@timurproko/a1 0.2.7-dev.1230 → 0.2.7-dev.1231

package/README.md

@@ -47,6 +47,8 @@ Exact preview:
 npm x -y -- @timurproko/a1-install --develop 0.1.8-dev.107
 ```
 
+The installer needs Node.js 22.19 or later. When npm's global folder is not writable, as with the nodejs.org installer on macOS, it installs under `~/.local` and adds `~/.local/bin` to your shell's PATH; open a new terminal to use `a1`.
+
 <p align="center"><picture><source media="(prefers-color-scheme: dark)" srcset="docs/assets/readme/separator-dark.svg"><img src="docs/assets/readme/separator.svg" alt="" width="280"></picture></p>
 
 ## Launch

package/bin/update-recovery.js

@@ -250,6 +250,11 @@ async function installedTargetIsCallable(value) {
   for (const path of value.launchers) {
     try {
       const metadata = await lstat(path);
+      // Platform: npm links Unix launchers; one is callable only when it resolves to the exact target entry.
+      if (metadata.isSymbolicLink() && process.platform !== "win32") {
+        if (await realpath(path) !== await realpath(resolve(value.packageRoot, "bin", "cli.js"))) return false;
+        continue;
+      }
       if (!metadata.isFile() || metadata.isSymbolicLink()) return false;
       if (process.platform !== "win32" && (metadata.mode & 0o111) === 0) return false;
       const normalized = (await readFile(path, "utf8")).replaceAll("\\", "/");

package/dist/foundation/release/update-recovery.d.ts

@@ -78,7 +78,7 @@ export declare function prepareUpdateRecoveryCapsule(options: ProtectedPackageRe
 /** Execute global replacement behind a detached owner and coordinate terminal cancellation. */
 export declare function runProtectedPackageReplacement(options: ProtectedPackageReplacementOptions): Promise<ProtectedPackageReplacementResult>;
 export declare function removeUpdateRecoveryCapsule(dataDir: string, transactionId: string): Promise<void>;
-/** Classify a complete launcher set without following linked or mixed launcher files. */
+/** Classify a complete launcher set; only an npm Unix link to the exact target entry is followed. */
 export declare function inspectUpdateLauncherSet(capsule: UpdateRecoveryCapsule, platform?: NodeJS.Platform): Promise<"target" | "recovery" | "unavailable">;
 /** Remove terminal recovery capsules only after no canonical launcher references them. */
 export declare function cleanupUpdateRecoveryCapsules(dataDir: string): Promise<void>;

package/dist/foundation/release/update-recovery.js

@@ -258,12 +258,20 @@ export async function removeUpdateRecoveryCapsule(dataDir, transactionId) {
         throw new Error("invalid update recovery transaction identity");
     await rm(resolve(dataDir, "update-recovery", transactionId), { recursive: true, force: true });
 }
-/** Classify a complete launcher set without following linked or mixed launcher files. */
+/** Classify a complete launcher set; only an npm Unix link to the exact target entry is followed. */
 export async function inspectUpdateLauncherSet(capsule, platform = process.platform) {
     let disposition = null;
     const targetToken = `node_modules/${capsule.packageName}/bin/cli.js`;
     for (const path of capsule.launchers) {
         const metadata = await lstat(path).catch(() => null);
+        if (metadata?.isSymbolicLink() && platform !== "win32") {
+            const linked = await realpath(path).catch(() => null);
+            const entry = await realpath(resolve(capsule.packageRoot, "bin", "cli.js")).catch(() => null);
+            if (linked === null || linked !== entry || disposition === "recovery")
+                return "unavailable";
+            disposition = "target";
+            continue;
+        }
         if (!metadata?.isFile() || metadata.isSymbolicLink() || (platform !== "win32" && (metadata.mode & 0o111) === 0))
             return "unavailable";
         const source = (await readFile(path, "utf8")).replaceAll("\\", "/");

package/dist/foundation/release/update.js

@@ -469,6 +469,13 @@ async function launchersOwnPackage(globalRoot, fileSystem) {
     try {
         for (const launcher of updateLauncherPaths(globalRoot)) {
             const metadata = await (fileSystem.lstat ?? lstat)(launcher);
+            // Platform: npm links Unix launchers; one owns the package only when it resolves to the exact entry.
+            if (metadata.isSymbolicLink() && process.platform !== "win32") {
+                const entry = resolve(globalRoot, ...PRODUCT_PACKAGE.split("/"), "bin", "cli.js");
+                if (!samePath(await fileSystem.realpath(launcher), await fileSystem.realpath(entry)))
+                    return false;
+                continue;
+            }
             if (!metadata.isFile() || metadata.isSymbolicLink() || (process.platform !== "win32" && (metadata.mode & 0o111) === 0))
                 return false;
             if (!(await fileSystem.readFile(launcher)).replaceAll("\\", "/").includes(token))

package/dist/native/darwin-arm64/manifest.json

@@ -7,7 +7,7 @@
   "platform": "darwin",
   "architecture": "arm64",
   "capability": "supported",
-  "builtAt": "2026-10-31T17:04:19.753Z",
+  "builtAt": "2026-10-31T18:04:55.424Z",
   "artifact": {
     "filename": "process-guardian.node",
     "sha256": "a87eaaffcd986b624c8b044b756446cc1bdaf4334a1775b97820542fe34f9fb7",

package/dist/native/darwin-arm64/terminal-host.manifest.json

@@ -9,7 +9,7 @@
   "architecture": "arm64",
   "target": "aarch64-apple-darwin",
   "capability": "supported",
-  "builtAt": "2026-10-31T17:06:07.880Z",
+  "builtAt": "2026-10-31T18:08:37.997Z",
   "artifact": {
     "filename": "terminal-host.node",
     "sha256": "4e35835f3af4c0d9ae9582886f3a1f66d8a8bd306014d24af29e979ca504aed6",

package/dist/native/darwin-x64/manifest.json

@@ -7,7 +7,7 @@
   "platform": "darwin",
   "architecture": "x64",
   "capability": "supported",
-  "builtAt": "2026-10-31T17:04:33.467Z",
+  "builtAt": "2026-10-31T18:05:02.327Z",
   "artifact": {
     "filename": "process-guardian.node",
     "sha256": "783a65f0de287a1c02cd5429dbe97bc8633f4cc8a7b92e3e961180b9bdcff814",

package/dist/native/darwin-x64/terminal-host.manifest.json

@@ -9,7 +9,7 @@
   "architecture": "x64",
   "target": "x86_64-apple-darwin",
   "capability": "supported",
-  "builtAt": "2026-10-31T17:07:58.103Z",
+  "builtAt": "2026-10-31T18:11:47.607Z",
   "artifact": {
     "filename": "terminal-host.node",
     "sha256": "7161d3bde5cf9d1caf2978fe623b6d26dbdc257093a48b2870d510804563a1b3",

package/dist/native/linux-x64/manifest.json

@@ -7,7 +7,7 @@
   "platform": "linux",
   "architecture": "x64",
   "capability": "supported",
-  "builtAt": "2026-10-31T17:03:56.410Z",
+  "builtAt": "2026-10-31T18:04:50.100Z",
   "artifact": {
     "filename": "process-guardian.node",
     "sha256": "118e5954e3864672bd8482ab7edf419cb27dcdf2533720316979b7f5cc5a53a5",

package/dist/native/linux-x64/terminal-host.manifest.json

@@ -9,7 +9,7 @@
   "architecture": "x64",
   "target": "x86_64-unknown-linux-gnu",
   "capability": "supported",
-  "builtAt": "2026-10-31T17:06:59.851Z",
+  "builtAt": "2026-10-31T18:08:05.383Z",
   "artifact": {
     "filename": "terminal-host.node",
     "sha256": "41212856c811ddef6e918e96b49dc957b2d49946d7ef5494962db8d70937d760",

package/dist/native/win32-x64/manifest.json

@@ -7,10 +7,10 @@
   "platform": "win32",
   "architecture": "x64",
   "capability": "supported",
-  "builtAt": "2026-10-31T17:04:36.928Z",
+  "builtAt": "2026-10-31T18:05:42.004Z",
   "artifact": {
     "filename": "process-guardian.node",
-    "sha256": "a032ca679b335c66cef97c80b084e457e9bf3adb0f4fc93f338ace98ad955b23",
+    "sha256": "e67e64206f795842ae72fd9ef77437165a0a7a8892c0256b51658f19aee4375e",
     "size": 402432
   },
   "provenance": {

package/dist/native/win32-x64/terminal-host.manifest.json

@@ -9,10 +9,10 @@
   "architecture": "x64",
   "target": "x86_64-pc-windows-msvc",
   "capability": "supported",
-  "builtAt": "2026-10-31T17:07:00.170Z",
+  "builtAt": "2026-10-31T18:08:25.857Z",
   "artifact": {
     "filename": "terminal-host.node",
-    "sha256": "f352de0bb4dc23588d870e500e9e593f1928b1d0291a7b60f92425706b3c7015",
+    "sha256": "e22f344176b06f44427a2855d21b271a0d2a780aa89003cd90948d9bbcb6b9a3",
     "size": 6397440
   },
   "entry": {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@timurproko/a1",
-  "version": "0.2.7-dev.1230",
+  "version": "0.2.7-dev.1231",
   "description": "Standalone terminal workspace for supervised native and managed agents",
   "type": "module",
   "privateLaunchContract": "neutral-launch-v1",
@@ -118,7 +118,7 @@
     "@mariozechner/clipboard": "^0.3.9"
   },
   "publication": {
-    "source": "964ff530e4687e638ccb97af526da00ec2b8265a",
-    "pullRequest": 854
+    "source": "a2e98c45364dec69b07a1ae71d3ea20a85feb6f9",
+    "pullRequest": 856
   }
 }