-    if (!hasProjectResources(options.cwd)) {
-        return { trusted: true, source: "no-project-resources", diagnostic: null };
-    }
     const trustStore = new ProjectTrustStore(options.agentDir);
     const saved = trustStore.get(options.cwd);
     if (saved !== null)

package/dist/integrations/pi/engine/repository-pr-rest.d.ts

@@ -0,0 +1,21 @@
+interface PiPullRequestIdentity {
+    readonly number: number;
+    readonly url: string;
+}
+export interface PiGitHubRepositoryIdentity {
+    readonly owner: string;
+    readonly repository: string;
+}
+type PiGitHubFetch = (input: string | URL, init?: RequestInit) => Promise<Response>;
+type PiCommandReader = (cwd: string, signal: AbortSignal) => Promise<string | null>;
+export interface PiPullRequestRestDependencies {
+    readonly readOriginUrl?: PiCommandReader;
+    readonly fetch?: PiGitHubFetch;
+}
+/** Discover one exact branch pull request through GitHub's read-only REST API. */
+export declare function readPullRequestFromGitHub(cwd: string, branch: string, signal: AbortSignal, environment?: NodeJS.ProcessEnv, dependencies?: PiPullRequestRestDependencies): Promise<PiPullRequestIdentity | null>;
+/** Parse a supported GitHub origin URL without accepting credentials or non-GitHub hosts. */
+export declare function parseGitHubRepositoryRemote(remote: string): PiGitHubRepositoryIdentity | null;
+/** Validate a GitHub REST pull list as one exact branch association. */
+export declare function parseGitHubPullRequests(value: unknown, expectedRepository: PiGitHubRepositoryIdentity, branch: string): PiPullRequestIdentity | null;
+export {};

package/dist/integrations/pi/engine/repository-pr-rest.js

@@ -0,0 +1,155 @@
+import { execFile } from "node:child_process";
+const PROBE_TIMEOUT_MS = 5_000;
+const COMMAND_MAX_BUFFER_BYTES = 64 * 1024;
+const RESPONSE_MAX_BUFFER_BYTES = 1024 * 1024;
+const GITHUB_API_ORIGIN = "https://api.github.com";
+/** Discover one exact branch pull request through GitHub's read-only REST API. */
+export async function readPullRequestFromGitHub(cwd, branch, signal, environment = process.env, dependencies = {}) {
+    if (branch.length === 0 || signal.aborted)
+        return null;
+    const remote = await (dependencies.readOriginUrl ?? executeGitOriginUrl)(cwd, signal);
+    if (remote === null || signal.aborted)
+        return null;
+    const repository = parseGitHubRepositoryRemote(remote);
+    if (repository === null)
+        return null;
+    const endpoint = new URL(`/repos/${encodeURIComponent(repository.owner)}/${encodeURIComponent(repository.repository)}/pulls`, GITHUB_API_ORIGIN);
+    endpoint.searchParams.set("state", "all");
+    endpoint.searchParams.set("head", `${repository.owner}:${branch}`);
+    endpoint.searchParams.set("per_page", "100");
+    const headers = {
+        accept: "application/vnd.github+json",
+        "user-agent": "a1-pr-footer",
+        "x-github-api-version": "2022-11-28",
+    };
+    const token = environment.GH_TOKEN || environment.GITHUB_TOKEN;
+    if (token !== undefined && token.trim().length > 0)
+        headers.authorization = `Bearer ${token}`;
+    try {
+        const requestSignal = AbortSignal.any([signal, AbortSignal.timeout(PROBE_TIMEOUT_MS)]);
+        const response = await (dependencies.fetch ?? fetch)(endpoint, { headers, signal: requestSignal });
+        if (!response.ok || response.redirected)
+            return null;
+        const length = response.headers.get("content-length");
+        if (length !== null && (!/^\d+$/u.test(length) || Number(length) > RESPONSE_MAX_BUFFER_BYTES))
+            return null;
+        const bytes = await response.arrayBuffer();
+        if (bytes.byteLength > RESPONSE_MAX_BUFFER_BYTES || signal.aborted)
+            return null;
+        let value;
+        try {
+            value = JSON.parse(new TextDecoder().decode(bytes));
+        }
+        catch {
+            return null;
+        }
+        return parseGitHubPullRequests(value, repository, branch);
+    }
+    catch {
+        return null;
+    }
+}
+/** Parse a supported GitHub origin URL without accepting credentials or non-GitHub hosts. */
+export function parseGitHubRepositoryRemote(remote) {
+    const value = remote.trim();
+    if (value.length === 0 || /[\r\n]/u.test(value))
+        return null;
+    const scp = /^git@github\.com:([^/]+)\/([^/]+)$/iu.exec(value);
+    if (scp !== null)
+        return normalizeRepository(scp[1], scp[2]);
+    try {
+        const url = new URL(value);
+        if ((url.protocol !== "https:" && url.protocol !== "ssh:")
+            || url.hostname.toLowerCase() !== "github.com"
+            || url.password !== ""
+            || url.port !== ""
+            || url.search !== ""
+            || url.hash !== ""
+            || (url.protocol === "https:" && url.username !== "")
+            || (url.protocol === "ssh:" && url.username !== "git"))
+            return null;
+        const path = /^\/([^/]+)\/([^/]+)$/u.exec(url.pathname);
+        return path === null ? null : normalizeRepository(path[1], path[2]);
+    }
+    catch {
+        return null;
+    }
+}
+/** Validate a GitHub REST pull list as one exact branch association. */
+export function parseGitHubPullRequests(value, expectedRepository, branch) {
+    if (!Array.isArray(value))
+        return null;
+    const fullName = `${expectedRepository.owner}/${expectedRepository.repository}`;
+    const matches = [];
+    for (const candidate of value) {
+        if (!isRecord(candidate)
+            || !Number.isSafeInteger(candidate.number)
+            || candidate.number <= 0
+            || typeof candidate.html_url !== "string"
+            || !isRecord(candidate.head)
+            || candidate.head.ref !== branch
+            || !isRecord(candidate.head.repo)
+            || typeof candidate.head.repo.full_name !== "string"
+            || candidate.head.repo.full_name.toLowerCase() !== fullName.toLowerCase()
+            || !isRecord(candidate.base)
+            || !isRecord(candidate.base.repo)
+            || typeof candidate.base.repo.full_name !== "string"
+            || candidate.base.repo.full_name.toLowerCase() !== fullName.toLowerCase())
+            continue;
+        const eligible = candidate.state === "open"
+            || (candidate.state === "closed" && typeof candidate.merged_at === "string" && Number.isFinite(Date.parse(candidate.merged_at)));
+        if (!eligible)
+            continue;
+        const pullRequest = normalizePullRequest(candidate.number, candidate.html_url, expectedRepository);
+        if (pullRequest !== null)
+            matches.push(pullRequest);
+    }
+    return matches.length === 1 ? matches[0] : null;
+}
+function normalizePullRequest(number, value, expectedRepository) {
+    try {
+        const url = new URL(value);
+        if (url.protocol !== "https:"
+            || url.hostname.toLowerCase() !== "github.com"
+            || url.username !== ""
+            || url.password !== ""
+            || url.port !== ""
+            || url.search !== ""
+            || url.hash !== "")
+            return null;
+        const path = /^\/([^/]+)\/([^/]+)\/pull\/(\d+)\/?$/u.exec(url.pathname);
+        if (path === null
+            || Number(path[3]) !== number
+            || path[1].toLowerCase() !== expectedRepository.owner.toLowerCase()
+            || path[2].toLowerCase() !== expectedRepository.repository.toLowerCase())
+            return null;
+        return { number, url: url.href.replace(/\/$/u, "") };
+    }
+    catch {
+        return null;
+    }
+}
+function normalizeRepository(ownerValue, repositoryValue) {
+    if (ownerValue === undefined || repositoryValue === undefined)
+        return null;
+    const repository = repositoryValue.replace(/\.git$/iu, "");
+    if (!/^[A-Za-z0-9](?:[A-Za-z0-9-]{0,38})$/u.test(ownerValue)
+        || !/^[A-Za-z0-9_.-]+$/u.test(repository)
+        || repository === "."
+        || repository === "..")
+        return null;
+    return { owner: ownerValue, repository };
+}
+function executeGitOriginUrl(cwd, signal) {
+    return new Promise(resolve => {
+        try {
+            execFile("git", ["config", "--get", "remote.origin.url"], { cwd, windowsHide: true, timeout: PROBE_TIMEOUT_MS, maxBuffer: COMMAND_MAX_BUFFER_BYTES, signal, encoding: "utf8" }, (error, stdout) => { resolve(error === null && typeof stdout === "string" ? stdout : null); });
+        }
+        catch {
+            resolve(null);
+        }
+    });
+}
+function isRecord(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value);
+}

package/dist/integrations/pi/engine/repository-pr.d.ts

@@ -3,6 +3,14 @@ export interface PiPullRequestIdentity {
     readonly url: string;
 }
 export type PiPullRequestProbe = (cwd: string, branch: string, signal: AbortSignal) => Promise<PiPullRequestIdentity | null>;
-/** Read an exact branch's open or merged PR. */
-export declare function readPullRequest(cwd: string, branch: string, signal: AbortSignal, environment?: NodeJS.ProcessEnv): Promise<PiPullRequestIdentity | null>;
+type PiCommandReader = (cwd: string, signal: AbortSignal) => Promise<string | null>;
+type PiPullRequestRestProbe = (cwd: string, branch: string, signal: AbortSignal, environment: NodeJS.ProcessEnv) => Promise<PiPullRequestIdentity | null>;
+export interface PiPullRequestDiscoveryDependencies {
+    readonly executeGh?: PiCommandReader;
+    readonly restProbe?: PiPullRequestRestProbe;
+}
+/** Read an exact branch's open or merged PR, preferring GitHub CLI before the REST fallback. */
+export declare function readPullRequest(cwd: string, branch: string, signal: AbortSignal, environment?: NodeJS.ProcessEnv, dependencies?: PiPullRequestDiscoveryDependencies): Promise<PiPullRequestIdentity | null>;
+/** Parse and validate the normalized payload emitted by `gh pr view`. */
 export declare function parsePullRequest(stdout: string, branch: string): PiPullRequestIdentity | null;
+export {};

package/dist/integrations/pi/engine/repository-pr.js

@@ -2,18 +2,24 @@ import { execFile } from "node:child_process";
 import { PRODUCT_IDENTITY } from "../../../product-identity.js";
 const GH_TIMEOUT_MS = 5_000;
 const GH_MAX_BUFFER_BYTES = 64 * 1024;
-/** Read an exact branch's open or merged PR. */
-export async function readPullRequest(cwd, branch, signal, environment = process.env) {
+/** Read an exact branch's open or merged PR, preferring GitHub CLI before the REST fallback. */
+export async function readPullRequest(cwd, branch, signal, environment = process.env, dependencies = {}) {
     if (branch.length === 0 || signal.aborted)
         return null;
     const preview = environment[PRODUCT_IDENTITY.environment.prFooterPreview];
     if (preview !== undefined)
         return parsePullRequest(preview, branch);
-    const stdout = await executeGh(cwd, signal);
-    if (stdout === null)
+    const stdout = await (dependencies.executeGh ?? executeGh)(cwd, signal);
+    if (stdout !== null) {
+        const pullRequest = parsePullRequest(stdout, branch);
+        if (pullRequest !== null)
+            return pullRequest;
+    }
+    if (signal.aborted)
         return null;
-    return parsePullRequest(stdout, branch);
+    return (dependencies.restProbe ?? readPullRequestFromRest)(cwd, branch, signal, environment);
 }
+/** Parse and validate the normalized payload emitted by `gh pr view`. */
 export function parsePullRequest(stdout, branch) {
     let value;
     try {
@@ -47,6 +53,17 @@ export function parsePullRequest(stdout, branch) {
         return null;
     }
 }
+async function readPullRequestFromRest(cwd, branch, signal, environment) {
+    try {
+        const fallback = await import("./repository-pr-rest.js");
+        if (signal.aborted)
+            return null;
+        return fallback.readPullRequestFromGitHub(cwd, branch, signal, environment);
+    }
+    catch {
+        return null;
+    }
+}
 function executeGh(cwd, signal) {
     return new Promise(resolve => {
         try {

package/dist/native/darwin-arm64/manifest.json

@@ -5,7 +5,7 @@
   "platform": "darwin",
   "architecture": "arm64",
   "capability": "supported",
-  "builtAt": "2026-09-25T08:45:59.617Z",
+  "builtAt": "2026-09-27T09:22:05.237Z",
   "artifact": {
     "filename": "process-guardian",
     "sha256": "9db1726bbe3fc2e8292f2ead1e7e9d0fd4d7d0dc9217b372582bf354b0f565dc",

package/dist/native/linux-x64/manifest.json

@@ -5,7 +5,7 @@
   "platform": "linux",
   "architecture": "x64",
   "capability": "supported",
-  "builtAt": "2026-09-25T08:45:41.109Z",
+  "builtAt": "2026-09-27T09:22:09.867Z",
   "artifact": {
     "filename": "process-guardian",
     "sha256": "d8cda6b0c7cb36c0cc41e90802aceebf6c02eaebbc08a83d7d963d2e918dbd7a",

package/dist/native/win32-x64/manifest.json

@@ -5,10 +5,10 @@
   "platform": "win32",
   "architecture": "x64",
   "capability": "supported",
-  "builtAt": "2026-09-25T08:46:32.399Z",
+  "builtAt": "2026-09-27T09:22:55.355Z",
   "artifact": {
     "filename": "process-guardian.exe",
-    "sha256": "ca9372c0bcf87ed605d89627990986b905b3c756244ce3dd1f51b0b324f77542",
+    "sha256": "68d285c38302670a03c8b58d0e387f17614070bcdcfdb5d3cead3a47d1d19763",
     "size": 178176
   },
   "provenance": {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@timurproko/a1",
-  "version": "0.2.0",
+  "version": "0.2.1-dev.590",
   "description": "Standalone terminal workspace for supervised native and managed agents",
   "type": "module",
   "privateLaunchContract": "neutral-launch-v1",