@timurproko/a1 0.2.6-dev.736 → 0.2.7-dev.1221

package/dist/ui/settings/declarations.js

@@ -1,27 +1,44 @@
-export const OWNED_UI_SETTINGS_VERSION = 13;
+export const OWNED_UI_SETTINGS_VERSION = 19;
 const UI_ACCENT_COLOR_CHOICES = Object.freeze([
-    "purple", "blue", "cyan", "green", "orange", "pink",
+    "blue", "purple", "cyan", "green", "orange", "pink",
 ]);
 const MAX_ID_LENGTH = 64;
 const ID_PATTERN = /^[a-z][a-z0-9]*(?:[A-Z][a-z0-9]*)*$/;
-/** Declared first so the settings screen opens on it; sections follow first-declaration order. */
 const GENERIC_SECTION = Object.freeze({ id: "generic", title: "Generic" });
 const APPEARANCE_SECTION = Object.freeze({ id: "appearance", title: "Appearance" });
 const SCROLL_SECTION = Object.freeze({ id: "scroll", title: "Scroll" });
 const AGENT_SECTION = Object.freeze({ id: "agent", title: "Agent" });
-/**
- * Every A1 setting, keyed by its id. The table is the one declaration: ids, defaults, and allowed
- * values are read from it, and `OwnedSettingValueOf` derives each getter's type from it.
- */
+const TABS_SECTION = Object.freeze({ id: "tabs", title: "Tab Bar" });
+/** The tab kinds the strip's `+` can offer, in the order it shows them. */
+const PLUS_MENU_KINDS = Object.freeze([
+    Object.freeze({ key: "agent", label: "Agent", description: "Add a new Agent tab every time." }),
+    Object.freeze({ key: "settings", label: "Settings", description: "Show the one Settings tab." }),
+    Object.freeze({ key: "changelog", label: "Changelog", description: "Show the one Changelog tab." }),
+]);
+/** Every enabled subset of the plus-menu kinds, each in kind order. */
+const PLUS_MENU_VALUES = Object.freeze([
+    "", "agent", "settings", "changelog", "agent,settings", "agent,changelog", "settings,changelog", "agent,settings,changelog",
+]);
 export const OWNED_SETTING_DECLARATIONS = Object.freeze({
     updateCheck: Object.freeze({
         id: "updateCheck",
-        label: "Update check",
+        label: "Update",
         section: GENERIC_SECTION,
-        description: "Check once a day at startup whether a newer A1 release exists on this channel and show a notice. Uses the public npm registry; applies on next start.",
+        description: "Auto installs verified channel updates silently, Notify shows the current update notice, and No leaves updates manual. Checks use the public npm registry; applies on next start.",
         application: "restart",
-        defaultValue: true,
-        allowedValues: Object.freeze([true, false]),
+        defaultValue: "auto",
+        allowedValues: Object.freeze(["auto", "notify", "no"]),
+    }),
+    timeFormat: Object.freeze({
+        id: "timeFormat",
+        label: "Time format",
+        section: GENERIC_SECTION,
+        description: "Format used by submitted-prompt timestamps and the resident tab clock.",
+        application: "live",
+        defaultValue: "8:00 PM",
+        allowedValues: Object.freeze([
+            "20:00", "8:00 PM",
+        ]),
     }),
     accentColor: Object.freeze({
         id: "accentColor",
@@ -29,7 +46,7 @@ export const OWNED_SETTING_DECLARATIONS = Object.freeze({
         section: APPEARANCE_SECTION,
         description: "Color used by highlighted interface controls, list markers, and tonal interface surfaces.",
         application: "live",
-        defaultValue: "purple",
+        defaultValue: "blue",
         allowedValues: UI_ACCENT_COLOR_CHOICES,
     }),
     backgroundStyle: Object.freeze({
@@ -83,11 +100,20 @@ export const OWNED_SETTING_DECLARATIONS = Object.freeze({
         id: "promptHistoryEnabled",
         label: "Persistent history",
         section: Object.freeze({ id: "history", title: "History" }),
-        description: "Retain reusable prompts across sessions. Applies on next start; disabling does not erase saved history or stop existing instances.",
+        description: "Retain reusable prompts after restart. Applies on next start; disabling does not erase saved history or stop existing instances.",
         application: "restart",
         defaultValue: true,
         allowedValues: Object.freeze([true, false]),
     }),
+    promptHistoryScope: Object.freeze({
+        id: "promptHistoryScope",
+        label: "History scope",
+        section: Object.freeze({ id: "history", title: "History" }),
+        description: "Unique shows each agent session's history; Shared shows the profile-wide history. Switches running agents without moving or erasing saved prompts.",
+        application: "live",
+        defaultValue: "unique",
+        allowedValues: Object.freeze(["unique", "shared"]),
+    }),
     promptHistoryMaxItems: Object.freeze({
         id: "promptHistoryMaxItems",
         label: "History limit",
@@ -124,8 +150,35 @@ export const OWNED_SETTING_DECLARATIONS = Object.freeze({
         defaultValue: 8,
         allowedValues: Object.freeze([1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15, 16]),
     }),
+    tabsPosition: Object.freeze({
+        id: "tabsPosition",
+        label: "Position",
+        section: TABS_SECTION,
+        description: "Place the resident tab bar at the top or bottom of the terminal.",
+        application: "live",
+        defaultValue: "top",
+        allowedValues: Object.freeze(["top", "bottom"]),
+    }),
+    tabBarPlusMenu: Object.freeze({
+        id: "tabBarPlusMenu",
+        label: "Plus menu",
+        section: TABS_SECTION,
+        description: "The tabs + offers. With only Agent, + adds an Agent at once; with more, it opens a menu; with none, + is hidden.",
+        application: "live",
+        defaultValue: "agent",
+        allowedValues: PLUS_MENU_VALUES,
+        flags: PLUS_MENU_KINDS,
+    }),
+    tabsAutoName: Object.freeze({
+        id: "tabsAutoName",
+        label: "Auto name",
+        section: TABS_SECTION,
+        description: "Automatically name a new tab from its first completed turn with the tab's current model.",
+        application: "live",
+        defaultValue: true,
+        allowedValues: Object.freeze([true, false]),
+    }),
 });
-/** The declarations in declaration order, for resolution, persistence, and the settings screen. */
 export const OWNED_UI_SETTING_DECLARATIONS = Object.freeze(Object.values(OWNED_SETTING_DECLARATIONS));
 export function isOwnedSettingId(id) {
     return Object.hasOwn(OWNED_SETTING_DECLARATIONS, id);

package/dist/ui/settings/early-accent.d.ts

@@ -0,0 +1,81 @@
+import type { UiAccentColor } from "../../contracts/owned-ui/index.js";
+type Appearance = "dark" | "light";
+type ColorMode = "truecolor" | "256color";
+/** Global settings only: project resources must remain unavailable until trust is resolved. */
+export declare function readPreTrustAccent(environment?: NodeJS.ProcessEnv): UiAccentColor;
+export declare function preTrustPalette(color: UiAccentColor, appearance: Appearance, mode: ColorMode): {
+    accent: string;
+    border: string;
+} | {
+    accent: string;
+    border: string;
+} | {
+    accent: string;
+    border: string;
+} | {
+    accent: string;
+    border: string;
+} | {
+    accent: string;
+    border: string;
+} | {
+    accent: string;
+    border: string;
+} | {
+    accent: string;
+    border: string;
+} | {
+    accent: string;
+    border: string;
+} | {
+    accent: string;
+    border: string;
+} | {
+    accent: string;
+    border: string;
+} | {
+    accent: string;
+    border: string;
+} | {
+    accent: string;
+    border: string;
+} | {
+    accent: string;
+    border: string;
+} | {
+    accent: string;
+    border: string;
+} | {
+    accent: string;
+    border: string;
+} | {
+    accent: string;
+    border: string;
+} | {
+    accent: string;
+    border: string;
+} | {
+    accent: string;
+    border: string;
+} | {
+    accent: string;
+    border: string;
+} | {
+    accent: string;
+    border: string;
+} | {
+    accent: string;
+    border: string;
+} | {
+    accent: string;
+    border: string;
+} | {
+    accent: string;
+    border: string;
+} | {
+    accent: string;
+    border: string;
+};
+export declare function preTrustTerminalAppearance(environment?: NodeJS.ProcessEnv): Appearance;
+export declare function preTrustTerminalColorMode(environment?: NodeJS.ProcessEnv): ColorMode;
+export {};

package/dist/ui/settings/early-accent.js

@@ -0,0 +1,50 @@
+import { readFileSync, statSync } from "node:fs";
+import { homedir } from "node:os";
+import { isAbsolute, join } from "node:path";
+import { PRODUCT_IDENTITY } from "../../product-identity.js";
+import { SHARED_PROGRESS_PALETTE } from "./progress-palette.generated.js";
+/** Global settings only: project resources must remain unavailable until trust is resolved. */
+export function readPreTrustAccent(environment = process.env) {
+    try {
+        const home = environment[PRODUCT_IDENTITY.environment.profileHome] ?? homedir();
+        if (!isAbsolute(home) || home.includes("\0"))
+            return "blue";
+        const file = join(home, PRODUCT_IDENTITY.state.piAgentProfile, "settings.json");
+        if (statSync(file).size > 256 * 1024)
+            return "blue";
+        const raw = readFileSync(file, "utf8");
+        if (Buffer.byteLength(raw, "utf8") > 256 * 1024)
+            return "blue";
+        const root = JSON.parse(raw.replace(/^\uFEFF/u, ""));
+        if (root === null || typeof root !== "object" || Array.isArray(root))
+            return "blue";
+        const namespace = root[PRODUCT_IDENTITY.commandName];
+        if (namespace === null || typeof namespace !== "object" || Array.isArray(namespace))
+            return "blue";
+        const value = namespace.accentColor;
+        if (value === "default")
+            return "purple";
+        return typeof value === "string" && Object.hasOwn(SHARED_PROGRESS_PALETTE, value) ? value : "blue";
+    }
+    catch {
+        return "blue";
+    }
+}
+export function preTrustPalette(color, appearance, mode) {
+    return SHARED_PROGRESS_PALETTE[color][appearance][mode];
+}
+export function preTrustTerminalAppearance(environment = process.env) {
+    const index = Number.parseInt((environment.COLORFGBG ?? "").split(";").at(-1) ?? "", 10);
+    return Number.isInteger(index) && (index === 7 || index === 15 || index >= 231) ? "light" : "dark";
+}
+export function preTrustTerminalColorMode(environment = process.env) {
+    if (environment.PI_TRUE_COLOR === "1")
+        return "truecolor";
+    if (environment.PI_TRUE_COLOR === "0")
+        return "256color";
+    const program = (environment.TERM_PROGRAM ?? "").toLowerCase();
+    const known = ["kitty", "ghostty", "wezterm", "rex", "warpterminal", "iterm.app", "alacritty", "vscode", "zed"];
+    return /^(truecolor|24bit)$/iu.test(environment.COLORTERM ?? "") || (environment.TERM ?? "").endsWith("-direct")
+        || process.platform === "win32" || environment.WT_SESSION !== undefined || known.includes(program)
+        ? "truecolor" : "256color";
+}

package/dist/ui/settings/index.d.ts

@@ -1,10 +1,12 @@
 export { OWNED_SETTING_DECLARATIONS, OWNED_UI_SETTINGS_VERSION, OWNED_UI_SETTING_DECLARATIONS, assertOwnedUiSettingDeclarations, findOwnedUiSettingDeclaration, isOwnedSettingId, } from "./declarations.js";
 export type { OwnedSettingId, OwnedSettingValueOf, OwnedUiSettingApplication, OwnedUiSettingDeclaration, OwnedUiSettingValue } from "./declarations.js";
-export { OWNED_UI_SETTINGS_MIGRATIONS, assertOwnedUiSettingsMigrations, migrationsFrom } from "./migrations.js";
-export type { OwnedUiSettingsMigration } from "./migrations.js";
+export { OWNED_UI_SETTINGS_MIGRATIONS, assertOwnedUiSettingsMigrations, migrationsFrom, normalizeOwnedUiSettingsValues, } from "./migrations.js";
+export type { OwnedUiSettingsCompatibilityResult, OwnedUiSettingsMigration } from "./migrations.js";
 export { documentFrom, parseOwnedUiSettingsDocument, resolveOwnedUiSettings, settingValue } from "./resolution.js";
 export type { OwnedUiResolvedSetting, OwnedUiSettingSource, OwnedUiSettingsDocument, OwnedUiSettingsNotice, OwnedUiSettingsNoticeCode, OwnedUiSettingsResolution, ResolveOwnedUiSettingsInput, } from "./resolution.js";
 export { AGENT_SECTION_ID, buildOwnedUiSettingsSections, findOwnedUiSettingsEntry } from "./sections.js";
 export type { AgentSettingsSnapshot, BuildOwnedUiSettingsSectionsInput, OwnedUiSettingsBackend, OwnedUiSettingsEntry, OwnedUiSettingsSection, } from "./sections.js";
 export { OwnedSettingsManager } from "./manager.js";
 export type { OwnedSettingsManagerOptions, OwnedUiSettingsChangeOutcome, OwnedUiSettingsListener } from "./manager.js";
+export { assertProfileSettingsNamespaceAvailable, readProfileSettingsNamespace, repairProfileSettingsDocument, updateProfileSettingsNamespace, } from "./profile-document.js";
+export type { ProfileSettingsNamespaceRead, ProfileSettingsNamespaceUpdate } from "./profile-document.js";

package/dist/ui/settings/index.js

@@ -1,5 +1,6 @@
 export { OWNED_SETTING_DECLARATIONS, OWNED_UI_SETTINGS_VERSION, OWNED_UI_SETTING_DECLARATIONS, assertOwnedUiSettingDeclarations, findOwnedUiSettingDeclaration, isOwnedSettingId, } from "./declarations.js";
-export { OWNED_UI_SETTINGS_MIGRATIONS, assertOwnedUiSettingsMigrations, migrationsFrom } from "./migrations.js";
+export { OWNED_UI_SETTINGS_MIGRATIONS, assertOwnedUiSettingsMigrations, migrationsFrom, normalizeOwnedUiSettingsValues, } from "./migrations.js";
 export { documentFrom, parseOwnedUiSettingsDocument, resolveOwnedUiSettings, settingValue } from "./resolution.js";
 export { AGENT_SECTION_ID, buildOwnedUiSettingsSections, findOwnedUiSettingsEntry } from "./sections.js";
 export { OwnedSettingsManager } from "./manager.js";
+export { assertProfileSettingsNamespaceAvailable, readProfileSettingsNamespace, repairProfileSettingsDocument, updateProfileSettingsNamespace, } from "./profile-document.js";

package/dist/ui/settings/manager.d.ts

@@ -4,13 +4,20 @@ import { type OwnedUiSettingsMigration } from "./migrations.js";
 import { type OwnedUiSettingsResolution } from "./resolution.js";
 import { type OwnedUiSettingsBackend, type OwnedUiSettingsSection } from "./sections.js";
 export interface OwnedSettingsManagerOptions {
-    /** A1 configuration root. Settings live under `<configDir>/settings/`. */
-    readonly configDir: string;
+    /** Selected global agent profile containing the shared `settings.json`. */
+    readonly profileDir?: string;
+    /** Compatibility alias for SDK/tests that supplied the former root option. */
+    readonly configDir?: string;
     readonly profileId: string;
+    /** Product namespace; defaults to profileId for generic and hermetic consumers. */
+    readonly namespace?: string;
+    /** Former product configuration root, consulted only while the namespace is absent. */
+    readonly legacyConfigDir?: string;
     readonly declarations?: readonly OwnedUiSettingDeclaration[];
     readonly migrations?: readonly OwnedUiSettingsMigration[];
     readonly agent?: AgentSettingsPort | null;
     readonly agentProvider?: () => AgentSettingsPort | null;
+    readonly hiddenOwnedSettingIds?: readonly string[];
     readonly hiddenAgentSettingIds?: readonly string[];
     readonly agentSettingLabelOverrides?: Readonly<Record<string, string>>;
 }
@@ -37,9 +44,15 @@ export declare class OwnedSettingsManager {
     constructor(options: OwnedSettingsManagerOptions);
     get file(): string;
     get resolution(): OwnedUiSettingsResolution;
-    /** Reads and resolves the stored document. Never throws: every failure becomes a notice. */
+    /** Reads and resolves the product namespace. Never throws: every failure becomes a notice. */
     read(): OwnedUiSettingsResolution;
     load(): Promise<void>;
+    /**
+     * Adopts values another process stored in the shared document. Notifies only when a
+     * resolved value differs, so a peer's own write echo stays silent. Restart-bound values
+     * keep their session-start effect and surface as pending instead.
+     */
+    refresh(): boolean;
     sections(): readonly OwnedUiSettingsSection[];
     /**
      * The value in effect for a declared setting, typed by its declaration. A restart-bound

package/dist/ui/settings/manager.js

@@ -1,10 +1,11 @@
-import { mkdirSync, readFileSync, renameSync, rmSync, writeFileSync } from "node:fs";
+import { readFileSync } from "node:fs";
 import path from "node:path";
 import { assertAgentSettingDescriptor } from "../../contracts/agent-engine/index.js";
 import { OWNED_SETTING_DECLARATIONS, OWNED_UI_SETTINGS_VERSION, OWNED_UI_SETTING_DECLARATIONS, } from "./declarations.js";
-import { OWNED_UI_SETTINGS_MIGRATIONS } from "./migrations.js";
-import { documentFrom, parseOwnedUiSettingsDocument, resolveOwnedUiSettings, } from "./resolution.js";
+import { OWNED_UI_SETTINGS_MIGRATIONS, normalizeOwnedUiSettingsValues, } from "./migrations.js";
+import { parseOwnedUiSettingsDocument, resolveOwnedUiSettings, } from "./resolution.js";
 import { buildOwnedUiSettingsSections, findOwnedUiSettingsEntry, } from "./sections.js";
+import { readProfileSettingsNamespace, repairProfileSettingsDocument, updateProfileSettingsNamespace, } from "./profile-document.js";
 const PROFILE_ID_PATTERN = /^[a-z][a-z0-9-]{0,63}$/;
 const MAX_DOCUMENT_BYTES = 256 * 1024;
 /**
@@ -15,11 +16,14 @@ const MAX_DOCUMENT_BYTES = 256 * 1024;
  */
 export class OwnedSettingsManager {
     #file;
+    #legacyFile;
+    #namespace;
     #declarations;
     #migrations;
     #agent;
     #agentProvider;
     #listeners = new Set();
+    #hiddenOwnedSettingIds;
     #hiddenAgentSettingIds;
     #agentSettingLabelOverrides;
     #resolution;
@@ -30,11 +34,19 @@ export class OwnedSettingsManager {
         if (!PROFILE_ID_PATTERN.test(options.profileId)) {
             throw new Error(`owned UI settings profile id is not a bounded slug: ${options.profileId}`);
         }
-        this.#file = path.join(path.resolve(options.configDir), "settings", `${options.profileId}.json`);
+        const profileDir = options.profileDir ?? options.configDir;
+        if (profileDir === undefined)
+            throw new Error("owned UI settings require a profile directory");
+        this.#file = path.join(path.resolve(profileDir), "settings.json");
+        this.#legacyFile = options.legacyConfigDir === undefined
+            ? null
+            : path.join(path.resolve(options.legacyConfigDir), "settings", `${options.profileId}.json`);
+        this.#namespace = options.namespace ?? options.profileId;
         this.#declarations = options.declarations ?? OWNED_UI_SETTING_DECLARATIONS;
         this.#migrations = options.migrations ?? OWNED_UI_SETTINGS_MIGRATIONS;
         this.#agent = options.agent ?? null;
         this.#agentProvider = options.agentProvider ?? null;
+        this.#hiddenOwnedSettingIds = new Set(options.hiddenOwnedSettingIds ?? []);
         this.#hiddenAgentSettingIds = new Set(options.hiddenAgentSettingIds ?? []);
         this.#agentSettingLabelOverrides = { ...(options.agentSettingLabelOverrides ?? {}) };
         this.#resolution = this.read();
@@ -49,24 +61,59 @@ export class OwnedSettingsManager {
     get resolution() {
         return this.#resolution;
     }
-    /** Reads and resolves the stored document. Never throws: every failure becomes a notice. */
+    /** Reads and resolves the product namespace. Never throws: every failure becomes a notice. */
     read() {
+        try {
+            repairProfileSettingsDocument(this.#file);
+        }
+        catch {
+            // Compatibility: recovery is opportunistic; unreadable-document handling stays authoritative.
+        }
+        const shared = readProfileSettingsNamespace(this.#file, this.#namespace);
+        if (shared.status === "available") {
+            if (Buffer.byteLength(JSON.stringify(shared.value), "utf8") > MAX_DOCUMENT_BYTES) {
+                return this.#resolveNamespace(null, `${this.#file} contains a ${this.#namespace} namespace exceeding the ${MAX_DOCUMENT_BYTES}-byte settings limit`);
+            }
+            return this.#resolveCompatibleNamespace(shared.value);
+        }
+        if (shared.status === "invalid")
+            return this.#resolveNamespace(null, shared.detail);
+        return this.#readLegacy();
+    }
+    #resolveCompatibleNamespace(values) {
+        const compatibility = normalizeOwnedUiSettingsValues(values);
+        return compatibility.values === null
+            ? this.#resolveNamespace(null, compatibility.failure ?? "product settings compatibility failed")
+            : this.#resolveNamespace(compatibility.values);
+    }
+    #resolveNamespace(values, unreadableDetail) {
+        return resolveOwnedUiSettings({
+            declarations: this.#declarations,
+            migrations: [],
+            document: values === null ? null : { version: OWNED_UI_SETTINGS_VERSION, values },
+            ...(unreadableDetail === undefined ? {} : { unreadableDetail }),
+            currentVersion: OWNED_UI_SETTINGS_VERSION,
+        });
+    }
+    #readLegacy() {
+        if (this.#legacyFile === null)
+            return this.#resolveNamespace(null);
         let raw = null;
         let unreadable = null;
         try {
-            raw = readFileSync(this.#file, "utf8");
+            raw = readFileSync(this.#legacyFile, "utf8");
         }
         catch (error) {
             if (!isMissing(error))
-                unreadable = `${this.#file} could not be read: ${describe(error)}`;
+                unreadable = `${this.#legacyFile} could not be read: ${describe(error)}`;
         }
         if (raw !== null && Buffer.byteLength(raw, "utf8") > MAX_DOCUMENT_BYTES) {
-            unreadable = `${this.#file} exceeds the ${MAX_DOCUMENT_BYTES}-byte settings limit and was ignored`;
+            unreadable = `${this.#legacyFile} exceeds the ${MAX_DOCUMENT_BYTES}-byte settings limit and was ignored`;
             raw = null;
         }
         const document = raw === null ? null : parseOwnedUiSettingsDocument(raw);
         if (raw !== null && document === null && unreadable === null) {
-            unreadable = `${this.#file} is not a valid settings document and was ignored`;
+            unreadable = `${this.#legacyFile} is not a valid settings document and was ignored`;
         }
         return resolveOwnedUiSettings({
             declarations: this.#declarations,
@@ -82,8 +129,36 @@ export class OwnedSettingsManager {
         this.#agentSnapshot = agent === null ? null : await snapshotOf(agent, this.#hiddenAgentSettingIds);
         this.#notify();
     }
+    /**
+     * Adopts values another process stored in the shared document. Notifies only when a
+     * resolved value differs, so a peer's own write echo stays silent. Restart-bound values
+     * keep their session-start effect and surface as pending instead.
+     */
+    refresh() {
+        const next = this.read();
+        if (resolvedValuesKey(next) === resolvedValuesKey(this.#resolution))
+            return false;
+        this.#resolution = next;
+        for (const setting of next.settings) {
+            const id = setting.declaration.id;
+            if (!this.#restartEffective.has(id))
+                continue;
+            if (setting.value === this.#restartEffective.get(id))
+                this.#pending.delete(id);
+            else
+                this.#pending.set(id, setting.value);
+        }
+        this.#notify();
+        return true;
+    }
     sections() {
-        return buildOwnedUiSettingsSections({ resolution: this.#resolution, agent: this.#agentSnapshot }).map(section => ({
+        const resolution = this.#hiddenOwnedSettingIds.size === 0
+            ? this.#resolution
+            : {
+                ...this.#resolution,
+                settings: this.#resolution.settings.filter(setting => !this.#hiddenOwnedSettingIds.has(setting.declaration.id)),
+            };
+        return buildOwnedUiSettingsSections({ resolution, agent: this.#agentSnapshot }).map(section => ({
             ...section,
             entries: section.entries.map(entry => {
                 if (entry.backend === "a1" && this.#restartEffective.has(entry.id)) {
@@ -113,9 +188,13 @@ export class OwnedSettingsManager {
         return () => this.#listeners.delete(listener);
     }
     async changeStructured(backend, id, value) {
-        if (backend !== "agent")
-            return failed("only an agent setting holds a structured value");
-        return await this.#changeAgentValue(id, value);
+        if (backend === "agent")
+            return await this.#changeAgentValue(id, value);
+        // Invariant: a flagged A1 setting stores its enabled parts as one value, in declaration order.
+        const flags = findOwnedUiSettingsEntry(this.sections(), id, "a1")?.flags ?? [];
+        if (flags.length === 0)
+            return failed(`${id} holds no structured value`);
+        return await this.change("a1", id, flags.filter(flag => value[flag.key] === true).map(flag => flag.key).join(","));
     }
     async change(backend, id, value) {
         const entry = findOwnedUiSettingsEntry(this.sections(), id, backend);
@@ -126,7 +205,7 @@ export class OwnedSettingsManager {
         return backend === "a1" ? this.#changeOwned(id, value) : await this.#changeAgentValue(id, value);
     }
     #changeOwned(id, value) {
-        const outcome = this.#write(this.#resolution, id, value);
+        const outcome = this.#write(id, value);
         if (!outcome.stored)
             return failed(outcome.failure ?? `${id} could not be stored`);
         const previous = this.#resolution;
@@ -141,35 +220,34 @@ export class OwnedSettingsManager {
         this.#notify();
         return changed("applied", "live", value, value);
     }
-    // Invariant: the resolved form is written with `id` set to `value` and undeclared keys preserved.
-    // Concurrency: a temporary sibling is renamed over the target, so an interrupted write leaves
-    // either the complete previous document or the complete new one.
-    #write(resolution, id, value) {
+    // Invariant: only non-default declared values and unknown product properties are stored.
+    // Concurrency: the namespace updater rereads current JSON while holding Pi's compatible lock.
+    #write(id, value) {
         const declaration = this.#declarations.find(candidate => candidate.id === id);
         if (!declaration)
             return { stored: false, failure: `unknown owned UI setting: ${id}` };
         if (!declaration.allowedValues.includes(value)) {
             return { stored: false, failure: `value ${JSON.stringify(value)} is not allowed for ${id}` };
         }
-        const current = documentFrom(resolution);
-        const next = {
-            version: OWNED_UI_SETTINGS_VERSION,
-            values: { ...current.values, [id]: value },
-        };
-        const temporary = `${this.#file}.${process.pid}.tmp`;
         try {
-            mkdirSync(path.dirname(this.#file), { recursive: true, mode: 0o700 });
-            writeFileSync(temporary, `${JSON.stringify(next, null, 2)}\n`, { encoding: "utf8", mode: 0o600 });
-            renameSync(temporary, this.#file);
+            updateProfileSettingsNamespace(this.#file, this.#namespace, current => {
+                let latest = this.#readLegacy();
+                if (current !== null) {
+                    const compatibility = normalizeOwnedUiSettingsValues(current);
+                    if (compatibility.values === null)
+                        throw new Error(compatibility.failure ?? "product settings compatibility failed");
+                    latest = this.#resolveNamespace(compatibility.values);
+                }
+                const next = compactValues(latest);
+                if (value === declaration.defaultValue)
+                    delete next[id];
+                else
+                    next[id] = value;
+                return Object.keys(next).length === 0 ? null : next;
+            });
             return { stored: true, failure: null };
         }
         catch (error) {
-            try {
-                rmSync(temporary, { force: true });
-            }
-            catch {
-                // Security: a leftover temporary file is inert: read() only ever opens the target path.
-            }
             return { stored: false, failure: `${this.#file} could not be written: ${describe(error)}` };
         }
     }
@@ -218,6 +296,9 @@ async function snapshotOf(agent, hidden) {
         return { descriptors: [], writeAdvertised: false, failure: describe(error) };
     }
 }
+function resolvedValuesKey(resolution) {
+    return JSON.stringify(resolution.settings.map(setting => [setting.declaration.id, setting.value]));
+}
 function failed(failure) {
     return {
         status: "failed",
@@ -254,6 +335,14 @@ function fromAgentOutcome(result) {
         failure: result.failure,
     };
 }
+function compactValues(resolution) {
+    const values = { ...resolution.preserved };
+    for (const setting of resolution.settings) {
+        if (setting.value !== setting.declaration.defaultValue)
+            values[setting.declaration.id] = setting.value;
+    }
+    return values;
+}
 function isMissing(error) {
     return typeof error === "object" && error !== null && error.code === "ENOENT";
 }

package/dist/ui/settings/migrations.d.ts

@@ -9,5 +9,11 @@ export interface OwnedUiSettingsMigration {
  * is the first stored shape.
  */
 export declare const OWNED_UI_SETTINGS_MIGRATIONS: readonly OwnedUiSettingsMigration[];
+export interface OwnedUiSettingsCompatibilityResult {
+    readonly values: Readonly<Record<string, unknown>> | null;
+    readonly failure: string | null;
+}
+/** Shape-selected compatibility for the metadata-free product object. */
+export declare function normalizeOwnedUiSettingsValues(source: Readonly<Record<string, unknown>>): OwnedUiSettingsCompatibilityResult;
 export declare function assertOwnedUiSettingsMigrations(migrations: readonly OwnedUiSettingsMigration[], currentVersion?: number): void;
 export declare function migrationsFrom(migrations: readonly OwnedUiSettingsMigration[], storedVersion: number): readonly OwnedUiSettingsMigration[];