@timurproko/a1 0.2.7-dev.1232 → 0.2.7-dev.1234

package/dist/foundation/resident-tabs/continuity.js

@@ -0,0 +1,55 @@
+import { readdir, readFile } from "node:fs/promises";
+import { resolve } from "node:path";
+import { RUNTIME_CONTROL_API } from "./runtime-control.js";
+import { runBoundedHostCommand } from "./bounded-host-command.js";
+import { resolveTerminalHostEntryPath, resolveTerminalHostPath } from "./ensure-terminal-host.js";
+import { verifyTerminalHostArtifact } from "./terminal-host-artifact.js";
+/** Activation authority requires a stable authenticated source-contract set, never an idle Agent. */
+export async function assertResidentContinuity(options) {
+    const { inspect = inspectResidentContinuity, ...context } = options;
+    const first = await inspect(context);
+    const second = await inspect(context);
+    if (first !== second && second !== await inspect(context)) {
+        throw new Error("Resident workspace changed during update readiness; the prior client remains selected.");
+    }
+}
+/** Native inspection/import is read-only toward execution and never starts or stops a source. */
+export async function inspectResidentContinuity(options) {
+    let hasRecords = false;
+    for (const directory of ["tabs", "resident-workspaces"]) {
+        try {
+            hasRecords ||= (await readdir(resolve(options.dataDir, directory))).length > 0;
+        }
+        catch (error) {
+            if (!(error instanceof Error && "code" in error && error.code === "ENOENT")) {
+                throw new Error("Resident workspace discovery is unavailable; update activation was refused.");
+            }
+        }
+    }
+    if (!hasRecords)
+        return "empty";
+    const manifest = JSON.parse(await readFile(resolve(options.releaseRoot, "package.json"), "utf8"));
+    const contracts = manifest.residentControlContracts;
+    if (!Array.isArray(contracts)
+        || ![RUNTIME_CONTROL_API, "resident-workspace-v1"].every(contract => contracts.includes(contract))) {
+        throw new Error("Candidate does not preserve the stable resident control and workspace contracts; activation was refused.");
+    }
+    const addon = resolveTerminalHostPath(options.releaseRoot, {}, process.platform, process.arch);
+    await verifyTerminalHostArtifact(addon, process.platform, process.arch);
+    const result = await runBoundedHostCommand({ executable: process.execPath, entry: resolveTerminalHostEntryPath(options.releaseRoot) }, [
+        "workspace-check", "--profile", options.profileRoot,
+        "--data-dir", options.dataDir, "--runtime-dir", options.runtimeDir,
+    ], { label: "resident continuity check", maxStdoutBytes: 4096, timeoutMs: 8_000, environment: options.environment });
+    let report;
+    try {
+        report = JSON.parse(result.stdout.trim());
+    }
+    catch {
+        throw new Error("Resident control compatibility could not be verified; the prior client remains selected.");
+    }
+    if (result.code !== 0 || report.schema !== "resident-workspace-check-v1" || report.compatible !== true
+        || typeof report.fingerprint !== "string" || !/^[a-f0-9]{64}$/u.test(report.fingerprint)) {
+        throw new Error("Resident control compatibility could not be verified; the prior client remains selected.");
+    }
+    return report.fingerprint;
+}

package/dist/foundation/resident-tabs/index.d.ts

@@ -10,3 +10,6 @@ export { runTerminalHostMaintenance } from "./maintenance.js";
 export type { MaintenanceAction, MaintenanceHostState, MaintenanceOptions, MaintenanceReport } from "./maintenance.js";
 export { DOCTOR_MAX_BYTES, writeDoctorBundle } from "./doctor.js";
 export type { DoctorBundle, DoctorOptions } from "./doctor.js";
+export type { ContinuityOptions } from "./continuity.js";
+/** Load native continuity inspection only when a caller is preparing client activation. */
+export declare function assertResidentContinuity(options: import("./continuity.js").ContinuityOptions): Promise<void>;

package/dist/foundation/resident-tabs/index.js

@@ -4,3 +4,7 @@ export { selectResidentHost } from "./routing.js";
 export { readResidentReleaseHolds } from "./release-holds.js";
 export { runTerminalHostMaintenance } from "./maintenance.js";
 export { DOCTOR_MAX_BYTES, writeDoctorBundle } from "./doctor.js";
+/** Load native continuity inspection only when a caller is preparing client activation. */
+export async function assertResidentContinuity(options) {
+    await (await import("./continuity.js")).assertResidentContinuity(options);
+}

package/dist/foundation/resident-tabs/maintenance.d.ts

@@ -1,5 +1,5 @@
 import { type TerminalHostCommand } from "./ensure-terminal-host.js";
-export type MaintenanceAction = "list" | "stop" | "stop-all" | "host-status" | "host-stop";
+export type MaintenanceAction = "list" | "stop" | "stop-all" | "host-status" | "host-stop" | "runtime-control";
 export type MaintenanceHostState = "none" | "running" | "stopped" | "unresponsive" | "incompatible" | "refused" | "unverifiable" | "unavailable";
 /** The versioned `a1 tabs` report: `a1-tabs-maintenance-v1`, as printed by the terminal host. */
 export interface MaintenanceReport {

package/dist/foundation/resident-tabs/release-holds.js

@@ -44,15 +44,18 @@ export async function readResidentReleaseHolds(options) {
     }
 }
 async function hasResidentRecords(dataDir) {
-    let profiles;
-    try {
-        profiles = await readdir(resolve(dataDir, "tabs"));
-    }
-    catch (error) {
-        return !(error instanceof Error && "code" in error && error.code === "ENOENT");
+    for (const directory of ["tabs", "resident-workspaces"]) {
+        try {
+            // Invariant: native inspection, not a following stat, judges unknown or linked entries.
+            if ((await readdir(resolve(dataDir, directory))).length > 0)
+                return true;
+        }
+        catch (error) {
+            if (!(error instanceof Error && "code" in error && error.code === "ENOENT"))
+                return true;
+        }
     }
-    // Invariant: native inspection, not a following stat, judges unknown or linked namespace entries.
-    return profiles.length > 0;
+    return false;
 }
 function incomplete(reason) {
     return { complete: false, releaseRoots: [], uncertain: [reason] };

package/dist/foundation/resident-tabs/runtime-control.d.ts

@@ -0,0 +1,38 @@
+import { type MaintenanceOptions, type MaintenanceReport } from "./maintenance.js";
+/** Mandatory native control semantics; optional methods never establish source authority. */
+export declare const RUNTIME_CONTROL_API = "resident-control-v1";
+export declare const RUNTIME_CONTROL_CORE: readonly ["attach", "tab.list", "tab.view", "input", "resize", "detach", "controller-boundary"];
+export interface RuntimeControlIdentity {
+    readonly releaseId: string;
+    readonly scope: string;
+    readonly epoch: number;
+    readonly bootId: string;
+    readonly osSessionId: string;
+}
+export interface RuntimeControlDescription extends RuntimeControlIdentity {
+    readonly api: typeof RUNTIME_CONTROL_API;
+    readonly generation: 1;
+    readonly core: readonly string[];
+    readonly frameLimit: number;
+    readonly inputLimit: number;
+    readonly retryInput: false;
+}
+export type RuntimeControlVerdict = {
+    readonly status: "compatible";
+    readonly contract: RuntimeControlDescription;
+} | {
+    readonly status: "blocked";
+    readonly reason: "unavailable" | "invalid-contract" | "unsupported-api" | "source-mismatch" | "stale-epoch" | "missing-core";
+};
+/**
+ * Validates an authenticated source's descriptor against separately verified source custody.
+ * This is not an activation verdict: the caller must also reconcile every live tab and fence
+ * changes to that topology before committing a client selection.
+ */
+export declare function assessRuntimeControl(value: unknown, expected: RuntimeControlIdentity): RuntimeControlVerdict;
+export interface ReadRuntimeControlOptions extends Omit<MaintenanceOptions, "action" | "tabId"> {
+    readonly expected: RuntimeControlIdentity;
+    readonly maintain?: (options: MaintenanceOptions) => Promise<MaintenanceReport>;
+}
+/** A bounded read-only authenticated exchange; it never starts a host or substitutes a release. */
+export declare function readRuntimeControl(options: ReadRuntimeControlOptions): Promise<RuntimeControlVerdict>;

package/dist/foundation/resident-tabs/runtime-control.js

@@ -0,0 +1,73 @@
+import { runTerminalHostMaintenance } from "./maintenance.js";
+/** Mandatory native control semantics; optional methods never establish source authority. */
+export const RUNTIME_CONTROL_API = "resident-control-v1";
+export const RUNTIME_CONTROL_CORE = Object.freeze([
+    "attach", "tab.list", "tab.view", "input", "resize", "detach", "controller-boundary",
+]);
+/**
+ * Validates an authenticated source's descriptor against separately verified source custody.
+ * This is not an activation verdict: the caller must also reconcile every live tab and fence
+ * changes to that topology before committing a client selection.
+ */
+export function assessRuntimeControl(value, expected) {
+    if (!isRecord(value))
+        return blocked("invalid-contract");
+    if (value.api !== RUNTIME_CONTROL_API || value.generation !== 1)
+        return blocked("unsupported-api");
+    if (!identityValid(value) || !identityValid(expected)
+        || !boundedStrings(value.core) || typeof value.retryInput !== "boolean"
+        || !positiveInteger(value.frameLimit, 2 * 1024 * 1024)
+        || !positiveInteger(value.inputLimit, 1024 * 1024) || value.inputLimit > value.frameLimit) {
+        return blocked("invalid-contract");
+    }
+    if (value.releaseId !== expected.releaseId || value.scope !== expected.scope
+        || value.bootId !== expected.bootId || value.osSessionId !== expected.osSessionId)
+        return blocked("source-mismatch");
+    if (value.epoch !== expected.epoch)
+        return blocked("stale-epoch");
+    const core = value.core;
+    if (value.retryInput || RUNTIME_CONTROL_CORE.some(method => !core.includes(method)))
+        return blocked("missing-core");
+    // Security: retain only allowlisted metadata, never arbitrary optional source data.
+    return { status: "compatible", contract: Object.freeze({
+            api: RUNTIME_CONTROL_API, generation: 1, releaseId: value.releaseId, scope: value.scope,
+            epoch: value.epoch, bootId: value.bootId, osSessionId: value.osSessionId,
+            core: Object.freeze([...value.core]), frameLimit: value.frameLimit, inputLimit: value.inputLimit,
+            retryInput: false,
+        }) };
+}
+/** A bounded read-only authenticated exchange; it never starts a host or substitutes a release. */
+export async function readRuntimeControl(options) {
+    const { expected, maintain = runTerminalHostMaintenance, ...maintenance } = options;
+    try {
+        const report = await maintain({ ...maintenance, action: "runtime-control" });
+        if (report.schema !== "a1-tabs-maintenance-v1" || report.exitCode !== 0
+            || report.host !== "running" || report.command !== "runtime-control")
+            return blocked("unavailable");
+        return assessRuntimeControl(report.result, expected);
+    }
+    catch {
+        return blocked("unavailable");
+    }
+}
+function blocked(reason) {
+    return { status: "blocked", reason };
+}
+function isRecord(value) {
+    return value !== null && typeof value === "object" && !Array.isArray(value);
+}
+function positiveInteger(value, maximum = Number.MAX_SAFE_INTEGER) {
+    return typeof value === "number" && Number.isSafeInteger(value) && value > 0 && value <= maximum;
+}
+function boundedStrings(value) {
+    return Array.isArray(value) && value.length <= 64 && new Set(value).size === value.length
+        && value.every(entry => typeof entry === "string" && entry.length > 0 && entry.length <= 64);
+}
+function identityValid(value) {
+    const record = value;
+    return typeof record.releaseId === "string" && /^[a-f0-9]{64}$/u.test(record.releaseId)
+        && typeof record.scope === "string" && /^[a-f0-9]{20}$/u.test(record.scope)
+        && positiveInteger(record.epoch)
+        && [record.bootId, record.osSessionId].every(entry => typeof entry === "string" && entry.length > 0
+            && entry.length <= 256 && !/[\x00-\x1f\x7f]/u.test(entry));
+}

package/dist/foundation/startup/startup-descriptor.js

@@ -10,7 +10,7 @@ export const STARTUP_DESCRIPTOR = Object.freeze({
   ],
   "generatedArtifact": {
     "path": "dist/integrations/pi/startup-public.js",
-    "sha256": "e065933fe374d7953c5aac0ff1735fa47d119ab97551e955c2a65e8c2df667eb"
+    "sha256": "97a7715b6a24a7449ecb61d3581e27396ebde40d3d2d0b6f701415c82e74f6b2"
   },
   "dependencyLayerIdentity": {
     "source": "A1_RELEASE_LAYERS",
@@ -19,7 +19,7 @@ export const STARTUP_DESCRIPTOR = Object.freeze({
   "compileCacheNamespace": {
     "strategy": "node-abi-version-and-ordered-layer-sha256-v1"
   },
-  "identity": "5c1afab4657c251b840e042279290bd1fa03ce608bc81bc6e7eaf8d332486eef"
+  "identity": "c1f84ec1184782905d628eba21b4c0e62c643e0a37481d4bb42e47e768d5d48f"
 });
 
 export function loadDeclaredStartupGraph() {

package/dist/integrations/pi/components/resources/builtin-themes.d.ts

@@ -1,6 +1,6 @@
 /**
- * Attributed owned theme resources adapted from @earendil-works/pi-coding-agent 1.4.0 (MIT),
- * commit 4a080252f06caf63a525d7873c5d94d3c23887e0.
+ * Attributed owned theme resources adapted from @earendil-works/pi-coding-agent 1.5.0 (MIT),
+ * commit f9a26365568127461c47a07a37dcb42c140a3ac5.
  * Upstream dark.json SHA-256: e1f96982f8cb7d2a48eca7db03c9cb282cb1e14a243680cd855638ecd6a251b6
  * Upstream light.json SHA-256: 2dee6a4be7f765e7fd7728166b7ebf8c29e4ce313f8ec6b38ae50699e3abc2f3
  * Modifications: removed upstream schema/export metadata; runtime color data is unchanged.

package/dist/integrations/pi/components/resources/builtin-themes.js

@@ -1,6 +1,6 @@
 /**
- * Attributed owned theme resources adapted from @earendil-works/pi-coding-agent 1.4.0 (MIT),
- * commit 4a080252f06caf63a525d7873c5d94d3c23887e0.
+ * Attributed owned theme resources adapted from @earendil-works/pi-coding-agent 1.5.0 (MIT),
+ * commit f9a26365568127461c47a07a37dcb42c140a3ac5.
  * Upstream dark.json SHA-256: e1f96982f8cb7d2a48eca7db03c9cb282cb1e14a243680cd855638ecd6a251b6
  * Upstream light.json SHA-256: 2dee6a4be7f765e7fd7728166b7ebf8c29e4ce313f8ec6b38ae50699e3abc2f3
  * Modifications: removed upstream schema/export metadata; runtime color data is unchanged.

package/dist/integrations/pi/components/upstream/adjacent/core/keybindings.d.ts

@@ -1,5 +1,5 @@
 /**
- * Provenance: @earendil-works/pi-coding-agent 1.4.0 (MIT), commit 4a080252f06caf63a525d7873c5d94d3c23887e0,
+ * Provenance: @earendil-works/pi-coding-agent 1.5.0 (MIT), commit f9a26365568127461c47a07a37dcb42c140a3ac5,
  * packages/coding-agent/src/core/keybindings.ts.
  * Modifications: Mechanical source port with Node import prefixes, public package-root agent-directory
  * resolution, and an opt-in bare-A1 input profile including Ctrl+L level cycling, unbound model

package/dist/integrations/pi/components/upstream/adjacent/core/keybindings.js

@@ -1,5 +1,5 @@
 /**
- * Provenance: @earendil-works/pi-coding-agent 1.4.0 (MIT), commit 4a080252f06caf63a525d7873c5d94d3c23887e0,
+ * Provenance: @earendil-works/pi-coding-agent 1.5.0 (MIT), commit f9a26365568127461c47a07a37dcb42c140a3ac5,
  * packages/coding-agent/src/core/keybindings.ts.
  * Modifications: Mechanical source port with Node import prefixes, public package-root agent-directory
  * resolution, and an opt-in bare-A1 input profile including Ctrl+L level cycling, unbound model

package/dist/integrations/pi/components/upstream/assets/earendil-image.json

@@ -1,8 +1,8 @@
 {
     "sourcePackage": "@earendil-works/pi-coding-agent",
-    "sourceVersion": "1.4.0",
+    "sourceVersion": "1.5.0",
     "upstreamRepository": "https://github.com/earendil-works/pi.git",
-    "upstreamCommit": "4a080252f06caf63a525d7873c5d94d3c23887e0",
+    "upstreamCommit": "f9a26365568127461c47a07a37dcb42c140a3ac5",
     "sourcePath": "dist/modes/interactive/assets/clankolas.png",
     "sourceSha256": "169acd0dfe6fbb8d8742ed24a3fc654fd0b2e2d4223c733249c5493723f1b72d",
     "license": "MIT",

package/dist/integrations/pi/components/upstream/components/countdown-timer.d.ts

@@ -1,5 +1,5 @@
 /**
- * Provenance: @earendil-works/pi-coding-agent 1.4.0 (MIT), commit 4a080252f06caf63a525d7873c5d94d3c23887e0,
+ * Provenance: @earendil-works/pi-coding-agent 1.5.0 (MIT), commit f9a26365568127461c47a07a37dcb42c140a3ac5,
  * packages/coding-agent/src/modes/interactive/components/countdown-timer.ts.
  * Modifications: Mechanical source port with ECMAScript private fields; imports remain on the public
  * Pi TUI package root.

package/dist/integrations/pi/components/upstream/components/earendil-announcement.js

@@ -1,5 +1,5 @@
 /**
- * Provenance: @earendil-works/pi-coding-agent 1.4.0 (MIT), commit 4a080252f06caf63a525d7873c5d94d3c23887e0,
+ * Provenance: @earendil-works/pi-coding-agent 1.5.0 (MIT), commit f9a26365568127461c47a07a37dcb42c140a3ac5,
  * packages/coding-agent/src/modes/interactive/components/earendil-announcement.ts.
  * Modifications: Mechanical pinned source port with private imports remapped to public package-root
  * types/APIs and A1-owned theme boundaries. The unchanged image is loaded lazily from its attributed,

package/dist/integrations/pi/components/upstream/components/extension-editor.d.ts

@@ -1,5 +1,5 @@
 /**
- * Provenance: @earendil-works/pi-coding-agent 1.4.0 (MIT), commit 4a080252f06caf63a525d7873c5d94d3c23887e0,
+ * Provenance: @earendil-works/pi-coding-agent 1.5.0 (MIT), commit f9a26365568127461c47a07a37dcb42c140a3ac5,
  * packages/coding-agent/src/modes/interactive/components/extension-editor.ts.
  * Modifications: Mechanical port: remap pi-tui to the root public singleton, use owned
  * keybindings/theme and external-editor seams, preserve editor layout, hints, focus, submission,
@@ -7,9 +7,9 @@
  * compact padded modal frame.
  * Deviations: owned-modal-shortcut-hints.
  */
-import { Container, type TUI } from "@earendil-works/pi-tui";
+import { Container, type Focusable, type TUI } from "@earendil-works/pi-tui";
 import type { KeybindingsManager } from "../adjacent/core/keybindings.js";
-export declare class ExtensionEditorComponent extends Container {
+export declare class ExtensionEditorComponent extends Container implements Focusable {
     #private;
     get focused(): boolean;
     set focused(value: boolean);

package/dist/integrations/pi/components/upstream/components/extension-editor.js

@@ -1,5 +1,5 @@
 /**
- * Provenance: @earendil-works/pi-coding-agent 1.4.0 (MIT), commit 4a080252f06caf63a525d7873c5d94d3c23887e0,
+ * Provenance: @earendil-works/pi-coding-agent 1.5.0 (MIT), commit f9a26365568127461c47a07a37dcb42c140a3ac5,
  * packages/coding-agent/src/modes/interactive/components/extension-editor.ts.
  * Modifications: Mechanical port: remap pi-tui to the root public singleton, use owned
  * keybindings/theme and external-editor seams, preserve editor layout, hints, focus, submission,
@@ -18,6 +18,7 @@ export class ExtensionEditorComponent extends Container {
     #keybindings;
     #externalEditorCommand;
     #onCancel;
+    #externalEditorStatus = new Text("", 0, 0);
     #focused = false;
     get focused() {
         return this.#focused;
@@ -50,6 +51,7 @@ export class ExtensionEditorComponent extends Container {
             this.#editor.setText(prefill);
         this.#editor.onSubmit = onSubmit;
         this.addChild(this.#editor);
+        this.addChild(this.#externalEditorStatus);
         this.addChild(new Spacer(1));
         const hint = renderPiModalShortcutHints([
             { key: this.#keybindings.getKeys("tui.select.confirm").join("/"), action: "submit" },
@@ -78,6 +80,7 @@ export class ExtensionEditorComponent extends Container {
         this.#tui.stop();
         try {
             const result = await editInExternalEditor({ command: this.#externalEditorCommand, content });
+            this.#externalEditorStatus.setText(result.status === "failed" ? piTheme().fg("warning", result.message) : "");
             if (result.status === "complete")
                 this.#editor.setText(result.content);
         }

package/dist/integrations/pi/components/upstream/components/extension-input.js

@@ -1,5 +1,5 @@
 /**
- * Provenance: @earendil-works/pi-coding-agent 1.4.0 (MIT), commit 4a080252f06caf63a525d7873c5d94d3c23887e0,
+ * Provenance: @earendil-works/pi-coding-agent 1.5.0 (MIT), commit f9a26365568127461c47a07a37dcb42c140a3ac5,
  * packages/coding-agent/src/modes/interactive/components/extension-input.ts.
  * Modifications: Mechanical port: remap public imports, use ECMAScript private fields, and route the
  * bare-A1 instruction row and chrome through the shared semantic shortcut and compact padded

package/dist/integrations/pi/components/upstream/components/extension-selector.js

@@ -1,5 +1,5 @@
 /**
- * Provenance: @earendil-works/pi-coding-agent 1.4.0 (MIT), commit 4a080252f06caf63a525d7873c5d94d3c23887e0,
+ * Provenance: @earendil-works/pi-coding-agent 1.5.0 (MIT), commit f9a26365568127461c47a07a37dcb42c140a3ac5,
  * packages/coding-agent/src/modes/interactive/components/extension-selector.ts.
  * Modifications: Mechanical port: remap public imports, use ECMAScript private fields, and route the
  * bare-A1 instruction row and chrome through the shared semantic shortcut and compact padded

package/dist/integrations/pi/components/upstream/components/mermaid.js

@@ -1,5 +1,5 @@
 /**
- * Provenance: @earendil-works/pi-coding-agent 1.4.0 (MIT), commit 4a080252f06caf63a525d7873c5d94d3c23887e0,
+ * Provenance: @earendil-works/pi-coding-agent 1.5.0 (MIT), commit f9a26365568127461c47a07a37dcb42c140a3ac5,
  * packages/coding-agent/src/modes/interactive/components/mermaid.ts.
  * Modifications: Mechanical pinned source port with private imports remapped to public package-root
  * types/APIs and A1-owned theme boundaries; behavior remains acceptance-tested.

package/dist/integrations/pi/components/upstream/components/owned-editor.d.ts

@@ -1,5 +1,5 @@
 /**
- * Provenance: @earendil-works/pi-coding-agent 1.4.0 (MIT), commit 4a080252f06caf63a525d7873c5d94d3c23887e0,
+ * Provenance: @earendil-works/pi-coding-agent 1.5.0 (MIT), commit f9a26365568127461c47a07a37dcb42c140a3ac5,
  * packages/coding-agent/src/modes/interactive/components/custom-editor.ts.
  * Modifications: A1-owned class name and synchronized A1 keybinding contract replace the nominal
  * private upstream keybinding constructor dependency; bare A1 injects the shared Settings/agent input

package/dist/integrations/pi/components/upstream/components/owned-editor.js

@@ -1,5 +1,5 @@
 /**
- * Provenance: @earendil-works/pi-coding-agent 1.4.0 (MIT), commit 4a080252f06caf63a525d7873c5d94d3c23887e0,
+ * Provenance: @earendil-works/pi-coding-agent 1.5.0 (MIT), commit f9a26365568127461c47a07a37dcb42c140a3ac5,
  * packages/coding-agent/src/modes/interactive/components/custom-editor.ts.
  * Modifications: A1-owned class name and synchronized A1 keybinding contract replace the nominal
  * private upstream keybinding constructor dependency; bare A1 injects the shared Settings/agent input
@@ -108,6 +108,13 @@ export function createOwnedEditorClass(Base) {
                 this.onPromptSuggestionAccepted?.(accepted);
                 return;
             }
+            // Selection page keys move an open autocomplete menu before app actions run.
+            // This lets users bind Ctrl+V even though it pastes images by default.
+            if (this.isShowingAutocomplete()
+                && (this.keybindings.matches(data, "tui.select.pageUp") || this.keybindings.matches(data, "tui.select.pageDown"))) {
+                super.handleInput(data);
+                return;
+            }
             if (this.keybindings.matches(data, "app.clipboard.pasteImage")) {
                 this.onPasteImage?.();
                 return;

package/dist/integrations/pi/components/upstream/components/pi-logo.js

@@ -1,5 +1,5 @@
 /**
- * Provenance: @earendil-works/pi-coding-agent 1.4.0 (MIT), commit 4a080252f06caf63a525d7873c5d94d3c23887e0,
+ * Provenance: @earendil-works/pi-coding-agent 1.5.0 (MIT), commit f9a26365568127461c47a07a37dcb42c140a3ac5,
  * packages/coding-agent/src/modes/interactive/components/pi-logo.ts.
  * Modifications: Remapped the private theme import to A1's public-backed adapter and composed the
  * fixed-color logo into the owned startup header.

package/dist/integrations/pi/components/upstream/components/scoped-models-selector.d.ts

@@ -1,5 +1,5 @@
 /**
- * Provenance: @earendil-works/pi-coding-agent 1.4.0 (MIT), commit 4a080252f06caf63a525d7873c5d94d3c23887e0,
+ * Provenance: @earendil-works/pi-coding-agent 1.5.0 (MIT), commit f9a26365568127461c47a07a37dcb42c140a3ac5,
  * packages/coding-agent/src/modes/interactive/components/scoped-models-selector.ts.
  * Modifications: Source-synchronized scoped-model selector port: preserve session-only toggles,
  * search, bulk/provider/reorder actions, dirty state, Ctrl+S persistence, refresh status,
@@ -32,6 +32,7 @@ export interface ModelsCallbacks {
  * Changes are session-only until explicitly persisted with Ctrl+S.
  */
 export declare class ScopedModelsSelectorComponent extends Container implements Focusable {
+    readonly capturesViewportInput: boolean;
     private modelsById;
     private allIds;
     private enabledIds;

package/dist/integrations/pi/components/upstream/components/scoped-models-selector.js

@@ -1,6 +1,6 @@
-import { Container, fuzzyFilter, getKeybindings, Input, Spacer, Text, } from "@earendil-works/pi-tui";
+import { Container, fuzzyFilter, getKeybindings, getSelectPageIndex, Input, Spacer, Text, } from "@earendil-works/pi-tui";
 import { DynamicBorder } from "../../../startup-public.js";
-import { getModelSearchText } from "../model-search.js";
+import { getDistinctModelName, getModelSearchText } from "../model-search.js";
 import { addPiModalHeader, addPiModalSearchInput, adoptPiModalFrame } from "../../modal-frame.js";
 import { DIALOG_CLOSE_SHORTCUT_HINT, paintPiBorder, piTheme, renderPiModalShortcutHints } from "../../theme.js";
 // Rationale: upstream's capitalized hint formatter is private to the package; the same mapping lives here.
@@ -79,6 +79,7 @@ function getSortedIds(enabledIds, allIds) {
  * Changes are session-only until explicitly persisted with Ctrl+S.
  */
 export class ScopedModelsSelectorComponent extends Container {
+    capturesViewportInput = true;
     modelsById = new Map();
     allIds = [];
     enabledIds = null;
@@ -217,9 +218,11 @@ export class ScopedModelsSelectorComponent extends Container {
             const id = item.model?.id ?? item.fullId;
             const styledId = item.model ? id : theme.strikethrough(id);
             const modelText = isSelected ? theme.fg("accent", styledId) : styledId;
+            const name = item.model ? getDistinctModelName(item.model) : undefined;
+            const nameText = name ? theme.fg("muted", ` (${name})`) : "";
             const providerBadge = theme.fg("muted", item.model ? ` [${item.model.provider}]` : " [unavailable]");
             const status = item.model && item.enabled ? theme.fg("accent", "✓ ") : "  ";
-            this.listContainer.addChild(new Text(`${prefix}${status}${modelText}${providerBadge}`, 0, 0));
+            this.listContainer.addChild(new Text(`${prefix}${status}${modelText}${nameText}${providerBadge}`, 0, 0));
         }
         // Add scroll indicator if needed
         if (startIndex > 0 || endIndex < this.filteredItems.length) {
@@ -248,6 +251,14 @@ export class ScopedModelsSelectorComponent extends Container {
             this.updateList();
             return;
         }
+        const pageIndex = getSelectPageIndex(kb, data, this.selectedIndex, this.filteredItems.length, this.maxVisible);
+        if (pageIndex !== undefined) {
+            if (this.filteredItems.length === 0)
+                return;
+            this.selectedIndex = pageIndex;
+            this.updateList();
+            return;
+        }
         // Reorder enabled models
         const reorderUp = kb.matches(data, "app.models.reorderUp");
         const reorderDown = kb.matches(data, "app.models.reorderDown");

package/dist/integrations/pi/components/upstream/components/session-footer.js

@@ -1,5 +1,5 @@
 /**
- * Provenance: @earendil-works/pi-coding-agent 1.4.0 (MIT), commit 4a080252f06caf63a525d7873c5d94d3c23887e0,
+ * Provenance: @earendil-works/pi-coding-agent 1.5.0 (MIT), commit f9a26365568127461c47a07a37dcb42c140a3ac5,
  * packages/coding-agent/src/modes/interactive/components/footer.ts.
  * Modifications: Owned UI/routing; A1 level color, linked PRs, resident names, dim ellipsis and model
  * priority; Pi unchanged.

package/dist/integrations/pi/components/upstream/components/session-selector-search.d.ts

@@ -18,5 +18,9 @@ export interface MatchResult {
 }
 export declare function hasSessionName(session: SessionInfo): boolean;
 export declare function parseSearchQuery(query: string): ParsedSearchQuery;
+/**
+ * Each field is matched separately, so a token never matches across field boundaries.
+ * Different tokens may match different fields.
+ */
 export declare function matchSession(session: SessionInfo, parsed: ParsedSearchQuery): MatchResult;
 export declare function filterAndSortSessions(sessions: SessionInfo[], query: string, sortMode: SortMode, nameFilter?: NameFilter): SessionInfo[];