@timurproko/a1 0.2.1 → 0.2.2

package/dist/integrations/pi/components/shell-presenters-transcript.js

@@ -5,7 +5,6 @@ import { piToolArguments as toolArguments, updatePiToolResult as updateToolResul
 import { createTranscriptImageResolver } from "./transcript-image-resolver.js";
 import { createMermaidMarkdownTransformer } from "./upstream/components/mermaid.js";
 import { Container, Image, Spacer, Text, } from "@earendil-works/pi-tui";
-import { PRODUCT_TEXT } from "../../../product-identity.js";
 import { createPiSubmittedPromptComponent, isPiPromptStyleCompaction, } from "./submitted-prompt-adapter.js";
 export { isPiPromptStyleCompaction, paintPiSubmittedPromptTimestamp } from "./submitted-prompt-adapter.js";
 import { PINNED_PI_LAYOUT, piTheme, } from "./theme.js";
@@ -170,24 +169,6 @@ export function renderPiShellStartupDiagnostic(diagnostic, width) {
             : { open: `${escape}[2m`, close: `${escape}[22m`, prefix: "" };
     return new Text(`${chalk.open}${chalk.prefix}${diagnostic.message}${chalk.close}`, 0, 0).render(width);
 }
-/**
- * Pinned Pi's `showPackageUpdateNotification` banner: warning-coloured dynamic
- * borders around a bold warning title, the muted update instruction with the
- * accent command, and the package list.
- */
-export function renderPiShellPackageUpdateNotice(packages, width) {
-    ensureTheme();
-    const theme = piTheme();
-    const container = new Container();
-    container.addChild(new Spacer(1));
-    container.addChild(new DynamicBorder(text => theme.fg("warning", text)));
-    container.addChild(new Text(`${theme.bold(theme.fg("warning", "Package Updates Available"))}\n`
-        + `${theme.fg("muted", "Package updates are available. Run ")}${theme.fg("accent", `${PRODUCT_TEXT.commandName} pi update --extensions`)}\n`
-        + `${theme.fg("muted", "Packages:")}\n`
-        + packages.map(name => `- ${name}`).join("\n"), 1, 0));
-    container.addChild(new DynamicBorder(text => theme.fg("warning", text)));
-    return container.render(width);
-}
 function transcriptComponent(block, cwd, expanded, extensions, submittedPrompt, outputPad, hideThinkingBlock, mermaidRenderingMode, showImages, imageWidthCells, imageAssets, tui) {
     switch (block.kind) {
         case "user": {

package/dist/integrations/pi/components/shell-shared-facade.d.ts

@@ -89,7 +89,8 @@ export interface PiShellProgressStatusPresentation {
     }) => string;
 }
 export interface PiShellStatusPort extends PiShellViewComponentPort {
-    setWorkingOverride(message: string | undefined): void;
+    /** `active` owns a live operation before the engine lifecycle itself becomes busy. */
+    setWorkingOverride(message: string | undefined, active?: boolean): void;
     setOutputPad(padding: 0 | 1): void;
     /** Bare A1 shows engine-measured progress beside the working word; the pinned route keeps the bare word. */
     setProgressPresentation(presentation: PiShellProgressPresentationMode): void;

package/dist/integrations/pi/components/submitted-prompt-adapter.d.ts

@@ -1,5 +1,5 @@
 import { type Component } from "@earendil-works/pi-tui";
-import { type OwnedUiTranscriptBlock } from "../../../contracts/owned-ui/index.js";
+import type { OwnedUiTranscriptBlock } from "../../../contracts/owned-ui/index.js";
 export interface PiShellSubmittedPromptComposer {
     readonly layout: (width: number, source?: Date | number | null) => {
         readonly contentWidth: number;

package/dist/integrations/pi/components/submitted-prompt-adapter.js

@@ -1,6 +1,6 @@
 import { getMarkdownTheme } from "../startup-public.js";
 import { Box, Markdown, Text } from "@earendil-works/pi-tui";
-import { protectPromptChipWrapping } from "../../../contracts/owned-ui/index.js";
+import { protectPiPromptChipPresentation } from "./prompt-chip-presentation.js";
 import { piTheme } from "./theme.js";
 /** Branch summaries share the block kind but do not participate in prompt navigation. */
 export function isPiPromptStyleCompaction(block) {
@@ -19,13 +19,22 @@ export function createPiSubmittedPromptComponent(block, composer, heading) {
     const timestamp = numericTimestamp(block);
     // Invariant: presentation-only chrome stays outside the summary's Markdown parser and stored text.
     const header = heading === undefined ? undefined : new Text(heading, 0, 0);
-    const chipWrapping = block.kind === "user" ? protectPromptChipWrapping(block.text) : undefined;
-    const markdown = new Markdown(chipWrapping?.text ?? block.text, 0, 0, getMarkdownTheme(), { color: content => piTheme().fg("userMessageText", content) }, { preserveOrderedListMarkers: true, preserveBackslashEscapes: true });
+    let chipWrapping;
+    const markdown = new Markdown(block.text, 0, 0, getMarkdownTheme(), { color: content => piTheme().fg("userMessageText", content) }, {
+        preserveOrderedListMarkers: true,
+        preserveBackslashEscapes: true,
+        ...(block.kind === "user" ? { transform: (text, width) => {
+                const wrapping = protectPiPromptChipPresentation(text, width);
+                chipWrapping = wrapping;
+                return wrapping.text;
+            } } : {}),
+    });
     const content = {
         render(width) {
             const layout = composer.layout(width, timestamp);
             const renderedBodyRows = markdown.render(layout.contentWidth);
-            const bodyRows = chipWrapping === undefined ? renderedBodyRows : renderedBodyRows.map(row => chipWrapping.restore(row));
+            const wrapping = chipWrapping;
+            const bodyRows = wrapping === undefined ? renderedBodyRows : renderedBodyRows.map(row => wrapping.restore(row));
             const rows = header === undefined ? bodyRows : [
                 ...header.render(layout.contentWidth).map(row => piTheme().fg("userMessageText", row)),
                 ...(bodyRows.length === 0 ? [] : ["", ...bodyRows]),

package/dist/integrations/pi/engine/adapter.d.ts

@@ -41,6 +41,8 @@ export interface PiEngineAdapterOptions {
      * mode. Returns display names of packages with updates available.
      */
     readonly checkPackageUpdates?: PiEnginePackageUpdateProbe;
+    /** Comparison profiles preserve Pi's startup changelog; bare A1 owns release-note startup. */
+    readonly announceStartupChangelog?: boolean;
     readonly repositoryContextReader?: PiRepositoryContextReader;
 }
 /** Owns the pinned Pi session lifecycle and translates its events into the neutral agent-engine contract. */
@@ -58,6 +60,16 @@ export declare class PiEngineAdapter implements OwnedUiPromptSuggestionGenerator
     currentSessionFile(): string | null;
     currentSessionResumeMetadata(): PiSessionResumeMetadata | null;
     get disposed(): boolean;
+    /**
+     * Report a newer A1 release found by the startup check. The shell renders the diagnostic as
+     * pinned Pi's `Update Available` notice; it arrives whenever the check resolves, so a late
+     * result is appended to the transcript like Pi's own fire-and-forget version check.
+     */
+    announceReleaseUpdate(release: {
+        readonly version: string;
+        readonly command: string;
+        readonly changelogUrl: string | null;
+    }): void;
     suggestionReasoningPolicy(): OwnedUiPromptSuggestionReasoning;
     generate(request: OwnedUiPromptSuggestionRequest): Promise<OwnedUiPromptSuggestionResult>;
     start(): Promise<OwnedUiSessionViewModel>;

package/dist/integrations/pi/engine/adapter.js

@@ -133,6 +133,7 @@ export class PiEngineAdapter {
             projectTrustPrompt: options.projectTrustPrompt,
             createRuntime: options.createRuntime,
             checkPackageUpdates: options.checkPackageUpdates,
+            ...(options.announceStartupChangelog === undefined ? {} : { announceStartupChangelog: options.announceStartupChangelog }),
             ...(options.repositoryContextReader === undefined ? {} : { repositoryContextReader: options.repositoryContextReader }),
             host: this.#workflowHost,
         }, {
@@ -241,6 +242,18 @@ export class PiEngineAdapter {
     get disposed() {
         return this.#disposed;
     }
+    /**
+     * Report a newer A1 release found by the startup check. The shell renders the diagnostic as
+     * pinned Pi's `Update Available` notice; it arrives whenever the check resolves, so a late
+     * result is appended to the transcript like Pi's own fire-and-forget version check.
+     */
+    announceReleaseUpdate(release) {
+        if (this.#disposed)
+            return;
+        const changelog = release.changelogUrl === null ? "" : `\nChangelog: ${release.changelogUrl}`;
+        this.#addDiagnostic("info", "release-update", `New version ${release.version} is available. Run ${release.command}${changelog}`, true);
+        this.#emitView();
+    }
     suggestionReasoningPolicy() {
         return this.#suggestions.reasoningPolicy();
     }

package/dist/integrations/pi/engine/session-runtime.d.ts

@@ -32,6 +32,7 @@ export interface PiEngineRuntimeOptions {
     readonly projectTrustPrompt: PiProjectTrustPreflightPrompt | undefined;
     readonly createRuntime: PiEngineRuntimeFactory | undefined;
     readonly checkPackageUpdates: PiEnginePackageUpdateProbe | undefined;
+    readonly announceStartupChangelog?: boolean;
     readonly pullRequestProbe?: PiPullRequestProbe;
     readonly pullRequestRefreshMs?: number;
     readonly repositoryContextPollMs?: number;

package/dist/integrations/pi/engine/session-runtime.js

@@ -122,7 +122,8 @@ export class PiEngineRuntime {
             this.#ports.diagnostic(diagnostic.type === "error" ? "error" : diagnostic.type === "warning" ? "warning" : "info", code, diagnostic.message, diagnostic.type !== "error");
         }
         this.bindSession(runtime.session);
-        await this.#announceChangelog(runtime.services.settingsManager);
+        if (this.#options.announceStartupChangelog !== false)
+            await this.#announceChangelog(runtime.services.settingsManager);
         this.#repositoryRefreshEnabled = true;
         this.#startRepositoryRefresh();
         return runtime;

package/dist/native/darwin-arm64/manifest.json

@@ -5,7 +5,7 @@
   "platform": "darwin",
   "architecture": "arm64",
   "capability": "supported",
-  "builtAt": "2026-09-28T08:09:05.323Z",
+  "builtAt": "2026-09-30T15:11:14.553Z",
   "artifact": {
     "filename": "process-guardian",
     "sha256": "9db1726bbe3fc2e8292f2ead1e7e9d0fd4d7d0dc9217b372582bf354b0f565dc",

package/dist/native/linux-x64/manifest.json

@@ -5,7 +5,7 @@
   "platform": "linux",
   "architecture": "x64",
   "capability": "supported",
-  "builtAt": "2026-09-28T08:08:49.459Z",
+  "builtAt": "2026-09-30T15:11:06.077Z",
   "artifact": {
     "filename": "process-guardian",
     "sha256": "d8cda6b0c7cb36c0cc41e90802aceebf6c02eaebbc08a83d7d963d2e918dbd7a",

package/dist/native/win32-x64/manifest.json

@@ -5,10 +5,10 @@
   "platform": "win32",
   "architecture": "x64",
   "capability": "supported",
-  "builtAt": "2026-09-28T08:09:42.804Z",
+  "builtAt": "2026-09-30T15:12:00.529Z",
   "artifact": {
     "filename": "process-guardian.exe",
-    "sha256": "9f36428f29224cc424dd262aa0495a075e915c9ecce6bdfcc45bd972270afdde",
+    "sha256": "48fa14151a68053140a6bd2e7cb17b28af573d97a1c386d3466ba3abf9076cd5",
     "size": 178176
   },
   "provenance": {

package/dist/product-identity.d.ts

@@ -1,4 +1,4 @@
-declare const ENVIRONMENT_KEYS: readonly ["clipboardDiagnostics", "configDir", "dataDir", "databasePath", "developmentInstanceId", "developmentRoot", "endpoint", "paneId", "probeTrace", "processGuardianPath", "prFooterPreview", "profileHome", "runtimeDir", "startupTrace", "suggestionDiagnostics", "terminalSessionId"];
+declare const ENVIRONMENT_KEYS: readonly ["clipboardDiagnostics", "configDir", "dataDir", "databasePath", "developmentInstanceId", "developmentRoot", "endpoint", "paneId", "probeTrace", "processGuardianPath", "prFooterPreview", "profileHome", "runtimeDir", "skipVersionCheck", "startupTrace", "suggestionDiagnostics", "terminalSessionId"];
 declare const FILESYSTEM_KEYS: readonly ["slug", "windowsDirectory", "unixDirectory", "temporaryPrefix"];
 declare const STATE_KEYS: readonly ["windowsControlDirectory", "unixControlDirectory", "developmentDirectory", "piAgentProfile", "piVanillaProfile", "sessionRepositoryDirectory"];
 declare const ENDPOINT_KEYS: readonly ["windowsPipeStem", "unixSocketFilename", "metadataFilename", "supervisorLogFilename", "databaseFilename"];

package/dist/product-identity.js

@@ -1,7 +1,7 @@
 import rawIdentity from "./product-identity.json" with { type: "json" };
 const ENVIRONMENT_KEYS = [
     "clipboardDiagnostics", "configDir", "dataDir", "databasePath", "developmentInstanceId", "developmentRoot", "endpoint",
-    "paneId", "probeTrace", "processGuardianPath", "prFooterPreview", "profileHome", "runtimeDir", "startupTrace", "suggestionDiagnostics", "terminalSessionId",
+    "paneId", "probeTrace", "processGuardianPath", "prFooterPreview", "profileHome", "runtimeDir", "skipVersionCheck", "startupTrace", "suggestionDiagnostics", "terminalSessionId",
 ];
 const FILESYSTEM_KEYS = ["slug", "windowsDirectory", "unixDirectory", "temporaryPrefix"];
 const STATE_KEYS = ["windowsControlDirectory", "unixControlDirectory", "developmentDirectory", "piAgentProfile", "piVanillaProfile", "sessionRepositoryDirectory"];

package/dist/product-identity.json

@@ -23,6 +23,7 @@
         "prFooterPreview": "A1_PR_FOOTER_PREVIEW",
         "profileHome": "A1_PROFILE_HOME",
         "runtimeDir": "A1_RUNTIME_DIR",
+        "skipVersionCheck": "A1_SKIP_VERSION_CHECK",
         "startupTrace": "A1_STARTUP_TRACE",
         "suggestionDiagnostics": "A1_SUGGESTION_DIAGNOSTICS",
         "terminalSessionId": "A1_TERMINAL_SESSION_ID"

package/dist/ui/settings/declarations.d.ts

@@ -1,4 +1,4 @@
-export declare const OWNED_UI_SETTINGS_VERSION = 8;
+export declare const OWNED_UI_SETTINGS_VERSION = 10;
 export type OwnedUiSettingValue = string | number | boolean;
 export type OwnedUiSettingApplication = "live" | "restart";
 export interface OwnedUiSettingDeclaration {
@@ -32,6 +32,18 @@ export declare const OWNED_SETTING_DECLARATIONS: Readonly<{
         defaultValue: true;
         allowedValues: readonly [true, false];
     }>;
+    readonly updateCheck: Readonly<{
+        id: "updateCheck";
+        label: "Update check";
+        section: Readonly<{
+            id: "generic";
+            title: "Generic";
+        }>;
+        description: "Check once a day at startup whether a newer A1 release exists on this channel and show a notice. Uses the public npm registry; applies on next start.";
+        application: "restart";
+        defaultValue: true;
+        allowedValues: readonly [true, false];
+    }>;
     readonly scrollbarAppearance: Readonly<{
         id: "scrollbarAppearance";
         label: "Scrollbar mode";
@@ -116,6 +128,18 @@ export declare const OWNED_SETTING_DECLARATIONS: Readonly<{
         defaultValue: "collapse";
         allowedValues: readonly ["collapse", "expand"];
     }>;
+    readonly promptImageLimit: Readonly<{
+        id: "promptImageLimit";
+        label: "Prompt image limit";
+        section: Readonly<{
+            id: "agent";
+            title: "Agent";
+        }>;
+        description: "Maximum image attachments in one prompt. Providers may enforce a lower limit.";
+        application: "live";
+        defaultValue: 8;
+        allowedValues: readonly [1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15, 16];
+    }>;
 }>;
 export type OwnedSettingId = keyof typeof OWNED_SETTING_DECLARATIONS;
 /** The value type a setting's declaration allows: a literal union for a choice, `number` for a stepped range. */

package/dist/ui/settings/declarations.js

@@ -1,4 +1,4 @@
-export const OWNED_UI_SETTINGS_VERSION = 8;
+export const OWNED_UI_SETTINGS_VERSION = 10;
 const MAX_ID_LENGTH = 64;
 const ID_PATTERN = /^[a-z][a-z0-9]*(?:[A-Z][a-z0-9]*)*$/;
 /** Declared first so the settings screen opens on it; sections follow first-declaration order. */
@@ -19,6 +19,15 @@ export const OWNED_SETTING_DECLARATIONS = Object.freeze({
         defaultValue: true,
         allowedValues: Object.freeze([true, false]),
     }),
+    updateCheck: Object.freeze({
+        id: "updateCheck",
+        label: "Update check",
+        section: GENERIC_SECTION,
+        description: "Check once a day at startup whether a newer A1 release exists on this channel and show a notice. Uses the public npm registry; applies on next start.",
+        application: "restart",
+        defaultValue: true,
+        allowedValues: Object.freeze([true, false]),
+    }),
     scrollbarAppearance: Object.freeze({
         id: "scrollbarAppearance",
         label: "Scrollbar mode",
@@ -82,6 +91,15 @@ export const OWNED_SETTING_DECLARATIONS = Object.freeze({
         defaultValue: "collapse",
         allowedValues: Object.freeze(["collapse", "expand"]),
     }),
+    promptImageLimit: Object.freeze({
+        id: "promptImageLimit",
+        label: "Prompt image limit",
+        section: AGENT_SECTION,
+        description: "Maximum image attachments in one prompt. Providers may enforce a lower limit.",
+        application: "live",
+        defaultValue: 8,
+        allowedValues: Object.freeze([1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15, 16]),
+    }),
 });
 /** The declarations in declaration order, for resolution, persistence, and the settings screen. */
 export const OWNED_UI_SETTING_DECLARATIONS = Object.freeze(Object.values(OWNED_SETTING_DECLARATIONS));

package/dist/ui/settings/migrations.js

@@ -67,6 +67,20 @@ export const OWNED_UI_SETTINGS_MIGRATIONS = Object.freeze([
             return { ...values };
         },
     }),
+    Object.freeze({
+        to: 9,
+        description: "Introduce the configurable prompt image limit with the eight-image default.",
+        migrate(values) {
+            return { ...values };
+        },
+    }),
+    Object.freeze({
+        to: 10,
+        description: "Introduce the startup update check with the enabled default.",
+        migrate(values) {
+            return { ...values };
+        },
+    }),
 ]);
 export function assertOwnedUiSettingsMigrations(migrations, currentVersion = OWNED_UI_SETTINGS_VERSION) {
     const firstProduced = currentVersion - migrations.length + 1;

package/docs/architecture/internal-naming.md

@@ -6,7 +6,7 @@ Internal code names contain no case-insensitive `a1` substring. This includes co
 
 The required **Internal naming validation** job scans complete added, modified, copied, and renamed-to files at the exact PR head against the complete merge-base diff. It does not inspect only changed lines. Policy, exception, ownership, parser-dependency, and selection changes require a full audit and inspector regression tests. A stale, missing, failed, or unexpectedly skipped required result blocks the aggregate development check.
 
-The nightly release workflow runs `full-release`, including `naming-full`, against the entire tracked codebase at its selected source commit. It does not use PR changed-file selection, including when it verifies an already-published immutable package. Naming failure fails platform validation and blocks publication. `naming-selection.test.ts` locks down this nightly wiring and checks that unchanged source is audited.
+The nightly publication workflow runs `full-release`, including `naming-full`, against the entire tracked codebase at its selected source commit. It does not use PR changed-file selection, including when it verifies an already-published immutable package. Naming failure fails platform validation and blocks publication. `naming-selection.test.ts` locks down this nightly wiring and checks that unchanged source is audited.
 
 - Full local audit: `npm run check:names` (tracked files, including staged new files).
 - Exact selected PR audit: `npm run check:names:changed` after producing `.artifacts/validation/impact.json`.
@@ -62,7 +62,7 @@ These names are already neutral; their definitions and consumers remain the auth
 - Development aggregate: `CHANGES_RESULT`, `DOCS_RESULT`, `DOCUMENTATION_RESULT`, `DOCUMENTATION_REQUIRED`, `VALIDATE_RESULT`, `CONTAINMENT_RESULT`, `STARTUP_RESULT`, `RENDERING_RESULT`, `RENDERING_TIER`, `DOCS_ONLY`, `VERSION_ONLY`, `OPENSPEC_TOUCHED`, `SELECTED_HEAD`, `EXPECTED_HEAD`, `EVENT_BASE_SHA`, `EVENT_HEAD_SHA`. The workflow produces these and `require-development-validation.mjs` or the selector consumes them.
 - Naming aggregate: `NAMING_RESULT`, `NAMING_REQUIRED`, `NAMING_HEAD`, produced by CI and consumed by the same required aggregate.
 - Validation: `VALIDATION_BUILD_READY`, `VALIDATION_CANDIDATE_TARBALL`, `VALIDATION_DOCUMENTATION_FULL_READY`, `VALIDATION_SELECTION_JSON`, `STARTUP_PERFORMANCE_RESULT`, owned by validation orchestration and exact-package fixtures.
-- Publication workflow-local handoffs: `BUILD`, `EVENT_NAME`, `EXISTS`, `EXPECTED_INTEGRITY`, `EXPECTED_REGISTRY_INTEGRITY`, `EXPECTED_REGISTRY_SHASUM`, `EXPECTED_SHASUM`, `MODE`, `PACKAGE`, `PLAN`, `PUBLISH`, `PULLS_PATH`, `PULL_REQUEST`, `REGISTRY_TARBALL`, `RELEASE_CHANNEL`, `RELEASE_VERSION`, `REQUESTED_CHANNEL`, `REQUESTED_SHA`, `SOURCE_SHA`, `VALIDATE`, `VERSION`, `WORK`, defined and consumed in `.github/workflows/release.yml`.
+- Publication workflow-local handoffs: `BUILD`, `EVENT_NAME`, `EXISTS`, `EXPECTED_INTEGRITY`, `EXPECTED_REGISTRY_INTEGRITY`, `EXPECTED_REGISTRY_SHASUM`, `EXPECTED_SHASUM`, `MODE`, `PACKAGE`, `PLAN`, `PUBLISH`, `PULLS_PATH`, `PULL_REQUEST`, `REGISTRY_TARBALL`, `RELEASE_CHANNEL`, `RELEASE_VERSION`, `REQUESTED_CHANNEL`, `REQUESTED_SHA`, `SOURCE_SHA`, `VALIDATE`, `VERSION`, `WORK`, defined and consumed in `.github/workflows/publish.yml`.
 - Isolated fixture controls: `PROMPT_SUGGESTION_AGENT_DIR`, `RUN_PROMPT_SUGGESTION_PROVIDER_TEST`, `TEST_SUPERVISOR_SECRET`, owned by their specific provider/supervisor tests.
 - Host/tool integration: `CARGO`, `ZIG`, `PATH`, `HOME`, `USERPROFILE`, `APPDATA`, `LOCALAPPDATA`, XDG directory variables, `TERM`, `COLORTERM`, `TERM_PROGRAM`, `WT_SESSION`, `EXEPATH`, `MINGW_PREFIX`, `MSYSTEM`, and third-party `PI_*`, `GITHUB_*`, `GH_TOKEN`, and npm variables. Their external spellings and caller values are not private product naming targets. The forwarding of an arbitrary user's environment is distinct from defining an owned setting.
 

package/docs/architecture/resource-and-data-policy.md

@@ -23,14 +23,25 @@ Budgets are minimum defaults, not promises of capacity. An implementation may lo
 | Scrollback per pane | Host-defined, always bounded | Compact from oldest data first without cross-pane mutation |
 | Proof evidence file | 16 MiB | Reject and request summarized evidence |
 | Diagnostic payload | 256 KiB | Redact, truncate, and retain enough evidence for the failed operation |
+| Packaged release-note resource | 1 MiB total; 128 KiB per note | Reject the damaged resource and retain the note as unacknowledged |
+| Release-note acknowledgement/claim | 4 KiB per profile; one claim; one-hour stale bound | Ignore malformed acknowledgement, recover stale claim, and never acknowledge implicitly |
 
 Every asynchronous consumer must implement a finite queue or window. Backpressure must isolate the offending agent/pane and must not block unrelated identities.
 
+Stable release-note preparation generates Pi-style Markdown with a
+`## [version] - YYYY-MM-DD` heading and applicable categorized `###` sections. Human
+editing remains allowed. Approval normalizes and bounds the editable draft GitHub
+Release body before hashing it; if that version/date heading remains, its version and
+calendar date must be valid. Publication jobs consume only that immutable snapshot;
+later draft edits cannot expand or replace the package candidate. The same per-note
+and total catalog limits apply when the snapshot is combined with committed history.
+
 ## Data classification
 
 | Class | Examples | Storage policy |
 |---|---|---|
 | Workspace metadata | IDs, names, lifecycle, capability versions, topology revisions, recovery references | May persist in the control store |
+| Release-note state | Last acknowledged stable A1 version and opaque bounded claim token/time | May persist atomically in profile-isolated A1 configuration; never stores note text or Pi settings |
 | Structured payloads | Messages, tool calls, snapshots, attachments | Bound and process; arbitrary payload persistence remains unsupported |
 | User-authored prompt recall | Canonical interactive input and bounded provenance | May persist only through the profile-isolated prompt-history policy below, never in the control store |
 | Terminal content | PTY bytes, scrollback, selection, rendered cells | Never persist in A1's control store or diagnostics |

package/docs/architecture/toolchain.md

@@ -81,7 +81,7 @@ Presentation acceptance is the reader comparing `a1 pi` with pinned Pi. `node sc
 
 ## Publication
 
-One workflow publishes both channels: `.github/workflows/release.yml`. Pushes do not publish. Nightly development verification runs at `03:17 UTC`; `npm run develop` explicitly requests a numbered preview and `npm run release -- patch` explicitly requests stable publication after its version pull request is manually merged; it promotes a development version to its stable core. The following development-version pull request also requires manual merge. A preview is stamped as `-dev.<merged pull-request number>` and uses npm `next` only as an internal dist-tag. New candidates pack the application and dependency-free installer once each and validate their exact bytes on Windows, Linux, and macOS; a repeated nightly verifies both immutable registry tarballs. All publication uses provenance from the `npm-publish` environment, a preview never changes `latest`, and the stable tag, GitHub Release, and `master` are written only after npm has both packages. One global non-cancelling concurrency group serializes the final registry check.
+One reusable workflow publishes both npm channels: `.github/workflows/publish.yml`. Pushes do not publish. Nightly development verification runs at `03:17 UTC`; `npm run develop` dispatches the development wrapper for a numbered preview. `npm run release -- patch` generates a source-bound draft GitHub Release with a Pi-style version/date heading and categorized change sections, starts `.github/workflows/release-candidate.yml` to run the complete stable suite on that source, prints the run link, waits for it, and prints the draft editing link once only after it passes. Choosing native **Publish release** on the draft is the only stable npm trigger: GitHub creates the tag at the bound source, and the `release.published` workflow calls the default-branch publisher, which derives the authorized human actor, source, Release identity, normalized body, and digest, and requires the successful candidate run for that source and version. A preview is stamped as `-dev.<merged pull-request number>` and uses npm `next` only as an internal dist-tag. New candidates pack the application and dependency-free installer once each—including committed release history plus the approved current note snapshot—and validate their exact bytes on Windows, Linux, and macOS; after the click the published note is repacked and the exact-package gates run on the final bytes. A repeated nightly verifies both immutable registry tarballs. After npm verification, publication uploads the asset and fast-forwards `master`, then App-authenticated automation proposes one exact, manually merged reopening PR storing both next `-dev` versions and the note. A failure before either package reaches npm returns the Release to draft and deletes its unconsumed tag, the only tag deletion the release-automation App may perform; after npm, the same run's failed jobs are rerun. Tags are never moved or reused. All npm publication uses provenance from the `npm-publish` environment, a preview never changes `latest`, and one global non-cancelling concurrency group serializes the final registry check.
 
 `docs/ci-release-runbook.md` is the operational reference.
 

package/docs/architecture/ui-reference-provenance.md

@@ -72,6 +72,7 @@ its own `core` facade layer; A1 is a product, so the port adapts imports and kee
   transcripts, widgets, pointer selection, and extension-editor restoration. Physical
   acceptance of the exact build remains required before merging the implementation.
 - **Owned in-session routes are overlays.** The A1 UI reference owns its surface and can switch screens; A1 renders in-session owned routes through the pinned Pi TUI as full-viewport overlays. The pre-resource trust selector is separate and uses a bounded alternate startup surface solely so every completion path can restore the untouched parent terminal before engine activation or a fail-closed diagnostic.
+- **A1 release notes replace Pi startup changelog behavior only in bare A1.** Bare A1's `/changelog` screen reads the bounded packaged resource generated from reviewed `docs/releases/*.md` documents, and an exact stable current note may open in the same full-screen route after startup safety surfaces. Product-owned per-profile claim/acknowledgement state is written only after a rendered close. The `a1 pi` comparison profile retains Pi's pinned changelog data, settings, startup announcement, and in-feed command presentation. Evidence is in `test/features/owned-ui/release-notes.test.ts`, `release-note-state.test.ts`, `test/composition/settings-route-host.test.ts`, and `test/app/session-shell/session-shell-reference-screens.test.ts`.
 - **Colour is a port, not an import.** The reference takes a Pi `Theme` directly. A1 defines
   `UiTheme` so the component layer never imports a Pi adapter and can be rendered plainly in
   tests.