@timurproko/a1 0.2.7-dev.1241 → 0.2.7-dev.1244

package/dist/native/darwin-arm64/terminal-host.manifest.json

@@ -9,11 +9,11 @@
   "architecture": "arm64",
   "target": "aarch64-apple-darwin",
   "capability": "supported",
-  "builtAt": "2026-11-05T07:01:22.443Z",
+  "builtAt": "2026-11-06T07:00:26.658Z",
   "artifact": {
     "filename": "terminal-host.node",
-    "sha256": "084c00e2cf786f3a8c92deb5f3c7939b87f8f09e481559001acc96dc38c87349",
-    "size": 6625792
+    "sha256": "b2548f95b9660b11b6d28fb4b35f254cde9940d9d19233517bb70507ffcf76ab",
+    "size": 6626528
   },
   "entry": {
     "filename": "dist/foundation/resident-tabs/host-entry.js",

package/dist/native/darwin-x64/manifest.json

@@ -7,10 +7,10 @@
   "platform": "darwin",
   "architecture": "x64",
   "capability": "supported",
-  "builtAt": "2026-11-05T06:57:19.328Z",
+  "builtAt": "2026-11-06T06:57:12.911Z",
   "artifact": {
     "filename": "process-guardian.node",
-    "sha256": "783a65f0de287a1c02cd5429dbe97bc8633f4cc8a7b92e3e961180b9bdcff814",
+    "sha256": "b4d66ed5920c3b2d4ac1cb658fe87549cdad2f81948dbe8cfa698ff6d87162e1",
     "size": 444248
   },
   "provenance": {

package/dist/native/darwin-x64/terminal-host.manifest.json

@@ -9,11 +9,11 @@
   "architecture": "x64",
   "target": "x86_64-apple-darwin",
   "capability": "supported",
-  "builtAt": "2026-11-05T07:04:03.142Z",
+  "builtAt": "2026-11-06T07:03:27.415Z",
   "artifact": {
     "filename": "terminal-host.node",
-    "sha256": "34a1dc77e44453dd8c60d170577615e228bc091c70c1bd86401be2bc849b105f",
-    "size": 7213944
+    "sha256": "cd1103472889d53e2e039cf7673b2fe6e9e0937234591b1202234d0c1c357d2a",
+    "size": 7226904
   },
   "entry": {
     "filename": "dist/foundation/resident-tabs/host-entry.js",

package/dist/native/linux-x64/manifest.json

@@ -7,11 +7,11 @@
   "platform": "linux",
   "architecture": "x64",
   "capability": "supported",
-  "builtAt": "2026-11-05T06:57:04.789Z",
+  "builtAt": "2026-11-06T06:56:45.470Z",
   "artifact": {
     "filename": "process-guardian.node",
-    "sha256": "118e5954e3864672bd8482ab7edf419cb27dcdf2533720316979b7f5cc5a53a5",
-    "size": 491520
+    "sha256": "18442075f91a02d22071548c0a2c882c69ee04b2e48e0b1130f23a86c5b258ca",
+    "size": 491536
   },
   "provenance": {
     "language": "Rust",

package/dist/native/linux-x64/terminal-host.manifest.json

@@ -9,11 +9,11 @@
   "architecture": "x64",
   "target": "x86_64-unknown-linux-gnu",
   "capability": "supported",
-  "builtAt": "2026-11-05T07:00:29.693Z",
+  "builtAt": "2026-11-06T06:59:02.808Z",
   "artifact": {
     "filename": "terminal-host.node",
-    "sha256": "272d4279ceda5baabd5edac6f71b8ede554c0420f5fc7f205c4b4a3072fc4851",
-    "size": 7997704
+    "sha256": "f5abfe9464780c9acdf85dfbf8a0f194bf0355188ab23feaa09cb7df84363088",
+    "size": 8010960
   },
   "entry": {
     "filename": "dist/foundation/resident-tabs/host-entry.js",

package/dist/native/win32-x64/manifest.json

@@ -7,10 +7,10 @@
   "platform": "win32",
   "architecture": "x64",
   "capability": "supported",
-  "builtAt": "2026-11-05T06:57:43.401Z",
+  "builtAt": "2026-11-06T06:57:32.942Z",
   "artifact": {
     "filename": "process-guardian.node",
-    "sha256": "2414e9a2269c6cb9f0ce275f0ea7b8147b5078be54c4bbc5c53dadb41ddad9f4",
+    "sha256": "eb4519e51e5c77a740b9c290e28def2293363675b103a21388532fa73d208893",
     "size": 402432
   },
   "provenance": {

package/dist/native/win32-x64/terminal-host.manifest.json

@@ -9,11 +9,11 @@
   "architecture": "x64",
   "target": "x86_64-pc-windows-msvc",
   "capability": "supported",
-  "builtAt": "2026-11-05T06:59:52.560Z",
+  "builtAt": "2026-11-06T06:59:37.419Z",
   "artifact": {
     "filename": "terminal-host.node",
-    "sha256": "919ab8121819cd7bc886d64cb8e4f7a422c7263e2aba0afa51319baef9a05adc",
-    "size": 7115264
+    "sha256": "148523e2ee5648749b4c5b84518e3d120aacf247cdf8620c3fa205df5c960dff",
+    "size": 7131136
   },
   "entry": {
     "filename": "dist/foundation/resident-tabs/host-entry.js",

package/docs/architecture/project-structure.md

@@ -113,6 +113,8 @@ Passing an absolute `path` to `EnterWorktree` is reserved for a worktree created
 
 Inventory is read-only and advisory because another runtime may win a later race. A successful link response confirming the exact canonical worktree is required before planning, implementation, test, or delivery-documentation edits. If inventory or linking fails, reports a live/unverifiable owner, loses a race, or confirms another path, stop task edits and report the blocker; use a separate fresh worktree rather than overriding, unlinking, or recovering that owner. A session resuming an existing delivery or switching streams atomically claims and links the exact worktree before editing it.
 
+Mutation-gate corruption and transient startup-registration failures have a separate [worktree-link recovery procedure](../worktree-link-recovery.md). Automatic recovery never overrides a live or unverifiable editing claim; ambiguous legacy gates remain protected.
+
 The link acquires a cooperative live-session editing claim and switches bare A1's footer repository context and pull-request discovery. It does not change process or tool cwd, create a Git worktree lock, or register, release, or authorize cleanup. Clean unlink/disposal releases live editing authority; a crashed owner becomes reusable only after exact process death is verified. Repository commands therefore keep an explicit worktree path. The primary worktree stays on `develop` for integration and must not be used for task edits. Do not edit, adopt, move, or remove another session's worktree.
 
 An agent that directly chooses a transient file path for a PR/comment body, command payload, captured output, temporary patch/diff, or ad hoc log must place it beneath the linked worktree's exact `.artifacts/` root, never the primary checkout, another worktree, OS temp, home/desktop, or a sibling path. Such scratch remains ignored, unstaged, uncommitted, disposable, non-authoritative, and secret-free. This repository path rule does not relocate storage internally selected by tools, product runtime code, or hermetic tests.

package/docs/worktree-link-recovery.md

@@ -0,0 +1,37 @@
+# Worktree-link recovery
+
+A1 coordinates worktree-claim mutations separately from the editing claims themselves. Recovering a mutation gate never grants permission to take another live agent's worktree or to delete worktree contents.
+
+## Automatic recovery
+
+Updated A1 holds an OS lock on the persistent `session-worktree-claims/mutation.authority` file. The OS releases it when the process exits, including a crash. `mutation.lock` is now a persistent directory that blocks older file-lock writers; its `owner.json` is only diagnostic metadata.
+
+The next mutation safely recovers abandoned owner/pending metadata after taking native authority. Empty, truncated, NUL-filled, or otherwise malformed metadata does not prevent this recovery. One bounded `recovery.json` records the recovery reason/time, not the original bytes or session contents. A live native holder remains protected. Acquisition waits at most two seconds by default and honors cancellation.
+
+If startup registration fails temporarily, the running session retries on its 30-second refresh interval. Slow attempts are coalesced rather than queued indefinitely. Once registration succeeds, retry the explicit worktree link in the same session. Switching an agent's session replaces its publication identity, and disposal drains publication before releasing claims.
+
+Inventory remains read-only. It can conservatively show unverifiable status until a mutation has recovered abandoned state; inventory does not perform repair.
+
+## Older lock files and mixed versions
+
+An existing regular-file `mutation.lock` belongs to the old protocol. Updated A1 cannot safely prove that no old writer/reclaimer is using it, even if a PID in the file is dead. It therefore retains the file and reports `worktree-legacy-recovery-required` rather than guessing or endlessly reporting generic busy.
+
+For this one-time legacy case, stop all older A1 processes normally, move only that exact regular lock file to a backup while they are stopped, then start updated A1. Keep sessions, runtime records, associations, editing claims, Git locks, and worktrees. Reinstalling/downgrading alone does not clear persisted legacy state. Never move the new directory or delete `mutation.authority` while A1 is running.
+
+When the old gate is absent, updated A1 initializes its compatibility barrier automatically. Older versions cannot mutate worktree claims after this point: all participating sessions must use the updated version. This intentionally prevents two incompatible mutation protocols from running concurrently. The installed native addon must support the new gate; there is no unsafe PID-file fallback if the addon is missing or outdated.
+
+## Diagnostics
+
+| Code | Meaning / next step |
+| --- | --- |
+| `worktree-claim-busy` | A mutation still holds native authority. Retry the link shortly; runtime registration retries automatically. |
+| `worktree-legacy-recovery-required` | Retained old-format gate. Use the stopped-process legacy procedure above. |
+| `worktree-coordination-unavailable` | Missing or outdated native support. Repair/update the A1 installation. |
+| `worktree-coordination-io` | Gate/metadata filesystem access failed. Check permissions and storage availability. |
+| `worktree-coordination-boundary` | Unexpected file type, link, or entry. Retain it for inspection; do not clear the store. |
+| `session-runtime-unavailable` | Runtime registration has not succeeded. Retry after the next refresh and address any specific coordination failure. |
+| `process-inspection-unavailable` / `session-runtime-unverifiable` | Exact process identity cannot be checked. Repair inspection support; no ownership takeover is authorized. |
+| `worktree-active-in-another-session` | Another live agent owns the target. Use a different worktree or have that owner release it. |
+| `worktree-owner-unverifiable` | The editing claim itself is uncertain. Gate recovery cannot make that claim available. |
+
+Diagnostics do not expose another session's process identity, session file, transcript, or credentials. The mechanism does not repair arbitrary damaged claim records, change tool cwd, or grant Git/cleanup authority.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@timurproko/a1",
-  "version": "0.2.7-dev.1241",
+  "version": "0.2.7-dev.1244",
   "description": "Standalone terminal workspace for supervised native and managed agents",
   "type": "module",
   "privateLaunchContract": "neutral-launch-v1",
@@ -11,6 +11,9 @@
     "resident-control-v1",
     "resident-workspace-v1"
   ],
+  "updateCommandContracts": [
+    "update-release-v1"
+  ],
   "packageManager": "npm@11.13.0",
   "bin": {
     "a1": "bin/cli.js"
@@ -123,7 +126,7 @@
     "@mariozechner/clipboard": "^0.3.9"
   },
   "publication": {
-    "source": "c3b7a3fd5d44c998b87847f0f79422bdbb459355",
-    "pullRequest": 865
+    "source": "111a66b7e3174dcf876416a0b35f09960526ee93",
+    "pullRequest": 868
   }
 }