@timurproko/a1 0.2.1-dev.604 → 0.2.1

package/README.md

@@ -3,31 +3,10 @@
 ## Install
 
 ```sh
-# release
-npx -y @timurproko/a1-install
-
-# develop
-npx -y @timurproko/a1-install --develop
-
-# preview number
-npx -y @timurproko/a1-install --develop 107
-
-# exact preview
-npx -y @timurproko/a1-install --develop 0.1.8-dev.107
-```
-
-The installer keeps npm's dependency transcript out of the normal terminal output,
-shows one progress row, activates the installed release, and verifies the command
-before reporting success. The shorter `npx @timurproko/a1-install` form also works,
-but npm may ask for first-use confirmation; `-y` avoids that prompt.
-
-Direct npm installation remains available as a fallback or manual recovery path.
-npm's `latest` tag carries the release and `next` carries develop:
-
-```sh
-npm install -g @timurproko/a1@latest          # release
-npm install -g @timurproko/a1@next            # develop
-npm install -g @timurproko/a1@0.1.8-dev.107   # exact preview
+npx -y @timurproko/a1-install                           # release
+npx -y @timurproko/a1-install --develop                 # develop
+npx -y @timurproko/a1-install --develop 107             # preview number
+npx -y @timurproko/a1-install --develop 0.1.8-dev.107   # exact preview
 ```
 
 ## Use
@@ -36,126 +15,59 @@ npm install -g @timurproko/a1@0.1.8-dev.107   # exact preview
 a1                                      # launch A1 (profile: ~/.a1/agent)
 a1 help                                 # show all commands
 a1 version                              # show the version
+a1 pi                                   # vanilla Pi oracle: ~/.pi/agent
+```
+
+Update:
+
+```sh
 a1 update                               # install the release
+a1 update --models                      # refresh A1's model catalogs
 a1 update --develop                     # install develop
 a1 update --develop 107                 # install preview 107
 a1 update --develop 0.1.8-dev.107       # install that exact preview
-a1 update --models                      # refresh A1's model catalogs
-a1 update --extensions                  # update every installed package
-a1 update npm:pi-mcp-adapter            # update one package
 ```
 
-Release builds print only their installed version. Develop builds also show the
-current develop and release channel versions.
-
-Develop previews add the Pi comparison profile; release builds do not carry it.
+## Extensions
 
 ```sh
-a1 pi                                   # vanilla Pi oracle: ~/.pi/agent
+a1 install npm:pi-mcp-adapter          # install a package
+a1 remove npm:pi-mcp-adapter           # remove it (alias: a1 uninstall)
+a1 list                                # list installed packages
 ```
 
-Unsupported commands exit quietly without launching anything. The removed
-`update:<preview>` forms are not aliases; use `update --develop`.
-
-## Extensions
-
-Pi-compatible extension packages install into A1's own profile (`~/.a1/agent`), so
-bare `a1` loads them and the `a1 pi` comparison profile does not. Sources use Pi's
-`npm:`, git, or local-path grammar.
+Update:
 
 ```sh
-a1 install npm:pi-mcp-adapter      # install a package
-a1 remove npm:pi-mcp-adapter       # remove it (alias: a1 uninstall)
-a1 list                            # list installed packages
-a1 update --extensions             # update every installed package
-a1 update npm:pi-mcp-adapter       # update one
-a1 update --models                 # refresh A1's model catalogs
+a1 update --extensions                 # update every installed package
+a1 update npm:pi-mcp-adapter           # update one
 ```
 
-A1 pins the Pi runtime carried by each release, so Pi self-update forms are refused.
-Update A1 itself with `a1 update` or `a1 update --develop`.
-
-A running session picks up a newly installed package after a restart.
-Configuration is isolated the same way: bare `a1` reads `~/.a1/agent` (or the
-project), never `~/.pi/agent`. Configure MCP with `/mcp setup` inside bare `a1`.
-
 ## Develop
 
-A source build needs Node.js `>=22.19.0 <25`, npm 11, git, and Rust/Cargo 1.85 or
-newer—the build compiles the `native/process-guardian` crate. Publishing a release
-or a pull request additionally needs an authenticated [GitHub CLI](https://cli.github.com).
-`npm run doctor` reports every prerequisite with the exact command that installs
-whatever is missing, and `npm run build` runs the same check first so a fresh clone
-fails by name instead of inside a resolver or Cargo.
-
 ```sh
-npm run doctor          # report Node, npm, git, Rust, and dependency readiness
-npm ci                  # install exact locked dependencies
-npm run build           # compile TypeScript and the process guardian into dist
-npm start               # build and launch a source `a1`
-npm run start:pi        # build and launch a source `a1 pi`
-npm run test:fast       # typecheck + fast suite (alias: npm test)
-npm run test:full       # complete non-physical suite
+npm run doctor                          # report Node, npm, git, Rust, and dependency readiness
+npm ci                                  # install exact locked dependencies
+npm run build                           # compile TypeScript and the process guardian into dist
+npm start                               # build and launch a source `a1`
+npm run start:pi                        # build and launch a source `a1 pi`
+npm run test:fast                       # typecheck + fast suite (alias: npm test)
+npm run test:full                       # complete non-physical suite
 ```
 
-Create every task worktree at `{working-dir}/.worktrees/<task-id>`, where
-`{working-dir}` is the session's initial working directory. For working directory
-`D:/Git/a1`, use `D:/Git/a1/.worktrees/<task-id>`—never a sibling such as
-`D:/Git/a1-<task-id>`. The primary worktree remains on `develop` for integration only.
-
-## Release
-
-Two channels, both published by CI from the exact bytes it validated — never from
-a workstation.
+## Publish
 
-### Develop previews
-
-A preview is `<major.minor.patch>-dev.<pull-request number>`, e.g. `0.1.8-dev.107`.
-The nightly run (`03:17 UTC`) verifies current `origin/develop` and publishes only
-when that source's preview is absent. `npm run develop` requests the same GitHub
-Actions run and waits for it. The published version list is authoritative: an
-unpublished number is refused.
-
-Publish:
-
-```sh
-npm run develop             # request the preview publish run and wait for it
-```
-
-Install:
+### Develop
 
 ```sh
-a1 update --develop 107                 # install preview 107
-a1 update --develop 0.1.8-dev.107       # install that exact full preview version
+npm run develop                         # request the preview publish
 ```
 
 ### Release
 
 ```sh
-npm run release -- patch     # 0.1.8-dev -> 0.1.8
-npm run release -- minor     # 0.1.8-dev -> 0.2.0
-npm run release -- major     # 0.1.8-dev -> 1.0.0
-npm run release -- 0.4.0     # an exact stable version
+npm run release -- patch               # 0.1.8-dev -> 0.1.8
+npm run release -- minor               # 0.1.8-dev -> 0.2.0
+npm run release -- major               # 0.1.8-dev -> 1.0.0
+npm run release -- 0.4.0               # an exact stable version
 ```
-
-Run from the repository root on a clean `develop` matching `origin/develop` that
-declares the open `-dev` version. A target is required; bare `npm run release`
-displays usage and releases nothing. `patch` promotes the current prerelease rather
-than skipping its stable version.
-
-The stable version is never committed. The command dispatches publication for the
-exact authoritative `develop` commit with the stable version named in the request,
-and waits for success. CI stamps that version on the checked-out source before
-packing, validates the packed release on Windows, Linux, and macOS, publishes to
-npm `latest` with provenance, then writes the `v<version>` tag on that same
-`develop` commit, records the GitHub Release, and fast-forwards `master`.
-
-Only after confirmed publication of `0.1.8` does the command prepare the one
-version-only PR, `0.1.9-dev`, in an isolated detached worktree, print its URL, and
-wait for you to **merge it manually**. It is not auto-merged, and green CI alone does
-not advance the release. Work added to your checkout during the wait is preserved,
-not reset. If publication fails or is uncertain, no reopening PR is prepared. If
-publication succeeded but reopening failed, merge or repair the reported PR by
-hand; do not republish the immutable stable version.
-
-`docs/ci-release-runbook.md` has the full picture.

package/bin/ui.js

@@ -67,9 +67,12 @@ Promise.resolve().then(() => {
     return terminateOwnedUiProcess(code);
   },
   error => {
-    if (fatal && error?.name !== "PiSessionSelectionError") { fatal.fail(error); return; }
+    const sessionSelectionError = error?.name === "PiSessionSelectionError";
+    const trustExit = error?.name === "ProjectTrustPromptExitError";
+    if (fatal && !sessionSelectionError && !trustExit) { fatal.fail(error); return; }
     fatal?.remove();
+    if (trustExit) return terminateOwnedUiProcess(error.exitCode);
     console.error(error instanceof Error ? error.message : String(error));
-    process.exitCode = error?.name === "PiSessionSelectionError" ? error.exitCode : 1;
+    process.exitCode = sessionSelectionError ? error.exitCode : 1;
   },
 );

package/dist/app/session-shell/prompt-chips.d.ts

@@ -61,15 +61,9 @@ export declare class PromptChipStore {
         readonly image: PromptImageAttachment;
     }[];
     /**
-     * Rehydrate a durable recall value into an editor-ready draft: image chip tags are looked up
-     * against a caller-supplied sidecar resolver, and detectable URL / file / folder / large text
-     * substrings are re-registered as atomic chips through the same identity rules the paste path
-     * uses. Image chips whose sidecar returns null are silently stripped without a placeholder.
-     *
-     * Every chip returned is registered in the session `#chips` map so atomic-range,
-     * hyperlink-range, and submission-expansion paths behave identically to a freshly typed draft.
-     * Callers should treat the returned string as programmatic editor text, not another draft to
-     * scan.
+     * Builds editor-ready recall. Images use sidecars, URL/path text is re-registered,
+     * multiline text stays expanded, and missing image payloads silently remove their tags.
+     * Returned chips remain live for atomic editing, links, and submission expansion.
      */
     rehydrateHistoryText(text: string, resolveImage: (id: string) => PromptImageAttachment | null): string;
     prepareSubmission(text: string): PreparedPrompt;

package/dist/app/session-shell/prompt-chips.js

@@ -320,15 +320,9 @@ export class PromptChipStore {
         return results;
     }
     /**
-     * Rehydrate a durable recall value into an editor-ready draft: image chip tags are looked up
-     * against a caller-supplied sidecar resolver, and detectable URL / file / folder / large text
-     * substrings are re-registered as atomic chips through the same identity rules the paste path
-     * uses. Image chips whose sidecar returns null are silently stripped without a placeholder.
-     *
-     * Every chip returned is registered in the session `#chips` map so atomic-range,
-     * hyperlink-range, and submission-expansion paths behave identically to a freshly typed draft.
-     * Callers should treat the returned string as programmatic editor text, not another draft to
-     * scan.
+     * Builds editor-ready recall. Images use sidecars, URL/path text is re-registered,
+     * multiline text stays expanded, and missing image payloads silently remove their tags.
+     * Returned chips remain live for atomic editing, links, and submission expansion.
      */
     rehydrateHistoryText(text, resolveImage) {
         if (!text)
@@ -346,6 +340,7 @@ export class PromptChipStore {
             this.#chips.set(match.text, { kind: "image", tag: match.text, image: attachment });
             return match.text;
         });
+        const preserveMultiline = resolvedImages.includes("\n");
         // Rationale: split around any surviving image tags so paste-time classification runs on the
         // intervening prose exactly as it would on a fresh clipboard payload, plus a substring URL
         // scan so embedded links become atomic chips even in the middle of surrounding text.
@@ -369,12 +364,9 @@ export class PromptChipStore {
             const body = segment.slice(leading.length, segment.length - trailing.length);
             if (body.length === 0)
                 return segment;
-            // Rationale: substring URL rehydration reuses paste-time URL classification and identity
-            // rules, producing a URL chip whenever a bare http(s) URL appears in the prose. Whole-text
-            // classification runs afterwards to catch path / large-paste candidates that consume the
-            // entire remaining body.
+            // Rationale: keep multiline history readable; otherwise reuse paste-time URL/path classification.
             const withUrlChips = this.#rehydrateUrlSubstrings(body);
-            if (withUrlChips !== body)
+            if (withUrlChips !== body || preserveMultiline)
                 return `${leading}${withUrlChips}${trailing}`;
             const classified = this.transformPastedContent({ kind: "text", text: body });
             return `${leading}${classified}${trailing}`;

package/dist/app/session-shell/session-shell-root.js

@@ -678,7 +678,10 @@ export class OwnedUiSessionShellRoot {
             return cached;
         const diagnostics = this.#view.diagnostics;
         const startupRows = diagnostics
-            .filter(diagnostic => diagnostic.code === "engine-startup")
+            // Compatibility: the pinned route keeps trust failures with Pi-style startup diagnostics;
+            // bare A1 presents them in its prompt-adjacent notice dock instead.
+            .filter(diagnostic => diagnostic.code === "engine-startup"
+            || !this.#customViewport && diagnostic.code === "project-trust")
             .flatMap(diagnostic => renderPiShellStartupDiagnostic(diagnostic, width));
         const resourceRows = this.#customViewport ? [] : [...this.resources.render(width)];
         if (resourceRows.at(-1) === "")
@@ -744,8 +747,9 @@ export class OwnedUiSessionShellRoot {
                 ? createPiShellCollapsedChangelog().render(width)
                 : createPiShellChangelog(diagnostic.message).render(width)));
         rows.push(...diagnostics
-            .filter(diagnostic => diagnostic.code !== "engine-startup" && diagnostic.code !== "package-updates"
-            && diagnostic.code !== "changelog-collapsed" && diagnostic.code !== "changelog-expanded")
+            .filter(diagnostic => diagnostic.code !== "engine-startup" && diagnostic.code !== "project-trust"
+            && diagnostic.code !== "package-updates" && diagnostic.code !== "changelog-collapsed"
+            && diagnostic.code !== "changelog-expanded")
             .slice(-3)
             .flatMap(diagnostic => renderPiShellTranscriptBlock({
             id: `diagnostic-${diagnostic.sequence}`,

package/dist/app/session-shell/session-shell.js

@@ -55,8 +55,9 @@ export class OwnedUiSessionShell {
     #shutdownPromise;
     #disposePromise;
     #pointerReporting = false;
-    // Invariant: the startup release-note diagnostic creates at most one dock notice per shell.
+    // Invariant: translated startup diagnostics create at most one dock notice per kind per shell.
     #startupChangelogHandled = false;
+    #startupTrustHandled = false;
     #customViewport;
     #responseCopy;
     // Rationale: only an executor this shell created owns a spare copy helper worth warming and disposing.
@@ -1706,6 +1707,7 @@ export class OwnedUiSessionShell {
         this.root.update(view);
         this.#syncDialog(view.dialog);
         this.#presentStartupChangelog(view);
+        this.#presentStartupTrustWarning(view);
         this.runtime.requestRender();
         for (const listener of this.#listeners)
             listener(view);
@@ -1723,6 +1725,17 @@ export class OwnedUiSessionShell {
         this.#startupChangelogHandled = true;
         this.root.appendWorkflowStatus(STARTUP_CHANGELOG_NOTICE);
     }
+    // Rationale: a cancelled or failed trust choice explains the restricted session where the
+    // user will next type, rather than leaving a lone warning at the top of an empty viewport.
+    #presentStartupTrustWarning(view) {
+        if (this.#startupTrustHandled || !this.#customViewport)
+            return;
+        const diagnostic = view.diagnostics.find(candidate => candidate.code === "project-trust");
+        if (diagnostic === undefined || !this.runtime.active)
+            return;
+        this.#startupTrustHandled = true;
+        this.root.appendWorkflowMessage({ kind: "warning", message: diagnostic.message });
+    }
     #openOwnedRoute(route, input) {
         const surface = this.#routeHost?.open(route, input) ?? null;
         if (surface === null)

package/dist/features/owned-ui/project-trust-dialog.d.ts

@@ -1,2 +1,2 @@
 /** Fixed startup-safe rendering only; project-derived presentation is forbidden before trust resolves. */
-export declare function renderProjectTrustDialog(cwd: string, selected: number, terminalWidth: number, terminalRows: number): readonly string[];
+export declare function renderProjectTrustDialog(cwd: string, options: readonly string[], selected: number, terminalWidth: number, terminalRows: number): readonly string[];

package/dist/features/owned-ui/project-trust-dialog.js

@@ -7,13 +7,13 @@ const BOLD = "\u001b[1m";
 const RESET_BOLD = "\u001b[22m";
 const EXPLANATION = "This allows to load project settings and resources, install missing project packages, and execute project extensions.";
 /** Fixed startup-safe rendering only; project-derived presentation is forbidden before trust resolves. */
-export function renderProjectTrustDialog(cwd, selected, terminalWidth, terminalRows) {
+export function renderProjectTrustDialog(cwd, options, selected, terminalWidth, terminalRows) {
     const width = Math.max(1, terminalWidth);
     const rule = `${BORDER}${"─".repeat(width)}${RESET_FG}`;
     const title = ` ${BOLD}${ACCENT}Trust project folder?${RESET_FG}${RESET_BOLD}`;
     const path = ` ${MUTED}${sanitize(cwd)}${RESET_FG}`;
-    const choices = [choice("Trust", selected === 0), choice("Do not trust", selected === 1)];
-    const hint = ` ${DIM}↑/↓${MUTED} to navigate  ${DIM}Enter${MUTED} to select  ${DIM}Esc${MUTED} to cancel${RESET_FG}`;
+    const choices = options.map((label, index) => choice(label, selected === index));
+    const hint = ` ${DIM}↑/↓${MUTED} to navigate  ${DIM}Enter${MUTED} to select  ${DIM}Esc${MUTED} to exit${RESET_FG}`;
     const explanation = wrap(EXPLANATION, Math.max(1, width - 2)).map(line => ` ${line}`);
     const preferred = [rule, title, path, "", ...explanation, "", ...choices, "", hint, rule];
     if (preferred.length <= terminalRows)
@@ -28,14 +28,18 @@ export function renderProjectTrustDialog(cwd, selected, terminalWidth, terminalR
     if (essential.length <= terminalRows)
         return essential;
     if (terminalRows >= 3)
-        return [...choices, hint];
+        return [title, ...choiceWindow(choices, selected, terminalRows - 2), hint];
     if (terminalRows === 2)
-        return choices;
+        return choiceWindow(choices, selected, 2);
     return [choices[selected] ?? choices[0] ?? ""];
 }
 function choice(label, selected) {
     return selected ? ` ${ACCENT}→ ${label}${RESET_FG}` : `   ${label}`;
 }
+function choiceWindow(choices, selected, capacity) {
+    const start = Math.min(Math.max(0, selected - Math.floor(capacity / 2)), Math.max(0, choices.length - capacity));
+    return choices.slice(start, start + capacity);
+}
 function wrap(text, width) {
     const lines = [];
     let line = "";

package/dist/features/owned-ui/project-trust-prompt.d.ts

@@ -1,9 +1,14 @@
 import type { Readable, Writable } from "node:stream";
+export type OwnedProjectTrustChoiceId = "trust" | "trust-parent" | "trust-session" | "deny" | "deny-session";
 export interface OwnedProjectTrustPromptRequest {
     readonly cwd: string;
     readonly defaultDecision: "ask" | "always" | "never";
+    readonly choices: readonly {
+        readonly id: OwnedProjectTrustChoiceId;
+        readonly label: string;
+    }[];
 }
-export type OwnedProjectTrustPrompt = (request: OwnedProjectTrustPromptRequest) => Promise<boolean | null>;
+export type OwnedProjectTrustPrompt = (request: OwnedProjectTrustPromptRequest) => Promise<OwnedProjectTrustChoiceId | null>;
 interface RawTtyInput extends Readable {
     readonly isTTY?: boolean;
     readonly isRaw?: boolean;

package/dist/features/owned-ui/project-trust-prompt.js

@@ -1,7 +1,6 @@
+import { EMERGENCY_TERMINAL_RESET } from "../../foundation/terminal-cleanup/terminal-reset.js";
 const ENTER_ALTERNATE_SCREEN = "\u001b[?1049h";
-const LEAVE_ALTERNATE_SCREEN = "\u001b[?1049l";
 const HIDE_CURSOR = "\u001b[?25l";
-const SHOW_CURSOR = "\u001b[?25h";
 const CLEAR_HOME = "\u001b[2J\u001b[H";
 const ACCENT = "\u001b[38;2;138;190;183m";
 const MUTED = "\u001b[38;2;128;128;128m";
@@ -9,15 +8,26 @@ const DIM = "\u001b[38;2;102;102;102m";
 const RESET_FG = "\u001b[39m";
 const BOLD = "\u001b[1m";
 const RESET_BOLD = "\u001b[22m";
+const PROJECT_TRUST_EXIT = "ProjectTrustPromptExitError";
+class ProjectTrustPromptExitError extends Error {
+    exitCode = 0;
+    constructor() {
+        super("Project trust prompt exited");
+        this.name = PROJECT_TRUST_EXIT;
+    }
+}
 /** Fixed pre-resource selector; no project resource is available. */
 export function createConsoleProjectTrustPrompt(options = {}) {
     const input = options.input ?? process.stdin;
     const output = options.output ?? process.stdout;
-    return async ({ cwd }) => {
+    return async ({ cwd, choices }) => {
         if (input.isTTY !== true || output.isTTY !== true) {
             throw new Error("an interactive terminal is unavailable");
         }
-        const renderBareDialog = options.presentation === "comparison"
+        if (choices.length === 0)
+            throw new Error("project trust choices are unavailable");
+        const comparison = options.presentation === "comparison";
+        const renderBareDialog = comparison
             ? undefined : (await import("./project-trust-dialog.js")).renderProjectTrustDialog;
         const wasRaw = input.isRaw === true;
         let selected = 0;
@@ -27,19 +37,18 @@ export function createConsoleProjectTrustPrompt(options = {}) {
                 return;
             restored = true;
             input.setRawMode?.(wasRaw);
-            output.write(`${CLEAR_HOME}${SHOW_CURSOR}${LEAVE_ALTERNATE_SCREEN}`);
+            output.write(`${CLEAR_HOME}${EMERGENCY_TERMINAL_RESET}`);
         };
         const render = () => {
             const width = Math.max(renderBareDialog ? 1 : 20, output.columns ?? 80);
             const rows = Math.max(1, output.rows ?? 24);
-            const lines = (renderBareDialog?.(cwd, selected, width, rows) ?? [
+            const lines = (renderBareDialog?.(cwd, choices.map(choice => choice.label), selected, width, rows) ?? [
                 `${BOLD}${ACCENT}Trust project folder?${RESET_FG}${RESET_BOLD}`,
                 cwd,
                 "",
                 "This allows a1 to load project settings and resources, install missing project packages, and execute project extensions.",
                 "",
-                optionRow("Trust", selected === 0),
-                optionRow("Do not trust", selected === 1),
+                ...choices.map((choice, index) => optionRow(choice.label, selected === index)),
                 "",
                 `${DIM}↑/↓${MUTED} to navigate  ${DIM}Enter${MUTED} to select  ${DIM}Esc${MUTED} to cancel${RESET_FG}`,
             ]).map(line => clipAnsiSafe(line, width));
@@ -66,19 +75,20 @@ export function createConsoleProjectTrustPrompt(options = {}) {
                     settled = true;
                     cleanup();
                     restore();
+                    // Protocol: restoration preserves the parent cursor; only the shell paints there.
                     reject(error);
                 };
                 const onData = (chunk) => {
                     const data = chunk.toString();
                     for (let index = 0; index < data.length;) {
                         if (data.startsWith("\u001b[A", index)) {
-                            selected = 0;
+                            selected = (selected - 1 + choices.length) % choices.length;
                             index += 3;
                             render();
                             continue;
                         }
                         if (data.startsWith("\u001b[B", index) || data[index] === "\t") {
-                            selected = selected === 0 ? 1 : 0;
+                            selected = (selected + 1) % choices.length;
                             index += data[index] === "\t" ? 1 : 3;
                             render();
                             continue;
@@ -86,21 +96,31 @@ export function createConsoleProjectTrustPrompt(options = {}) {
                         const key = data[index] ?? "";
                         index += 1;
                         if (key === "\r" || key === "\n") {
-                            finish(selected === 0);
+                            finish(choices[selected]?.id ?? null);
                             return;
                         }
-                        if (key === "\u001b" || key === "\u0003") {
-                            finish(null);
+                        if (key === "\u001b") {
+                            if (comparison)
+                                finish(null);
+                            else
+                                fail(new ProjectTrustPromptExitError());
                             return;
                         }
+                        if (key === "\u0003") {
+                            if (comparison) {
+                                finish(null);
+                                return;
+                            }
+                            continue;
+                        }
                         // Compatibility: retain y/n aliases for terminals or automation that cannot send
                         // navigation keys; the visible interaction remains selector-first.
                         if (key === "y" || key === "Y") {
-                            finish(true);
+                            finish(choices.find(choice => choice.id === "trust")?.id ?? null);
                             return;
                         }
                         if (key === "n" || key === "N") {
-                            finish(false);
+                            finish(choices.find(choice => choice.id === "deny")?.id ?? null);
                             return;
                         }
                     }

package/dist/foundation/terminal-cleanup/terminal-reset.js

@@ -1,9 +1,10 @@
 import { writeSync } from "node:fs";
 // Protocol: reset modes on both screens; setting keyboard flags to zero is idempotent,
 // unlike repeatedly popping a keyboard-protocol stack owned by a parent application.
+// Resetting parent-screen margins homes the cursor, so preserve its restored position.
 export const EMERGENCY_TERMINAL_RESET = "\x1b[?2026l\x1b[?1000l\x1b[?1002l\x1b[?1003l\x1b[?1004l\x1b[?1006l"
     + "\x1b[?2004l\x1b[=0u\x1b[>4;0m\x1b]8;;\x1b\\\x1b[0m\x1b[r\x1b[?7h\x1b[?25h"
-    + "\x1b[?1049l\x1b[r\x1b[?7h\x1b[?25h\x1b]9;4;0\x07";
+    + "\x1b[?1049l\x1b7\x1b[r\x1b8\x1b[?7h\x1b[?25h\x1b]9;4;0\x07";
 export function restoreProcessTerminal() {
     try {
         if (process.stdout.isTTY)

package/dist/integrations/pi/components/upstream/history/editor-core.d.ts

@@ -2,10 +2,12 @@
  * Provenance: @earendil-works/pi-tui 0.87.1 (MIT), commit f07218c4d4bbc12bef056a7058c3dd49dfe41abe,
  * packages/tui/src/components/editor.ts.
  * Modifications: Owned editor core or minimal editor-local helper subset; public imports, strict
- * types, typed persistent-history hooks, and semantic border state with the user-approved numeric-only
- * history label. Public terminal runtime/exports remain shared and unchanged. See
- * docs/architecture/history-editor-provenance.md.
- * Deviations: compact-history-counter-label, persistent-history-owned-editor-boundary.
+ * types, typed persistent-history hooks, semantic border state with the user-approved numeric-only
+ * history label and separate centered history-overflow cue, and history-count retention during cursor
+ * placement within recalled multiline text. Public terminal runtime/exports remain shared and
+ * unchanged. See docs/architecture/history-editor-provenance.md.
+ * Deviations: compact-history-counter-label, history-overflow-cue-separation,
+ * history-recall-cursor-retention, persistent-history-owned-editor-boundary.
  */
 import { type AutocompleteProvider, type Component, type Focusable, type TUI, type TuiMouseEvent, type TuiMouseEventResult, type SelectListTheme } from "@earendil-works/pi-tui";
 import type { EditorInteractionPort, EditorRecallPort } from "../../editor-interaction.js";

package/dist/integrations/pi/components/upstream/history/editor-core.js

@@ -2,10 +2,12 @@
  * Provenance: @earendil-works/pi-tui 0.87.1 (MIT), commit f07218c4d4bbc12bef056a7058c3dd49dfe41abe,
  * packages/tui/src/components/editor.ts.
  * Modifications: Owned editor core or minimal editor-local helper subset; public imports, strict
- * types, typed persistent-history hooks, and semantic border state with the user-approved numeric-only
- * history label. Public terminal runtime/exports remain shared and unchanged. See
- * docs/architecture/history-editor-provenance.md.
- * Deviations: compact-history-counter-label, persistent-history-owned-editor-boundary.
+ * types, typed persistent-history hooks, semantic border state with the user-approved numeric-only
+ * history label and separate centered history-overflow cue, and history-count retention during cursor
+ * placement within recalled multiline text. Public terminal runtime/exports remain shared and
+ * unchanged. See docs/architecture/history-editor-provenance.md.
+ * Deviations: compact-history-counter-label, history-overflow-cue-separation,
+ * history-recall-cursor-retention, persistent-history-owned-editor-boundary.
  */
 import { getKeybindings, matchesKey, CURSOR_MARKER, sliceByColumn, truncateToWidth, visibleWidth, SelectList } from "@earendil-works/pi-tui";
 import { decodePrintableKey } from "./printable-key.js";
@@ -187,21 +189,27 @@ function buildDebouncePattern(triggerCharacters) {
     const escapedWithoutAt = triggerCharacters.filter((character) => character !== "@").map(escapeCharacterClass);
     return new RegExp(`${autocompleteBoundaryRegex.source}(?:@(?:"[^"]*|${unquotedAutocompleteSuffixRegex.source})|[${escapedWithoutAt.join("")}]${unquotedAutocompleteSuffixRegex.source})$`, "u");
 }
-function createScrollBorder(direction, hiddenLineCount, width) {
+function createScrollBorder(direction, hiddenLineCount, width, minimumCueStart = 0) {
     const availableWidth = Math.max(0, width);
     const label = ` ${direction} ${hiddenLineCount} more `;
     const labelWidth = visibleWidth(label);
     if (labelWidth + 2 <= availableWidth) {
-        const leftWidth = Math.floor((availableWidth - labelWidth) / 2);
-        return "─".repeat(leftWidth) + label + "─".repeat(availableWidth - leftWidth - labelWidth);
+        const centeredStart = Math.floor((availableWidth - labelWidth) / 2);
+        const cueStart = Math.max(centeredStart, minimumCueStart);
+        if (cueStart + labelWidth <= availableWidth) {
+            return "─".repeat(cueStart) + label + "─".repeat(availableWidth - cueStart - labelWidth);
+        }
     }
+    if (minimumCueStart > 0)
+        return "─".repeat(availableWidth);
     const indicator = `─── ${direction} ${hiddenLineCount} more `;
-    const remaining = availableWidth - visibleWidth(indicator);
+    const indicatorWidth = visibleWidth(indicator);
+    const remaining = availableWidth - indicatorWidth;
     if (remaining >= 0)
         return indicator + "─".repeat(remaining);
     const ellipsis = "...".slice(0, availableWidth);
-    const indicatorWidth = availableWidth - visibleWidth(ellipsis);
-    return sliceByColumn(indicator, 0, indicatorWidth, true) + ellipsis;
+    const visibleIndicatorWidth = availableWidth - visibleWidth(ellipsis);
+    return sliceByColumn(indicator, 0, visibleIndicatorWidth, true) + ellipsis;
 }
 export class HistoryEditorCore {
     segmentTransform;
@@ -479,8 +487,19 @@ export class HistoryEditorCore {
     }
     renderTopBorder(width, hiddenLineCount) {
         if (this.persistentHistory && this.historyIndex >= 0) {
-            const overflow = hiddenLineCount > 0 ? ` · ↑ ${hiddenLineCount} more` : "";
-            const label = `─── ${this.history.length - this.historyIndex}/${this.history.length}${overflow} `;
+            const history = `${this.history.length - this.historyIndex}/${this.history.length} `;
+            if (hiddenLineCount > 0) {
+                const historyStart = 4;
+                const historyEnd = historyStart + visibleWidth(history);
+                const historyAnchorStart = historyStart - 1;
+                if (historyEnd <= width) {
+                    const border = createScrollBorder("↑", hiddenLineCount, width, historyEnd);
+                    return this.borderColor(border.slice(0, historyAnchorStart) + " ")
+                        + this.styleHistoryLabel(history)
+                        + this.borderColor(border.slice(historyEnd));
+                }
+            }
+            const label = `─── ${history}`;
             const shown = truncateToWidth(label, width);
             const remaining = Math.max(0, width - visibleWidth(shown));
             return this.borderColor(shown.slice(0, 4)) + this.styleHistoryLabel(shown.slice(4)) + this.borderColor("─".repeat(remaining));
@@ -642,7 +661,8 @@ export class HistoryEditorCore {
         this.state.cursorLine = visualLine.logicalLine;
         this.setCursorCol(visualLine.startCol + targetIndex);
         this.lastAction = null;
-        this.exitHistoryBrowsing();
+        // Cursor placement within recalled multiline text does not leave browsing:
+        // keep its position/total border visible until content changes or recall exits.
         if (this.autocompleteState)
             this.updateAutocomplete();
         return { handled: true, focus: true };

package/dist/integrations/pi/engine/project-trust-preflight.d.ts

@@ -1,8 +1,13 @@
+export type PiProjectTrustChoiceId = "trust" | "trust-parent" | "trust-session" | "deny" | "deny-session";
 export interface PiProjectTrustPreflightRequest {
     readonly cwd: string;
     readonly defaultDecision: "ask" | "always" | "never";
+    readonly choices: readonly {
+        readonly id: PiProjectTrustChoiceId;
+        readonly label: string;
+    }[];
 }
-export type PiProjectTrustPreflightPrompt = (request: PiProjectTrustPreflightRequest) => Promise<boolean | null>;
+export type PiProjectTrustPreflightPrompt = (request: PiProjectTrustPreflightRequest) => Promise<PiProjectTrustChoiceId | null>;
 export interface PiProjectTrustPreflightResult {
     readonly trusted: boolean;
     readonly source: "saved" | "default" | "interactive" | "fail-closed";

package/dist/integrations/pi/engine/project-trust-preflight.js

@@ -1,3 +1,5 @@
+import { realpathSync } from "node:fs";
+import { dirname, resolve } from "node:path";
 import { ProjectTrustStore, SettingsManager, } from "../startup-public.js";
 /**
  * Resolves trust from global state only. It never constructs a project-trusted
@@ -25,7 +27,12 @@ export async function resolvePiProjectTrustPreflight(options) {
         };
     }
     try {
-        const decision = await options.prompt({ cwd: options.cwd, defaultDecision: fallback });
+        const choices = projectTrustChoices(options.cwd);
+        const decision = await options.prompt({
+            cwd: options.cwd,
+            defaultDecision: fallback,
+            choices: choices.map(({ id, label }) => ({ id, label })),
+        });
         if (decision === null) {
             return {
                 trusted: false,
@@ -33,10 +40,18 @@ export async function resolvePiProjectTrustPreflight(options) {
                 diagnostic: `Project resources in ${options.cwd} were withheld because trust selection was cancelled`,
             };
         }
-        trustStore.set(options.cwd, decision);
-        return { trusted: decision, source: "interactive", diagnostic: null };
+        const selected = choices.find(choice => choice.id === decision);
+        if (selected === undefined)
+            throw new Error(`unknown trust selection: ${decision}`);
+        if (selected.updates.length > 0)
+            trustStore.setMany([...selected.updates]);
+        return { trusted: selected.trusted, source: "interactive", diagnostic: null };
     }
     catch (error) {
+        // Protocol: an explicit bare-A1 exit propagates after the prompt restores the terminal;
+        // ordinary prompt failures still continue through the fail-closed restricted shell.
+        if (error instanceof Error && error.name === "ProjectTrustPromptExitError")
+            throw error;
         return {
             trusted: false,
             source: "fail-closed",
@@ -44,3 +59,26 @@ export async function resolvePiProjectTrustPreflight(options) {
         };
     }
 }
+/** Pinned Pi's five startup outcomes, with canonical parent scope resolved before project resources load. */
+function projectTrustChoices(cwd) {
+    let trustPath = resolve(cwd);
+    try {
+        trustPath = realpathSync(trustPath);
+    }
+    catch {
+        // Compatibility: pinned Pi keeps the resolved path when real-path lookup fails.
+    }
+    const parent = dirname(trustPath);
+    return [
+        { id: "trust", label: "Trust", trusted: true, updates: [{ path: trustPath, decision: true }] },
+        ...(parent === trustPath ? [] : [{
+                id: "trust-parent",
+                label: `Trust parent folder (${parent})`,
+                trusted: true,
+                updates: [{ path: parent, decision: true }, { path: trustPath, decision: null }],
+            }]),
+        { id: "trust-session", label: "Trust (this session only)", trusted: true, updates: [] },
+        { id: "deny", label: "Do not trust", trusted: false, updates: [{ path: trustPath, decision: false }] },
+        { id: "deny-session", label: "Do not trust (this session only)", trusted: false, updates: [] },
+    ];
+}

package/dist/integrations/pi/engine/runtime-integration.js

@@ -91,7 +91,7 @@ export async function createPiRuntimeIntegration(options) {
             ...created,
             services,
             diagnostics: [
-                ...(trust.diagnostic === null ? [] : [{ type: "warning", message: trust.diagnostic }]),
+                ...(trust.diagnostic === null ? [] : [{ type: "warning", code: "project-trust", message: trust.diagnostic }]),
                 ...modelScope.diagnostics,
             ],
         };

package/dist/integrations/pi/engine/session-runtime.js

@@ -116,7 +116,10 @@ export class PiEngineRuntime {
             this.#ports.rebound();
         });
         for (const diagnostic of [...runtime.diagnostics, ...runtime.services.diagnostics]) {
-            this.#ports.diagnostic(diagnostic.type === "error" ? "error" : diagnostic.type === "warning" ? "warning" : "info", "engine-startup", diagnostic.message, diagnostic.type !== "error");
+            const code = "code" in diagnostic && diagnostic.code === "project-trust"
+                ? "project-trust"
+                : "engine-startup";
+            this.#ports.diagnostic(diagnostic.type === "error" ? "error" : diagnostic.type === "warning" ? "warning" : "info", code, diagnostic.message, diagnostic.type !== "error");
         }
         this.bindSession(runtime.session);
         await this.#announceChangelog(runtime.services.settingsManager);

package/dist/native/darwin-arm64/manifest.json

@@ -5,7 +5,7 @@
   "platform": "darwin",
   "architecture": "arm64",
   "capability": "supported",
-  "builtAt": "2026-09-27T18:55:25.844Z",
+  "builtAt": "2026-09-28T08:09:05.323Z",
   "artifact": {
     "filename": "process-guardian",
     "sha256": "9db1726bbe3fc2e8292f2ead1e7e9d0fd4d7d0dc9217b372582bf354b0f565dc",

package/dist/native/linux-x64/manifest.json

@@ -5,7 +5,7 @@
   "platform": "linux",
   "architecture": "x64",
   "capability": "supported",
-  "builtAt": "2026-09-27T18:55:10.602Z",
+  "builtAt": "2026-09-28T08:08:49.459Z",
   "artifact": {
     "filename": "process-guardian",
     "sha256": "d8cda6b0c7cb36c0cc41e90802aceebf6c02eaebbc08a83d7d963d2e918dbd7a",

package/dist/native/win32-x64/manifest.json

@@ -5,10 +5,10 @@
   "platform": "win32",
   "architecture": "x64",
   "capability": "supported",
-  "builtAt": "2026-09-27T18:56:04.854Z",
+  "builtAt": "2026-09-28T08:09:42.804Z",
   "artifact": {
     "filename": "process-guardian.exe",
-    "sha256": "b888d78656b1112789dbb9b3d990082c8bdecc23256518478a1381c283874092",
+    "sha256": "9f36428f29224cc424dd262aa0495a075e915c9ecce6bdfcc45bd972270afdde",
     "size": 178176
   },
   "provenance": {

package/docs/architecture/history-editor-provenance.md

@@ -41,11 +41,19 @@ The editor renders position/overflow in its existing border. The position label
 uses an injected neutral status-text style (`dim`), while the surrounding rules
 retain the active input-border color, as clarified during manual review. The approved
 `show-autocomplete-above-prompt` review refinement omits the literal `History` title:
-`─── 1/100 ─…` keeps the same four-cell inset, count calculation, dim color, optional
-scroll-overflow suffix, and clipping. Core and shell regressions verify numbering,
-100-entry recall, draft restoration, and the absence of the title. Recall temporarily
-separates the draft's live paste backing from recalled literal text, restoring it
-on return; ordinary pinned mode remains source-equivalent.
+`─── 1/100 ─…` keeps the same four-cell inset, count calculation, dim color, and
+clipping. When recalled input has hidden lines above, the approved
+`separate-history-scroll-label` refinement keeps that count left-aligned without a
+separator and independently centers `↑ N more` in the active border color, matching
+the lower cue. At collision widths the history count remains visible while a complete
+cue shifts right only as needed, or is omitted when both labels cannot fit. Cursor
+movement and pointer placement within recalled multiline text retain the active browse
+position and its count; content mutation or leaving recall still ends that presentation.
+Core and shell regressions verify numbering, 100-entry recall, separated styling and
+placement, multiline cursor-placement continuity, narrow-width history continuity and
+recovery, draft restoration, and the absence of the title. Recall temporarily separates the draft's
+live paste backing from recalled literal text, restoring it on return; ordinary
+pinned mode remains source-equivalent.
 
 The integration inventory is:
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@timurproko/a1",
-  "version": "0.2.1-dev.604",
+  "version": "0.2.1",
   "description": "Standalone terminal workspace for supervised native and managed agents",
   "type": "module",
   "privateLaunchContract": "neutral-launch-v1",