@timurproko/a1 0.2.7-dev.1228 → 0.2.7-dev.1231

package/README.md

@@ -47,6 +47,8 @@ Exact preview:
 npm x -y -- @timurproko/a1-install --develop 0.1.8-dev.107
 ```
 
+The installer needs Node.js 22.19 or later. When npm's global folder is not writable, as with the nodejs.org installer on macOS, it installs under `~/.local` and adds `~/.local/bin` to your shell's PATH; open a new terminal to use `a1`.
+
 <p align="center"><picture><source media="(prefers-color-scheme: dark)" srcset="docs/assets/readme/separator-dark.svg"><img src="docs/assets/readme/separator.svg" alt="" width="280"></picture></p>
 
 ## Launch

package/bin/update-recovery.js

@@ -250,6 +250,11 @@ async function installedTargetIsCallable(value) {
   for (const path of value.launchers) {
     try {
       const metadata = await lstat(path);
+      // Platform: npm links Unix launchers; one is callable only when it resolves to the exact target entry.
+      if (metadata.isSymbolicLink() && process.platform !== "win32") {
+        if (await realpath(path) !== await realpath(resolve(value.packageRoot, "bin", "cli.js"))) return false;
+        continue;
+      }
       if (!metadata.isFile() || metadata.isSymbolicLink()) return false;
       if (process.platform !== "win32" && (metadata.mode & 0o111) === 0) return false;
       const normalized = (await readFile(path, "utf8")).replaceAll("\\", "/");

package/dist/composition/owned-settings.js

@@ -1,4 +1,4 @@
-import { unwatchFile, watchFile } from "node:fs";
+import { statSync } from "node:fs";
 import { resolveLaunchProfilePaths } from "../features/launch/profile-paths.js";
 import { resolveProductPaths } from "../foundation/lifecycle/paths.js";
 import { PRODUCT_IDENTITY } from "../product-identity.js";
@@ -19,18 +19,20 @@ export function createOwnedSettingsManager(options) {
         agentSettingLabelOverrides: { fullscreenCopyOnSelect: "Copy on select" },
     });
 }
-const SHARED_SETTINGS_POLL_MS = 250;
 /** Rereads the shared settings document whenever its stat changes; returns the stop. */
 export function watchSharedSettings(settings) {
-    const file = settings.file;
-    const listener = () => {
+    let last = "";
+    const poll = () => {
         try {
-            settings.refresh();
+            const s = statSync(settings.file);
+            if (last !== (last = `${s.ino}:${s.mtimeMs}`))
+                settings.refresh();
         }
         catch {
             // Compatibility: an unreadable peer write resolves on the next stat change.
         }
     };
-    watchFile(file, { interval: SHARED_SETTINGS_POLL_MS, persistent: false }, listener);
-    return () => unwatchFile(file, listener);
+    poll();
+    const timer = setInterval(poll, 250).unref();
+    return () => clearInterval(timer);
 }

package/dist/foundation/release/update-recovery.d.ts

@@ -78,7 +78,7 @@ export declare function prepareUpdateRecoveryCapsule(options: ProtectedPackageRe
 /** Execute global replacement behind a detached owner and coordinate terminal cancellation. */
 export declare function runProtectedPackageReplacement(options: ProtectedPackageReplacementOptions): Promise<ProtectedPackageReplacementResult>;
 export declare function removeUpdateRecoveryCapsule(dataDir: string, transactionId: string): Promise<void>;
-/** Classify a complete launcher set without following linked or mixed launcher files. */
+/** Classify a complete launcher set; only an npm Unix link to the exact target entry is followed. */
 export declare function inspectUpdateLauncherSet(capsule: UpdateRecoveryCapsule, platform?: NodeJS.Platform): Promise<"target" | "recovery" | "unavailable">;
 /** Remove terminal recovery capsules only after no canonical launcher references them. */
 export declare function cleanupUpdateRecoveryCapsules(dataDir: string): Promise<void>;

package/dist/foundation/release/update-recovery.js

@@ -258,12 +258,20 @@ export async function removeUpdateRecoveryCapsule(dataDir, transactionId) {
         throw new Error("invalid update recovery transaction identity");
     await rm(resolve(dataDir, "update-recovery", transactionId), { recursive: true, force: true });
 }
-/** Classify a complete launcher set without following linked or mixed launcher files. */
+/** Classify a complete launcher set; only an npm Unix link to the exact target entry is followed. */
 export async function inspectUpdateLauncherSet(capsule, platform = process.platform) {
     let disposition = null;
     const targetToken = `node_modules/${capsule.packageName}/bin/cli.js`;
     for (const path of capsule.launchers) {
         const metadata = await lstat(path).catch(() => null);
+        if (metadata?.isSymbolicLink() && platform !== "win32") {
+            const linked = await realpath(path).catch(() => null);
+            const entry = await realpath(resolve(capsule.packageRoot, "bin", "cli.js")).catch(() => null);
+            if (linked === null || linked !== entry || disposition === "recovery")
+                return "unavailable";
+            disposition = "target";
+            continue;
+        }
         if (!metadata?.isFile() || metadata.isSymbolicLink() || (platform !== "win32" && (metadata.mode & 0o111) === 0))
             return "unavailable";
         const source = (await readFile(path, "utf8")).replaceAll("\\", "/");

package/dist/foundation/release/update.js

@@ -469,6 +469,13 @@ async function launchersOwnPackage(globalRoot, fileSystem) {
     try {
         for (const launcher of updateLauncherPaths(globalRoot)) {
             const metadata = await (fileSystem.lstat ?? lstat)(launcher);
+            // Platform: npm links Unix launchers; one owns the package only when it resolves to the exact entry.
+            if (metadata.isSymbolicLink() && process.platform !== "win32") {
+                const entry = resolve(globalRoot, ...PRODUCT_PACKAGE.split("/"), "bin", "cli.js");
+                if (!samePath(await fileSystem.realpath(launcher), await fileSystem.realpath(entry)))
+                    return false;
+                continue;
+            }
             if (!metadata.isFile() || metadata.isSymbolicLink() || (process.platform !== "win32" && (metadata.mode & 0o111) === 0))
                 return false;
             if (!(await fileSystem.readFile(launcher)).replaceAll("\\", "/").includes(token))

package/dist/native/darwin-arm64/manifest.json

@@ -7,7 +7,7 @@
   "platform": "darwin",
   "architecture": "arm64",
   "capability": "supported",
-  "builtAt": "2026-10-30T07:58:45.715Z",
+  "builtAt": "2026-10-31T18:04:55.424Z",
   "artifact": {
     "filename": "process-guardian.node",
     "sha256": "a87eaaffcd986b624c8b044b756446cc1bdaf4334a1775b97820542fe34f9fb7",

package/dist/native/darwin-arm64/terminal-host.manifest.json

@@ -9,7 +9,7 @@
   "architecture": "arm64",
   "target": "aarch64-apple-darwin",
   "capability": "supported",
-  "builtAt": "2026-10-30T08:01:30.327Z",
+  "builtAt": "2026-10-31T18:08:37.997Z",
   "artifact": {
     "filename": "terminal-host.node",
     "sha256": "4e35835f3af4c0d9ae9582886f3a1f66d8a8bd306014d24af29e979ca504aed6",

package/dist/native/darwin-x64/manifest.json

@@ -7,7 +7,7 @@
   "platform": "darwin",
   "architecture": "x64",
   "capability": "supported",
-  "builtAt": "2026-10-30T07:58:54.109Z",
+  "builtAt": "2026-10-31T18:05:02.327Z",
   "artifact": {
     "filename": "process-guardian.node",
     "sha256": "783a65f0de287a1c02cd5429dbe97bc8633f4cc8a7b92e3e961180b9bdcff814",

package/dist/native/darwin-x64/terminal-host.manifest.json

@@ -9,7 +9,7 @@
   "architecture": "x64",
   "target": "x86_64-apple-darwin",
   "capability": "supported",
-  "builtAt": "2026-10-30T08:03:39.902Z",
+  "builtAt": "2026-10-31T18:11:47.607Z",
   "artifact": {
     "filename": "terminal-host.node",
     "sha256": "7161d3bde5cf9d1caf2978fe623b6d26dbdc257093a48b2870d510804563a1b3",

package/dist/native/linux-x64/manifest.json

@@ -7,7 +7,7 @@
   "platform": "linux",
   "architecture": "x64",
   "capability": "supported",
-  "builtAt": "2026-10-30T07:58:30.937Z",
+  "builtAt": "2026-10-31T18:04:50.100Z",
   "artifact": {
     "filename": "process-guardian.node",
     "sha256": "118e5954e3864672bd8482ab7edf419cb27dcdf2533720316979b7f5cc5a53a5",

package/dist/native/linux-x64/terminal-host.manifest.json

@@ -9,7 +9,7 @@
   "architecture": "x64",
   "target": "x86_64-unknown-linux-gnu",
   "capability": "supported",
-  "builtAt": "2026-10-30T08:01:43.730Z",
+  "builtAt": "2026-10-31T18:08:05.383Z",
   "artifact": {
     "filename": "terminal-host.node",
     "sha256": "41212856c811ddef6e918e96b49dc957b2d49946d7ef5494962db8d70937d760",

package/dist/native/win32-x64/manifest.json

@@ -7,10 +7,10 @@
   "platform": "win32",
   "architecture": "x64",
   "capability": "supported",
-  "builtAt": "2026-10-30T07:59:01.471Z",
+  "builtAt": "2026-10-31T18:05:42.004Z",
   "artifact": {
     "filename": "process-guardian.node",
-    "sha256": "875865ad5b3bd80793a394573029d0388f54becf6a8ecb225b9e67845684b693",
+    "sha256": "e67e64206f795842ae72fd9ef77437165a0a7a8892c0256b51658f19aee4375e",
     "size": 402432
   },
   "provenance": {

package/dist/native/win32-x64/terminal-host.manifest.json

@@ -9,10 +9,10 @@
   "architecture": "x64",
   "target": "x86_64-pc-windows-msvc",
   "capability": "supported",
-  "builtAt": "2026-10-30T08:02:29.690Z",
+  "builtAt": "2026-10-31T18:08:25.857Z",
   "artifact": {
     "filename": "terminal-host.node",
-    "sha256": "c25f492b5e735f453e0207bdfd6f43fd36ade4ba7cf86d8e69c2184cf751a873",
+    "sha256": "e22f344176b06f44427a2855d21b271a0d2a780aa89003cd90948d9bbcb6b9a3",
     "size": 6397440
   },
   "entry": {