@timurproko/a1 0.2.1-dev.590 → 0.2.1-dev.599

package/README.md

@@ -3,20 +3,26 @@
 ## Install
 
 ```sh
-npm install --global @timurproko/a1@latest
+# stable release
+npx -y @timurproko/a1-install
+
+# development channel
+npx -y @timurproko/a1-install --develop
+
+# exact development version
+npx -y @timurproko/a1-install --version 0.1.8-dev.107
 ```
 
-Any channel can also be installed or updated directly with npm, without the
-`a1 update` commands:
+The installer keeps npm's dependency transcript out of the normal terminal output,
+shows one progress row, activates the installed release, and verifies the command
+before reporting success. The shorter `npx @timurproko/a1-install` form also works,
+but npm may ask for first-use confirmation; `-y` avoids that prompt.
 
-```sh
-# dev channel (next tag)
-npm install -g @timurproko/a1@next
+Direct npm installation remains available as a fallback or manual recovery path:
 
-# stable release
+```sh
 npm install -g @timurproko/a1@latest
-
-# exact version
+npm install -g @timurproko/a1@next
 npm install -g @timurproko/a1@0.1.8-dev.107
 ```
 

package/dist/app/session-shell/response-copy-helper.js

@@ -70,10 +70,6 @@ async function receive(message) {
         send({ kind: "phase", phase: "extracted", bytes });
         const text = parts.join("\n");
         parts = [];
-        if (text.length === 0) {
-            finish({ outcome: "failed", failure: "size" });
-            return;
-        }
         if (header.mode === "prepare") {
             // Protocol: this success acknowledges prepared IPC only; the owner must still await its injected writer.
             output = text;

package/dist/app/session-shell/session-shell.js

@@ -866,12 +866,12 @@ export class OwnedUiSessionShell {
             this.root.setInputSurface(null);
             this.runtime.requestRender();
         };
-        const select = (level, persist) => {
+        const select = (level) => {
             close();
-            void this.runWorkflow({ command: "thinking", argument: "", selection: level, ...(persist ? { persist: true } : {}) });
+            void this.runWorkflow({ command: "thinking", argument: "", selection: level });
         };
         const { createPiShellThinkingSelector } = await import("../../integrations/pi/components/thinking-selector-dialog.js");
-        const component = createPiShellThinkingSelector(snapshot.thinkingLevel, snapshot.availableThinkingLevels, level => select(level, false), close, level => select(level, true), snapshot.defaultThinkingLevel, this.#customViewport ? {
+        const component = createPiShellThinkingSelector(snapshot.thinkingLevel, snapshot.availableThinkingLevels, select, close, level => this.backend.setDefaultThinkingLevel(level), snapshot.defaultThinkingLevel, this.#customViewport ? {
             profile: "bare",
             cycleBinding: this.root.editor.keybindingConfig()["app.thinking.cycle"] ?? [],
         } : undefined);

package/dist/integrations/pi/components/thinking-selector-dialog.d.ts

@@ -5,4 +5,4 @@ export interface PiShellThinkingSelectorPresentation {
     readonly cycleBinding: string | readonly string[];
 }
 /** Lazily loaded because thinking-selector code does not belong to the startup graph before `/thinking` opens. */
-export declare function createPiShellThinkingSelector(currentLevel: ThinkingSelectorLevel, availableLevels: readonly ThinkingSelectorLevel[], onSelect: (level: string) => void, onCancel: () => void, onSelectAsDefault?: (level: string) => void, defaultLevel?: ThinkingSelectorLevel, presentation?: PiShellThinkingSelectorPresentation): PiShellComponentPort;
+export declare function createPiShellThinkingSelector(currentLevel: ThinkingSelectorLevel, availableLevels: readonly ThinkingSelectorLevel[], onSelect: (level: ThinkingSelectorLevel) => void, onCancel: () => void, onSelectAsDefault?: (level: ThinkingSelectorLevel) => void, defaultLevel?: ThinkingSelectorLevel, presentation?: PiShellThinkingSelectorPresentation): PiShellComponentPort;

package/dist/integrations/pi/components/upstream/components/thinking-selector.d.ts

@@ -2,14 +2,15 @@
  * Provenance: @earendil-works/pi-coding-agent 0.87.1 (MIT), commit f07218c4d4bbc12bef056a7058c3dd49dfe41abe,
  * packages/coding-agent/src/modes/interactive/components/thinking-selector.ts.
  * Modifications: Preserve the searchable thinking-level selector, current/default semantics,
- * selection, save, cancellation, and focus while accepting the active bare-A1 cycle-key label from the
- * shell, styling the title with the established bold semantic accent treatment, placing it directly
- * below the top rule through the shared compact padded modal frame and its muted hint directly below
- * it, deduplicating levels, and rendering aligned muted descriptions after adjacent active and
- * bracketed default markers. All list and border colors use the owned theme and its explicit color
- * mode, and the footer uses the shared bare-A1 modal shortcut row. The comparison profile retains the
- * public pinned component.
- * Deviations: owned-modal-shortcut-hints, owned-level-cycle-shortcut, owned-thinking-selector-heading.
+ * selection, and focus while accepting the active bare-A1 cycle-key label from the shell, styling the
+ * title with the established bold semantic accent treatment, placing it directly below the top rule
+ * through the shared compact padded modal frame and its muted hint directly below it, deduplicating
+ * levels, and rendering aligned muted descriptions after fixed active and bracketed default columns.
+ * Bare A1 persists defaults immediately on Space, closes only on Escape, and uses the shared compact
+ * semantic shortcut row. All list and border colors use the owned theme and its explicit color mode.
+ * The comparison profile retains the public pinned component.
+ * Deviations: owned-modal-shortcut-hints, owned-level-cycle-shortcut, owned-thinking-selector-heading,
+ * owned-thinking-selector-controls.
  */
 import { Container, type Focusable, SelectList } from "@earendil-works/pi-tui";
 export type ThinkingSelectorLevel = "off" | "minimal" | "low" | "medium" | "high" | "xhigh" | "max";

package/dist/integrations/pi/components/upstream/components/thinking-selector.js

@@ -2,16 +2,17 @@
  * Provenance: @earendil-works/pi-coding-agent 0.87.1 (MIT), commit f07218c4d4bbc12bef056a7058c3dd49dfe41abe,
  * packages/coding-agent/src/modes/interactive/components/thinking-selector.ts.
  * Modifications: Preserve the searchable thinking-level selector, current/default semantics,
- * selection, save, cancellation, and focus while accepting the active bare-A1 cycle-key label from the
- * shell, styling the title with the established bold semantic accent treatment, placing it directly
- * below the top rule through the shared compact padded modal frame and its muted hint directly below
- * it, deduplicating levels, and rendering aligned muted descriptions after adjacent active and
- * bracketed default markers. All list and border colors use the owned theme and its explicit color
- * mode, and the footer uses the shared bare-A1 modal shortcut row. The comparison profile retains the
- * public pinned component.
- * Deviations: owned-modal-shortcut-hints, owned-level-cycle-shortcut, owned-thinking-selector-heading.
+ * selection, and focus while accepting the active bare-A1 cycle-key label from the shell, styling the
+ * title with the established bold semantic accent treatment, placing it directly below the top rule
+ * through the shared compact padded modal frame and its muted hint directly below it, deduplicating
+ * levels, and rendering aligned muted descriptions after fixed active and bracketed default columns.
+ * Bare A1 persists defaults immediately on Space, closes only on Escape, and uses the shared compact
+ * semantic shortcut row. All list and border colors use the owned theme and its explicit color mode.
+ * The comparison profile retains the public pinned component.
+ * Deviations: owned-modal-shortcut-hints, owned-level-cycle-shortcut, owned-thinking-selector-heading,
+ * owned-thinking-selector-controls.
  */
-import { Container, fuzzyFilter, getKeybindings, Input, SelectList, Spacer, Text, } from "@earendil-works/pi-tui";
+import { Container, fuzzyFilter, getKeybindings, Input, Key, matchesKey, SelectList, Spacer, Text, } from "@earendil-works/pi-tui";
 import { DynamicBorder } from "../../../startup-public.js";
 import { addPiModalHeader, adoptPiModalFrame } from "../../modal-frame.js";
 import { piTheme, renderPiModalShortcutHints } from "../../theme.js";
@@ -72,9 +73,9 @@ export class OwnedThinkingSelectorComponent extends Container {
         this.addChild(this.selectListContainer);
         this.addChild(new Spacer(1));
         this.addChild(new Text(renderPiModalShortcutHints([
-            { key: this.keyDisplayText("tui.select.confirm"), action: "to select" },
-            { key: this.keyDisplayText("app.thinking.save"), action: "to set as default" },
-            { key: this.keyDisplayText("tui.select.cancel"), action: "to cancel" },
+            { key: this.keyDisplayText("tui.select.confirm"), action: "select" },
+            { key: "Space", action: "default" },
+            { key: "Esc", action: "close" },
         ]), 0, 0));
         this.addChild(new DynamicBorder((text) => piTheme().fg("border", text)));
         adoptPiModalFrame(this, { topIndex: 0, bottomIndex: this.children.length - 1, header });
@@ -88,20 +89,15 @@ export class OwnedThinkingSelectorComponent extends Container {
             .join("/");
     }
     buildSelectList(items, preselect) {
-        const markerWidth = (item) => (item.value === this.currentLevel ? 2 : 0) + (item.value === this.defaultThinkingLevel ? 10 : 0);
-        const primaryWidth = this.allItems.reduce((widest, item) => {
-            const level = item.label ?? item.value;
-            return Math.max(widest, level.length + markerWidth(item));
-        }, 0);
+        const levelWidth = this.allItems.reduce((widest, item) => Math.max(widest, (item.label ?? item.value).length), 0);
         const themedItems = items.map((item) => {
-            const level = item.label ?? item.value;
-            const currentMarker = item.value === this.currentLevel ? ` ${piTheme().fg("success", "✓")}` : "";
+            const level = (item.label ?? item.value).padEnd(levelWidth);
+            const currentMarker = item.value === this.currentLevel ? ` ${piTheme().fg("success", "✓")}` : "  ";
             const defaultMarker = item.value === this.defaultThinkingLevel
                 ? ` ${piTheme().fg("muted", "[default]")}`
-                : "";
-            const separator = " ".repeat(Math.max(1, primaryWidth - level.length - markerWidth(item) + 1));
+                : "          ";
             const description = item.description ? piTheme().fg("muted", item.description) : "";
-            return { value: item.value, label: `${level}${currentMarker}${defaultMarker}${separator}${description}` };
+            return { value: item.value, label: `${level}${currentMarker}${defaultMarker} ${description}` };
         });
         // Invariant: the bare selector uses the owned theme's explicit color mode, not upstream's host detection.
         const list = new SelectList(themedItems, Math.max(1, themedItems.length), {
@@ -115,7 +111,6 @@ export class OwnedThinkingSelectorComponent extends Container {
         if (currentIndex !== -1)
             list.setSelectedIndex(currentIndex);
         list.onSelect = (item) => this.onSelect(item.value);
-        list.onCancel = () => this.onCancel();
         return list;
     }
     applyFilter(query) {
@@ -130,16 +125,22 @@ export class OwnedThinkingSelectorComponent extends Container {
     }
     handleInput(keyData) {
         const kb = getKeybindings();
-        if (kb.matches(keyData, "app.thinking.save") && this.onSelectAsDefault) {
+        if (keyData === " ") {
             const item = this.selectList.getSelectedItem();
-            if (item)
-                this.onSelectAsDefault(item.value);
+            if (item) {
+                this.defaultThinkingLevel = item.value;
+                this.applyFilter(this.searchInput.getValue());
+                this.onSelectAsDefault?.(this.defaultThinkingLevel);
+            }
+            return;
+        }
+        if (matchesKey(keyData, Key.escape)) {
+            this.onCancel();
             return;
         }
         const isNav = kb.matches(keyData, "tui.select.up") ||
             kb.matches(keyData, "tui.select.down") ||
-            kb.matches(keyData, "tui.select.confirm") ||
-            kb.matches(keyData, "tui.select.cancel");
+            kb.matches(keyData, "tui.select.confirm");
         if (isNav) {
             this.selectList.handleInput(keyData);
             return;

package/dist/integrations/pi/engine/adapter.d.ts

@@ -118,6 +118,8 @@ export declare class PiEngineAdapter implements OwnedUiPromptSuggestionGenerator
      * theme's name, or a `light/dark` pair meaning "follow the terminal".
      */
     configuredTheme(): string | undefined;
+    /** Persist the global thinking default without changing the live session level. */
+    setDefaultThinkingLevel(level: PiPinnedSettingsSnapshot["defaultThinkingLevel"]): void;
     /** Settings port for the live runtime, or null before the runtime is available. */
     settingsPort(): PiSettingsBridge | null;
     /** Which settings surface this adapter serves; hidden-in-bare effects are unbindable in bare mode. */

package/dist/integrations/pi/engine/adapter.js

@@ -379,6 +379,10 @@ export class PiEngineAdapter {
     configuredTheme() {
         return this.#settings.configuredTheme();
     }
+    /** Persist the global thinking default without changing the live session level. */
+    setDefaultThinkingLevel(level) {
+        this.#settings.setDefaultThinkingLevel(level);
+    }
     /** Settings port for the live runtime, or null before the runtime is available. */
     settingsPort() {
         return this.#settings.settingsPort();

package/dist/integrations/pi/engine/session-runtime.js

@@ -170,11 +170,7 @@ export class PiEngineRuntime {
         this.#sessionBindingGeneration += 1;
         this.#session = session;
         this.#sessionCommands = new PiSessionCommandIntegration(session);
-        this.#compactionProgress?.dispose();
-        this.#compactionProgress = observeCompactionProgress(session, percent => {
-            if (this.#session === session && !this.#ports.disposed())
-                this.#ports.compactionProgress(percent);
-        });
+        this.#attachCompactionProgress(session);
         // Invariant: the subscription is live before the adapter rebuilds its state so the extension
         // rebind that finishes the rebuild cannot emit an event nobody is listening to.
         this.#subscribe();
@@ -193,8 +189,14 @@ export class PiEngineRuntime {
     }
     /** Forward the current session's events again under the current generation. */
     resume() {
-        if (this.#session === undefined)
+        const session = this.#session;
+        if (session === undefined)
             return;
+        // Invariant: resumed events cannot enter before observation is restored, and repeated resume
+        // owns only one subscription and one stream-function wrapper.
+        this.#unsubscribe?.();
+        this.#unsubscribe = undefined;
+        this.#attachCompactionProgress(session);
         this.#subscribe();
     }
     compactionStarted() {
@@ -342,6 +344,13 @@ export class PiEngineRuntime {
         }, this.#repositoryContextPollMs);
         this.#repositoryRefreshTimer.unref?.();
     }
+    #attachCompactionProgress(session) {
+        this.#compactionProgress?.dispose();
+        this.#compactionProgress = observeCompactionProgress(session, percent => {
+            if (this.#session === session && !this.#ports.disposed())
+                this.#ports.compactionProgress(percent);
+        });
+    }
     #subscribe() {
         const session = this.#session;
         if (session === undefined)

package/dist/integrations/pi/engine/settings-port.d.ts

@@ -33,6 +33,8 @@ export declare class PiEngineSettings {
      * theme's name, or a `light/dark` pair meaning "follow the terminal".
      */
     configuredTheme(): string | undefined;
+    /** Persist the global thinking default without changing the live session level. */
+    setDefaultThinkingLevel(level: PiPinnedSettingsSnapshot["defaultThinkingLevel"]): void;
     /** Settings port for the live runtime, or null before the runtime is available. */
     settingsPort(): PiSettingsBridge | null;
     bindSettingsOwner(owner: AgentSettingOwner, handlers: PiSettingOwnerHandlers): () => void;

package/dist/integrations/pi/engine/settings-port.js

@@ -32,6 +32,16 @@ export class PiEngineSettings {
     configuredTheme() {
         return this.#ports.runtime()?.services.settingsManager.getThemeSetting();
     }
+    /** Persist the global thinking default without changing the live session level. */
+    setDefaultThinkingLevel(level) {
+        if (!isThinkingLevel(level))
+            throw new TypeError("Thinking level is invalid");
+        const settings = this.#ports.runtime()?.services.settingsManager;
+        if (!settings)
+            throw new Error("Settings are unavailable");
+        settings.setDefaultThinkingLevel(level);
+        this.#ports.emitView();
+    }
     /** Settings port for the live runtime, or null before the runtime is available. */
     settingsPort() {
         const settings = this.#ports.runtime()?.services.settingsManager;

package/dist/integrations/pi/engine/workflow-runner.js

@@ -474,7 +474,7 @@ export class PiWorkflowRunner {
                     return workflowResult(request.command, "completed", "Compaction requested", undefined, "silent");
                 }
                 catch (error) {
-                    return workflowResult(request.command, "failed", error instanceof Error ? error.message : String(error), undefined, "silent");
+                    return workflowResult(request.command, "failed", error instanceof Error ? error.message : String(error));
                 }
             }
             case "resume": {

package/dist/native/darwin-arm64/manifest.json

@@ -5,7 +5,7 @@
   "platform": "darwin",
   "architecture": "arm64",
   "capability": "supported",
-  "builtAt": "2026-09-27T09:22:05.237Z",
+  "builtAt": "2026-09-27T15:27:01.448Z",
   "artifact": {
     "filename": "process-guardian",
     "sha256": "9db1726bbe3fc2e8292f2ead1e7e9d0fd4d7d0dc9217b372582bf354b0f565dc",

package/dist/native/linux-x64/manifest.json

@@ -5,7 +5,7 @@
   "platform": "linux",
   "architecture": "x64",
   "capability": "supported",
-  "builtAt": "2026-09-27T09:22:09.867Z",
+  "builtAt": "2026-09-27T15:26:48.689Z",
   "artifact": {
     "filename": "process-guardian",
     "sha256": "d8cda6b0c7cb36c0cc41e90802aceebf6c02eaebbc08a83d7d963d2e918dbd7a",

package/dist/native/win32-x64/manifest.json

@@ -5,10 +5,10 @@
   "platform": "win32",
   "architecture": "x64",
   "capability": "supported",
-  "builtAt": "2026-09-27T09:22:55.355Z",
+  "builtAt": "2026-09-27T15:27:34.555Z",
   "artifact": {
     "filename": "process-guardian.exe",
-    "sha256": "68d285c38302670a03c8b58d0e387f17614070bcdcfdb5d3cead3a47d1d19763",
+    "sha256": "37b6952849458ba61a3238595d6075b7599f77608cc2c06e5fd485ab22743c3e",
     "size": 178176
   },
   "provenance": {

package/dist/ui/components/transcript-viewport.d.ts

@@ -169,7 +169,7 @@ export declare class TranscriptViewport {
     releaseSelection(): boolean;
     clearSelection(): boolean;
     selectedText(): string | null;
-    /** Captures only the selected visible frame text, never off-screen transcript history. */
+    /** Captures visible selected text, not off-screen history. */
     captureSelectedText(): SelectionCopySnapshot | null;
     scrollBy(lines: number, now?: number): boolean;
     scrollTo(position: number, now?: number): boolean;

package/dist/ui/components/transcript-viewport.js

@@ -179,14 +179,15 @@ export class TranscriptViewport {
         const text = textSelectionText(selection, this.#selectionRows, line => usefulTextLineContent(this.#selectionRows[line] ?? ""));
         return text.length === 0 ? null : text;
     }
-    /** Captures only the selected visible frame text, never off-screen transcript history. */
+    /** Captures visible selected text, not off-screen history. */
     captureSelectedText() {
         if (!this.#copyableSelection)
             return null;
         const started = performance.now();
-        const text = this.selectedText();
+        let text = this.selectedText();
         if (text === null)
             return null;
+        text = text.trim();
         const normalized = {
             start: { line: 0, column: 0 },
             end: { line: 0, column: Number.MAX_SAFE_INTEGER },

package/docs/architecture/toolchain.md

@@ -81,7 +81,7 @@ Presentation acceptance is the reader comparing `a1 pi` with pinned Pi. `node sc
 
 ## Publication
 
-One workflow publishes both channels: `.github/workflows/release.yml`. Pushes do not publish. Nightly development verification runs at `03:17 UTC`; `npm run develop` explicitly requests a numbered preview and `npm run release -- patch` explicitly requests stable publication after its version pull request is manually merged; it promotes a development version to its stable core. The following development-version pull request also requires manual merge. A preview is stamped as `-dev.<merged pull-request number>` and uses npm `next` only as an internal dist-tag. New candidates pack once and are validated on Windows, Linux, and macOS; a repeated nightly verifies the exact immutable registry tarball. All publication uses provenance from the `npm-publish` environment, a preview never changes `latest`, and the stable tag, GitHub Release, and `master` are written only after npm has the package. One global non-cancelling concurrency group serializes the final registry check.
+One workflow publishes both channels: `.github/workflows/release.yml`. Pushes do not publish. Nightly development verification runs at `03:17 UTC`; `npm run develop` explicitly requests a numbered preview and `npm run release -- patch` explicitly requests stable publication after its version pull request is manually merged; it promotes a development version to its stable core. The following development-version pull request also requires manual merge. A preview is stamped as `-dev.<merged pull-request number>` and uses npm `next` only as an internal dist-tag. New candidates pack the application and dependency-free installer once each and validate their exact bytes on Windows, Linux, and macOS; a repeated nightly verifies both immutable registry tarballs. All publication uses provenance from the `npm-publish` environment, a preview never changes `latest`, and the stable tag, GitHub Release, and `master` are written only after npm has both packages. One global non-cancelling concurrency group serializes the final registry check.
 
 `docs/ci-release-runbook.md` is the operational reference.
 

package/docs/ci-release-runbook.md

@@ -166,14 +166,17 @@ The command fetches authoritative `origin/develop`, resolves the unique merged p
 request associated with that exact commit through GitHub, and derives
 `<major.minor.patch>-dev.<pull-request number>`. Thus GitHub's `develop (#107)`
 source produces `0.1.8-dev.107`. It first checks npm; if the immutable version
-already exists it reports that version without dispatching package work. Otherwise
-it dispatches GitHub Actions, waits, and reports the published version. It never
+already exists for both the application and installer packages it reports that
+version without dispatching package work. If either immutable artifact is missing,
+it dispatches GitHub Actions, waits, and verifies both published versions. It never
 builds or uploads npm bytes from the workstation.
 
 Nightly resolves the same current `origin/develop` source. It runs one platform-independent full documentation review before the platform matrix, and the matrix records that prerequisite instead of repeating the scan four times. It always runs complete verification even if source has not changed. For a new number it packs once and
 runs the suite against that final-version tarball before publication. For an
-existing number it downloads the exact npm tarball and runs package/update gates
-against those registry bytes; publication is then a successful no-op.
+existing number it downloads both exact npm tarballs and runs package/update and
+installer gates against those registry bytes; publication is then a successful
+no-op. A new or missing installer artifact is dependency-free, packed once, and
+validated on every publication platform before the publish job receives it.
 
 Manual and nightly runs share one non-cancelling concurrency group. Their final
 registry check is serialized, so overlapping requests can produce only one publish
@@ -183,7 +186,9 @@ internal `next` dist-tag and never moves `latest`.
 Users install previews with public `develop` terminology:
 
 ```sh
-a1 update --develop                     # current development channel
+npx -y @timurproko/a1-install --develop
+npx -y @timurproko/a1-install --version 0.1.8-dev.107
+a1 update --develop                     # update an existing installation
 a1 update --develop 107                 # numbered preview
 a1 update --develop 0.1.8-dev.107       # exact full preview version
 ```
@@ -214,13 +219,13 @@ touching anything, and the stable version is never committed to `develop`.
    publication for that exact source with the stable version in the request. A changed source is
    an error, not permission to substitute a newer commit.
 2. The workflow stamps the requested version on the checked-out source
-   (`npm version <x.y.z> --no-git-tag-version`) before packing, so the tarball
-   declares `0.1.8` while the tagged commit still declares `0.1.8-dev`. Everything
-   else about the package is byte-identical to that commit's tree; `git checkout
-   v0.1.8 && npm version 0.1.8 --no-git-tag-version && npm pack` reproduces it.
-3. Only after verified publication of `0.1.8` does the helper commit `0.1.9-dev`
-   in an owned detached worktree beneath `.worktrees/` (only this package's manifest
-   and root lockfile version change), open the one version PR, and wait for you to
+   (`npm version <x.y.z> --no-git-tag-version`) before packing the application and
+   stages the same exact version into the dependency-free installer before packing
+   it. Both tarballs therefore declare `0.1.8` while the tagged commit still
+   declares `0.1.8-dev`; their recorded digests bind them to the same source tree.
+3. Only after verified publication of both `0.1.8` packages does the helper commit
+   `0.1.9-dev` in an owned detached worktree beneath `.worktrees/` (the application
+   manifest, root lockfile, and installer manifest versions change), open the one version PR, and wait for you to
    **merge it manually** with a bounded 30-minute poll. The helper never merges
    PRs or enables auto-merge. Until that merge the helper reports development
    reopening as incomplete, and previews cannot be published from a `develop`
@@ -236,12 +241,23 @@ only when its branch, original HEAD, and cleanliness remain unchanged. Otherwise
 preserve local work and synchronize manually with the reported remote state.
 
 Stable publication builds the process guardian on all supported platforms, stamps
-the version, packs once, runs the complete suite against those exact bytes on
-Windows, Linux, and macOS, publishes to npm `latest` with provenance from the
-`npm-publish` environment, and then writes `vx.y.z` on the source commit, records
-the GitHub Release, and fast-forwards `master`. A push of the stable version does
+the version, packs each package once, runs the complete suite and installer package
+check against those exact bytes on Windows, Linux, and macOS, publishes both to npm
+`latest` with provenance from the `npm-publish` environment, and exercises the exact
+published installer/application pair in isolated prefixes on every release lane.
+Only after those post-publication checks pass does it write `vx.y.z` on the source commit, record
+the GitHub Release, and fast-forward `master`. A push of the stable version does
 not publish it, and no automation ever pushes one.
 
+The installer package does not yet exist on npm, so its first publication needs a
+one-time granular token in the `npm-publish` environment secret
+`NPM_BOOTSTRAP_TOKEN`; the workflow still publishes the exact validated tarball
+with provenance. Immediately after that first successful publication, configure
+`.github/workflows/release.yml` and environment `npm-publish` as the package's npm
+trusted publisher, delete the bootstrap secret, and let npm 11 authenticate future
+publications through GitHub OIDC. The application package continues using its
+existing trusted-publisher configuration throughout.
+
 Rules that do not bend:
 
 - **Never upload locally rebuilt bytes.** The publisher uploads the artifact the validation ran against and checks its digest before and after.
@@ -264,7 +280,7 @@ Rules that do not bend:
 - **A Pi upgrade proposal needs a re-run:** the sync never force-pushes over `chore/pi-<version>` once it carries a commit the bot did not author; a scheduled re-run posts its fresh verdicts as a comment headed with the version and date and rewrites only the report between the `<!-- pi-upgrade-report -->` markers of the description. To re-run the derived steps and gates on the reviewer's head, dispatch the workflow with `refresh` and the `version`; it checks out the proposal branch, skips bump, evaluation, install, and merge, and reports without pushing. A branch whose commits are all the bot's is recreated from `develop` as before.
 - **A Pi version should not be adopted:** close its proposal pull request with the `pi-upgrade-skipped` label (declared in `config/github-repository-governance.json`) and say why in the closing comment; the next run proposes the newest unskipped version newer than the pin, or nothing, and names the skipped versions in its log. A proposal closed without the label is proposed again the next night. Dispatching the workflow with a `version` ignores skips, which is how a skipped version is reconsidered. To silence the schedule through a release window, set the repository variable `PI_UPGRADE_FREEZE_UNTIL` to a date (`2026-10-01`); scheduled runs exit before proposing until it passes, manual dispatches still run.
 - **Nightly documentation review fails:** inspect the reported paths and rules, identify the introducing merge from the nightly interval, and repair the invariant before unrelated work proceeds.
-- **Development publication fails:** fix the cause and rerun `npm run develop`; an npm version that already exists is never overwritten.
+- **Development publication fails:** inspect both package versions and digests, fix the cause, and rerun `npm run develop`; an npm version that already exists is verified and never overwritten.
 - **Registry verification times out:** a `has not propagated` failure after a successful `npm publish` means npm is still ingesting the upload; it warns that a provenance-signed package "may take a few minutes" and the publisher polls for ten minutes. Confirm the version and its shasum on `https://registry.npmjs.org/<name>/<version>`, then rerun the failed jobs: the final registry check finds the exact bytes, skips `npm publish`, and verification passes. A digest or tag mismatch is not a timeout and is never repaired by rerunning.
 - **Stable publication fails or is uncertain:** no reopening PR was prepared and `develop` still declares the open `-dev` version. Inspect the workflow run, npm, and the `v<version>` tag. When nothing was published, fix the cause and rerun the same target; the registry and tag guards refuse a version that already exists.
 - **Stable is published but reopening stopped:** the helper reports the reopening PR or retained worktree. Merge the pending `chore/release-<x.y.z>-dev` PR by hand once its CI passes, or repair the branch and open the PR yourself; never rerun the release for the published version.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@timurproko/a1",
-  "version": "0.2.1-dev.590",
+  "version": "0.2.1-dev.599",
   "description": "Standalone terminal workspace for supervised native and managed agents",
   "type": "module",
   "privateLaunchContract": "neutral-launch-v1",