@timurproko/a1 0.2.7-dev.1252 → 0.2.7-dev.1255

package/dist/ui/components/theme.d.ts

@@ -1,21 +1,6 @@
-export type UiThemeToken = "accent" | "mdHeading" | "text" | "muted" | "dim" | "border" | "error" | "success";
-export interface UiTheme {
-    fg(token: UiThemeToken, text: string): string;
-    bold(text: string): string;
-    /**
-     * The terminal's own foreground, left unpainted. What a list's own text is:
-     * a theme built for a light background would otherwise write near-black rows
-     * into a dark terminal, which is how the engine leaves its lists too.
-     */
-    plain(text: string): string;
-    /** Optional palette preview used by controls that choose the active accent. */
-    accentPreview?(color: string, text: string): string | null;
-    /** Selection background for an active list item or floating-surface row. */
-    highlight(text: string): string;
-    /** A control that is present but cannot act: quieter than quiet text. */
-    disabled(text: string): string;
-    /** Background for a floating surface, so it reads as above the content. */
-    panel(text: string): string;
-}
+import type { ThemeSource, UiTheme, UiThemeBackground, UiThemeToken } from "../../contracts/presentation/index.js";
+export type { ThemeSource, UiTheme, UiThemeBackground, UiThemeToken };
 /** Renders every token as plain text. What tests assert against. */
 export declare const PLAIN_THEME: UiTheme;
+/** A theme source that never changes and paints nothing. */
+export declare const PLAIN_THEME_SOURCE: ThemeSource;

package/dist/ui/components/theme.js

@@ -6,4 +6,10 @@ export const PLAIN_THEME = Object.freeze({
     highlight: (text) => text,
     disabled: (text) => text,
     panel: (text) => text,
+    background: (_token, text) => text,
+});
+/** A theme source that never changes and paints nothing. */
+export const PLAIN_THEME_SOURCE = Object.freeze({
+    current: () => PLAIN_THEME,
+    onChange: () => () => { },
 });

package/dist/ui/settings/declarations.d.ts

@@ -1,4 +1,3 @@
-export declare const OWNED_UI_SETTINGS_VERSION = 21;
 export type OwnedUiSettingValue = string | number | boolean;
 export type OwnedUiSettingApplication = "live" | "restart";
 export interface OwnedUiSettingDeclaration {
@@ -30,10 +29,10 @@ export declare const OWNED_SETTING_DECLARATIONS: Readonly<{
             id: "generic";
             title: "Generic";
         }>;
-        description: "Auto checks the running channel every 15 minutes while open and installs verified updates silently, then shows Update installed, restart to update; the next start runs it. No leaves updates manual. Applies on next start.";
+        description: "Auto checks the running channel every 15 minutes while open and installs verified updates silently, then shows Update installed, restart to update; the next start runs it. Manual leaves updating to you (a1 update). Applies on next start.";
         application: "restart";
         defaultValue: "auto";
-        allowedValues: readonly ["auto", "no"];
+        allowedValues: readonly ["auto", "manual"];
     }>;
     readonly accentColor: Readonly<{
         id: "accentColor";

package/dist/ui/settings/declarations.js

@@ -1,4 +1,3 @@
-export const OWNED_UI_SETTINGS_VERSION = 21;
 const UI_ACCENT_COLOR_CHOICES = Object.freeze([
     "blue", "purple", "cyan", "green", "orange", "pink",
 ]);
@@ -13,10 +12,10 @@ export const OWNED_SETTING_DECLARATIONS = Object.freeze({
         id: "updateCheck",
         label: "Update",
         section: GENERIC_SECTION,
-        description: "Auto checks the running channel every 15 minutes while open and installs verified updates silently, then shows Update installed, restart to update; the next start runs it. No leaves updates manual. Applies on next start.",
+        description: "Auto checks the running channel every 15 minutes while open and installs verified updates silently, then shows Update installed, restart to update; the next start runs it. Manual leaves updating to you (a1 update). Applies on next start.",
         application: "restart",
         defaultValue: "auto",
-        allowedValues: Object.freeze(["auto", "no"]),
+        allowedValues: Object.freeze(["auto", "manual"]),
     }),
     accentColor: Object.freeze({
         id: "accentColor",

package/dist/ui/settings/early-accent.js

@@ -2,7 +2,7 @@ import { readFileSync, statSync } from "node:fs";
 import { homedir } from "node:os";
 import { isAbsolute, join } from "node:path";
 import { PRODUCT_IDENTITY } from "../../product-identity.js";
-import { SHARED_PROGRESS_PALETTE } from "./progress-palette.generated.js";
+import { SHARED_PROGRESS_PALETTE } from "../../contracts/presentation/index.js";
 /** Global settings only: project resources must remain unavailable until trust is resolved. */
 export function readPreTrustAccent(environment = process.env) {
     try {

package/dist/ui/settings/index.d.ts

@@ -1,9 +1,7 @@
-export { OWNED_SETTING_DECLARATIONS, OWNED_UI_SETTINGS_VERSION, OWNED_UI_SETTING_DECLARATIONS, assertOwnedUiSettingDeclarations, findOwnedUiSettingDeclaration, isOwnedSettingId, } from "./declarations.js";
+export { OWNED_SETTING_DECLARATIONS, OWNED_UI_SETTING_DECLARATIONS, assertOwnedUiSettingDeclarations, findOwnedUiSettingDeclaration, isOwnedSettingId, } from "./declarations.js";
 export type { OwnedSettingId, OwnedSettingValueOf, OwnedUiSettingApplication, OwnedUiSettingDeclaration, OwnedUiSettingValue } from "./declarations.js";
-export { OWNED_UI_SETTINGS_MIGRATIONS, assertOwnedUiSettingsMigrations, migrationsFrom, normalizeOwnedUiSettingsValues, } from "./migrations.js";
-export type { OwnedUiSettingsCompatibilityResult, OwnedUiSettingsMigration } from "./migrations.js";
-export { documentFrom, parseOwnedUiSettingsDocument, resolveOwnedUiSettings, settingValue } from "./resolution.js";
-export type { OwnedUiResolvedSetting, OwnedUiSettingSource, OwnedUiSettingsDocument, OwnedUiSettingsNotice, OwnedUiSettingsNoticeCode, OwnedUiSettingsResolution, ResolveOwnedUiSettingsInput, } from "./resolution.js";
+export { resolveOwnedUiSettings, settingValue } from "./resolution.js";
+export type { OwnedUiResolvedSetting, OwnedUiSettingSource, OwnedUiSettingsNotice, OwnedUiSettingsNoticeCode, OwnedUiSettingsResolution, ResolveOwnedUiSettingsInput, } from "./resolution.js";
 export { AGENT_SECTION_ID, buildOwnedUiSettingsSections, findOwnedUiSettingsEntry } from "./sections.js";
 export type { AgentSettingsSnapshot, BuildOwnedUiSettingsSectionsInput, OwnedUiSettingsBackend, OwnedUiSettingsEntry, OwnedUiSettingsSection, } from "./sections.js";
 export { OwnedSettingsManager } from "./manager.js";

package/dist/ui/settings/index.js

@@ -1,6 +1,5 @@
-export { OWNED_SETTING_DECLARATIONS, OWNED_UI_SETTINGS_VERSION, OWNED_UI_SETTING_DECLARATIONS, assertOwnedUiSettingDeclarations, findOwnedUiSettingDeclaration, isOwnedSettingId, } from "./declarations.js";
-export { OWNED_UI_SETTINGS_MIGRATIONS, assertOwnedUiSettingsMigrations, migrationsFrom, normalizeOwnedUiSettingsValues, } from "./migrations.js";
-export { documentFrom, parseOwnedUiSettingsDocument, resolveOwnedUiSettings, settingValue } from "./resolution.js";
+export { OWNED_SETTING_DECLARATIONS, OWNED_UI_SETTING_DECLARATIONS, assertOwnedUiSettingDeclarations, findOwnedUiSettingDeclaration, isOwnedSettingId, } from "./declarations.js";
+export { resolveOwnedUiSettings, settingValue } from "./resolution.js";
 export { AGENT_SECTION_ID, buildOwnedUiSettingsSections, findOwnedUiSettingsEntry } from "./sections.js";
 export { OwnedSettingsManager } from "./manager.js";
 export { assertProfileSettingsNamespaceAvailable, readProfileSettingsNamespace, repairProfileSettingsDocument, updateProfileSettingsNamespace, } from "./profile-document.js";

package/dist/ui/settings/manager.d.ts

@@ -1,6 +1,5 @@
 import type { AgentJsonValue, AgentSettingApplicationBoundary, AgentSettingsPort } from "../../contracts/agent-engine/index.js";
 import { type OwnedSettingId, type OwnedSettingValueOf, type OwnedUiSettingDeclaration, type OwnedUiSettingValue } from "./declarations.js";
-import { type OwnedUiSettingsMigration } from "./migrations.js";
 import { type OwnedUiSettingsResolution } from "./resolution.js";
 import { type OwnedUiSettingsBackend, type OwnedUiSettingsSection } from "./sections.js";
 export interface OwnedSettingsManagerOptions {
@@ -11,10 +10,7 @@ export interface OwnedSettingsManagerOptions {
     readonly profileId: string;
     /** Product namespace; defaults to profileId for generic and hermetic consumers. */
     readonly namespace?: string;
-    /** Former product configuration root, consulted only while the namespace is absent. */
-    readonly legacyConfigDir?: string;
     readonly declarations?: readonly OwnedUiSettingDeclaration[];
-    readonly migrations?: readonly OwnedUiSettingsMigration[];
     readonly agent?: AgentSettingsPort | null;
     readonly agentProvider?: () => AgentSettingsPort | null;
     readonly hiddenOwnedSettingIds?: readonly string[];

package/dist/ui/settings/manager.js

@@ -1,9 +1,7 @@
-import { readFileSync } from "node:fs";
 import path from "node:path";
 import { assertAgentSettingDescriptor } from "../../contracts/agent-engine/index.js";
-import { OWNED_SETTING_DECLARATIONS, OWNED_UI_SETTINGS_VERSION, OWNED_UI_SETTING_DECLARATIONS, } from "./declarations.js";
-import { OWNED_UI_SETTINGS_MIGRATIONS, normalizeOwnedUiSettingsValues, } from "./migrations.js";
-import { parseOwnedUiSettingsDocument, resolveOwnedUiSettings, } from "./resolution.js";
+import { OWNED_SETTING_DECLARATIONS, OWNED_UI_SETTING_DECLARATIONS, } from "./declarations.js";
+import { resolveOwnedUiSettings, } from "./resolution.js";
 import { buildOwnedUiSettingsSections, findOwnedUiSettingsEntry, } from "./sections.js";
 import { readProfileSettingsNamespace, repairProfileSettingsDocument, updateProfileSettingsNamespace, } from "./profile-document.js";
 const PROFILE_ID_PATTERN = /^[a-z][a-z0-9-]{0,63}$/;
@@ -16,10 +14,8 @@ const MAX_DOCUMENT_BYTES = 256 * 1024;
  */
 export class OwnedSettingsManager {
     #file;
-    #legacyFile;
     #namespace;
     #declarations;
-    #migrations;
     #agent;
     #agentProvider;
     #listeners = new Set();
@@ -38,12 +34,8 @@ export class OwnedSettingsManager {
         if (profileDir === undefined)
             throw new Error("owned UI settings require a profile directory");
         this.#file = path.join(path.resolve(profileDir), "settings.json");
-        this.#legacyFile = options.legacyConfigDir === undefined
-            ? null
-            : path.join(path.resolve(options.legacyConfigDir), "settings", `${options.profileId}.json`);
         this.#namespace = options.namespace ?? options.profileId;
         this.#declarations = options.declarations ?? OWNED_UI_SETTING_DECLARATIONS;
-        this.#migrations = options.migrations ?? OWNED_UI_SETTINGS_MIGRATIONS;
         this.#agent = options.agent ?? null;
         this.#agentProvider = options.agentProvider ?? null;
         this.#hiddenOwnedSettingIds = new Set(options.hiddenOwnedSettingIds ?? []);
@@ -74,53 +66,15 @@ export class OwnedSettingsManager {
             if (Buffer.byteLength(JSON.stringify(shared.value), "utf8") > MAX_DOCUMENT_BYTES) {
                 return this.#resolveNamespace(null, `${this.#file} contains a ${this.#namespace} namespace exceeding the ${MAX_DOCUMENT_BYTES}-byte settings limit`);
             }
-            return this.#resolveCompatibleNamespace(shared.value);
+            return this.#resolveNamespace(shared.value);
         }
-        if (shared.status === "invalid")
-            return this.#resolveNamespace(null, shared.detail);
-        return this.#readLegacy();
-    }
-    #resolveCompatibleNamespace(values) {
-        const compatibility = normalizeOwnedUiSettingsValues(values);
-        return compatibility.values === null
-            ? this.#resolveNamespace(null, compatibility.failure ?? "product settings compatibility failed")
-            : this.#resolveNamespace(compatibility.values);
+        return this.#resolveNamespace(null, shared.status === "invalid" ? shared.detail : undefined);
     }
     #resolveNamespace(values, unreadableDetail) {
         return resolveOwnedUiSettings({
             declarations: this.#declarations,
-            migrations: [],
-            document: values === null ? null : { version: OWNED_UI_SETTINGS_VERSION, values },
+            values,
             ...(unreadableDetail === undefined ? {} : { unreadableDetail }),
-            currentVersion: OWNED_UI_SETTINGS_VERSION,
-        });
-    }
-    #readLegacy() {
-        if (this.#legacyFile === null)
-            return this.#resolveNamespace(null);
-        let raw = null;
-        let unreadable = null;
-        try {
-            raw = readFileSync(this.#legacyFile, "utf8");
-        }
-        catch (error) {
-            if (!isMissing(error))
-                unreadable = `${this.#legacyFile} could not be read: ${describe(error)}`;
-        }
-        if (raw !== null && Buffer.byteLength(raw, "utf8") > MAX_DOCUMENT_BYTES) {
-            unreadable = `${this.#legacyFile} exceeds the ${MAX_DOCUMENT_BYTES}-byte settings limit and was ignored`;
-            raw = null;
-        }
-        const document = raw === null ? null : parseOwnedUiSettingsDocument(raw);
-        if (raw !== null && document === null && unreadable === null) {
-            unreadable = `${this.#legacyFile} is not a valid settings document and was ignored`;
-        }
-        return resolveOwnedUiSettings({
-            declarations: this.#declarations,
-            migrations: this.#migrations,
-            document,
-            ...(unreadable === null ? {} : { unreadableDetail: unreadable }),
-            currentVersion: OWNED_UI_SETTINGS_VERSION,
         });
     }
     async load() {
@@ -231,14 +185,7 @@ export class OwnedSettingsManager {
         }
         try {
             updateProfileSettingsNamespace(this.#file, this.#namespace, current => {
-                let latest = this.#readLegacy();
-                if (current !== null) {
-                    const compatibility = normalizeOwnedUiSettingsValues(current);
-                    if (compatibility.values === null)
-                        throw new Error(compatibility.failure ?? "product settings compatibility failed");
-                    latest = this.#resolveNamespace(compatibility.values);
-                }
-                const next = compactValues(latest);
+                const next = compactValues(this.#resolveNamespace(current));
                 if (value === declaration.defaultValue)
                     delete next[id];
                 else
@@ -343,9 +290,6 @@ function compactValues(resolution) {
     }
     return values;
 }
-function isMissing(error) {
-    return typeof error === "object" && error !== null && error.code === "ENOENT";
-}
 function describe(error) {
     return error instanceof Error ? error.message : String(error);
 }

package/dist/ui/settings/resolution.d.ts

@@ -1,12 +1,11 @@
 import { type OwnedUiSettingDeclaration, type OwnedUiSettingValue } from "./declarations.js";
-import { type OwnedUiSettingsMigration } from "./migrations.js";
 export type OwnedUiSettingSource = "default" | "stored";
 export interface OwnedUiResolvedSetting {
     readonly declaration: OwnedUiSettingDeclaration;
     readonly value: OwnedUiSettingValue;
     readonly source: OwnedUiSettingSource;
 }
-export type OwnedUiSettingsNoticeCode = "document-unreadable" | "version-newer-than-supported" | "migration-unavailable" | "value-rejected";
+export type OwnedUiSettingsNoticeCode = "document-unreadable" | "value-rejected";
 export interface OwnedUiSettingsNotice {
     readonly code: OwnedUiSettingsNoticeCode;
     /** Setting id for a rejected value; null for document-level notices. */
@@ -14,32 +13,21 @@ export interface OwnedUiSettingsNotice {
     readonly detail: string;
 }
 export interface OwnedUiSettingsResolution {
-    readonly version: number;
     readonly settings: readonly OwnedUiResolvedSetting[];
     /** Keys that match no declaration, preserved verbatim so a downgrade cannot destroy them. */
     readonly preserved: Readonly<Record<string, unknown>>;
     readonly notices: readonly OwnedUiSettingsNotice[];
-    /** True when the resolved form differs from what was stored and should be written on the next change. */
-    readonly migrated: boolean;
 }
-export interface OwnedUiSettingsDocument {
-    readonly version: number;
-    readonly values: Readonly<Record<string, unknown>>;
-}
-export declare function parseOwnedUiSettingsDocument(raw: string): OwnedUiSettingsDocument | null;
 export interface ResolveOwnedUiSettingsInput {
     readonly declarations: readonly OwnedUiSettingDeclaration[];
-    readonly migrations: readonly OwnedUiSettingsMigration[];
-    /** Parsed document, or null when the file is absent, unreadable, or unparseable. */
-    readonly document: OwnedUiSettingsDocument | null;
-    /** Set when the document existed but could not be read or parsed. */
+    /** Stored values, or null when the namespace is absent, unreadable, or unparseable. */
+    readonly values: Readonly<Record<string, unknown>> | null;
+    /** Set when the stored values existed but could not be read or parsed. */
     readonly unreadableDetail?: string;
-    readonly currentVersion?: number;
 }
 /**
- * Pure resolution: declarations plus a parsed document produce a complete value
- * set, the keys to preserve, and every notice worth reporting. Never throws.
+ * Pure resolution: declarations plus stored values produce a complete value set, the keys to
+ * preserve, and every notice worth reporting. Never throws.
  */
 export declare function resolveOwnedUiSettings(input: ResolveOwnedUiSettingsInput): OwnedUiSettingsResolution;
 export declare function settingValue(resolution: OwnedUiSettingsResolution, id: string): OwnedUiSettingValue | null;
-export declare function documentFrom(resolution: OwnedUiSettingsResolution): OwnedUiSettingsDocument;

package/dist/ui/settings/resolution.js

@@ -1,93 +1,14 @@
-import { OWNED_UI_SETTINGS_VERSION, findOwnedUiSettingDeclaration, } from "./declarations.js";
-import { migrationsFrom } from "./migrations.js";
-export function parseOwnedUiSettingsDocument(raw) {
-    let parsed;
-    try {
-        parsed = JSON.parse(raw);
-    }
-    catch {
-        return null;
-    }
-    if (typeof parsed !== "object" || parsed === null || Array.isArray(parsed))
-        return null;
-    const candidate = parsed;
-    const version = candidate["version"];
-    if (typeof version !== "number" || !Number.isInteger(version) || version < 1)
-        return null;
-    const values = candidate["values"];
-    if (typeof values !== "object" || values === null || Array.isArray(values))
-        return null;
-    return { version, values: values };
-}
+import { findOwnedUiSettingDeclaration, } from "./declarations.js";
 /**
- * Pure resolution: declarations plus a parsed document produce a complete value
- * set, the keys to preserve, and every notice worth reporting. Never throws.
+ * Pure resolution: declarations plus stored values produce a complete value set, the keys to
+ * preserve, and every notice worth reporting. Never throws.
  */
 export function resolveOwnedUiSettings(input) {
-    const currentVersion = input.currentVersion ?? OWNED_UI_SETTINGS_VERSION;
     const notices = [];
     if (input.unreadableDetail !== undefined) {
         notices.push({ code: "document-unreadable", settingId: null, detail: input.unreadableDetail });
     }
-    if (input.document === null) {
-        return {
-            version: currentVersion,
-            settings: defaultsFor(input.declarations),
-            preserved: Object.freeze({}),
-            notices: Object.freeze(notices),
-            migrated: false,
-        };
-    }
-    if (input.document.version > currentVersion) {
-        notices.push({
-            code: "version-newer-than-supported",
-            settingId: null,
-            detail: `stored version ${input.document.version} is newer than supported version ${currentVersion}`,
-        });
-        return {
-            version: currentVersion,
-            settings: defaultsFor(input.declarations),
-            preserved: Object.freeze({ ...input.document.values }),
-            notices: Object.freeze(notices),
-            migrated: false,
-        };
-    }
-    const pending = migrationsFrom(input.migrations, input.document.version);
-    const expected = currentVersion - input.document.version;
-    if (pending.length !== expected) {
-        notices.push({
-            code: "migration-unavailable",
-            settingId: null,
-            detail: `no declared migration path from stored version ${input.document.version} to ${currentVersion}`,
-        });
-        return {
-            version: currentVersion,
-            settings: defaultsFor(input.declarations),
-            preserved: Object.freeze({ ...input.document.values }),
-            notices: Object.freeze(notices),
-            migrated: false,
-        };
-    }
-    let values = { ...input.document.values };
-    for (const migration of pending) {
-        try {
-            values = { ...migration.migrate(Object.freeze({ ...values })) };
-        }
-        catch (error) {
-            notices.push({
-                code: "migration-unavailable",
-                settingId: null,
-                detail: `migration to version ${migration.to} failed: ${describe(error)}`,
-            });
-            return {
-                version: currentVersion,
-                settings: defaultsFor(input.declarations),
-                preserved: Object.freeze({ ...input.document.values }),
-                notices: Object.freeze(notices),
-                migrated: false,
-            };
-        }
-    }
+    const values = input.values ?? {};
     const settings = [];
     for (const declaration of input.declarations) {
         if (!Object.hasOwn(values, declaration.id)) {
@@ -112,36 +33,16 @@ export function resolveOwnedUiSettings(input) {
             preserved[key] = value;
     }
     return {
-        version: currentVersion,
         settings: Object.freeze(settings),
         preserved: Object.freeze(preserved),
         notices: Object.freeze(notices),
-        migrated: pending.length > 0,
     };
 }
 export function settingValue(resolution, id) {
     return resolution.settings.find(setting => setting.declaration.id === id)?.value ?? null;
 }
-export function documentFrom(resolution) {
-    const values = { ...resolution.preserved };
-    for (const setting of resolution.settings) {
-        if (setting.source === "stored")
-            values[setting.declaration.id] = setting.value;
-    }
-    return { version: resolution.version, values };
-}
-function defaultsFor(declarations) {
-    return Object.freeze(declarations.map(declaration => ({
-        declaration,
-        value: declaration.defaultValue,
-        source: "default",
-    })));
-}
 function isAllowed(declaration, value) {
     if (typeof value !== "string" && typeof value !== "number" && typeof value !== "boolean")
         return false;
     return declaration.allowedValues.includes(value);
 }
-function describe(error) {
-    return error instanceof Error ? error.message : String(error);
-}

package/dist/ui/settings/sections.d.ts

@@ -49,8 +49,4 @@ export interface BuildOwnedUiSettingsSectionsInput {
 }
 export declare const AGENT_SECTION_ID = "agent";
 export declare function buildOwnedUiSettingsSections(input: BuildOwnedUiSettingsSectionsInput): readonly OwnedUiSettingsSection[];
-/** The enabled parts a flagged A1 setting's comma-separated value names, as the record its dialog edits. */
-export declare function flagRecord(flags: readonly {
-    readonly key: string;
-}[], value: unknown): Record<string, boolean>;
 export declare function findOwnedUiSettingsEntry(sections: readonly OwnedUiSettingsSection[], id: string, backend: OwnedUiSettingsBackend): OwnedUiSettingsEntry | null;

package/dist/ui/settings/sections.js

@@ -46,7 +46,7 @@ export function buildOwnedUiSettingsSections(input) {
     return Object.freeze([...ownedSections, combinedAgent]);
 }
 /** The enabled parts a flagged A1 setting's comma-separated value names, as the record its dialog edits. */
-export function flagRecord(flags, value) {
+function flagRecord(flags, value) {
     const enabled = new Set(typeof value === "string" ? value.split(",") : []);
     return Object.fromEntries(flags.map(flag => [flag.key, enabled.has(flag.key)]));
 }

package/docs/architecture/boundaries.md

@@ -29,7 +29,7 @@ The owned Pi-backed surface is one agent per terminal. It is not a terminal mult
 - `prompt-history`: narrowly typed user-input retention in separate profile-owned databases under `~/.a1/data/history` (or `<A1_DATA_DIR>/history`), with bounded worker queues. It receives a resolved root rather than importing launch-feature internals; it never probes, imports, or deletes the former platform-default history. The editor's owned history state machine remains inside the Pi component boundary; the session UI only coordinates snapshots and classified submissions.
 - `prompt-suggestions`: opt-in bounded diagnostic snapshots of neutral suggestion lifecycle metadata. Composition supplies an explicit local destination; this feature never imports Pi, generates suggestions, stores conversation text, or owns the editor. See [prompt suggestion diagnostics](prompt-suggestions.md).
 - `pi-engine-adapter`, `pi-component-adapter`, and `pi-tui-runtime-adapter` (`src/integrations/pi`): isolate pinned Pi engine and presentation knowledge behind neutral contracts; product features do not import them directly. Inside the engine adapter, one process-level engine host owns what is process-wide (the HTTP dispatcher, the theme singletons, the one-time changelog and package-update announcements, the startup trace) and is the only place sessions are created, so every session id is unique per process.
-- `session-shell` (`src/app/session-shell`): the application layer that composes the feature owners, the UI foundations, and the three Pi adapters into the interactive session; only composition imports it. Its render root assembles semantic document and dock rows, while its focused viewport controller owns follow state, pointer routing, selection, and interaction timers. Owned-app route lifecycle belongs to the neutral `ui-apps` owner and is only hosted by the session shell.
+- `session-shell` (`src/app/session-shell`): the application layer that composes the feature owners and the UI foundations into the interactive session; it reaches Pi only through the owned-UI and presentation contracts, and only composition imports it. Its render root assembles semantic document and dock rows, while its focused viewport controller owns follow state, pointer routing, selection, and interaction timers. Owned-app route lifecycle belongs to the neutral `ui-apps` owner and is only hosted by the session shell.
 
 ## Dependency direction
 
@@ -41,7 +41,7 @@ The product has no native code and no PTY or terminal-emulator dependency: no mo
 
 ## Session shell composition
 
-The session presenter (`src/app/session-shell/session-shell.ts`) coordinates; it does not own per-concern state. Each concern implements `SessionConcern` (`session-concern.ts`): it resets its own state in `onSessionReplaced` and releases it in `dispose`, and the presenter lists its concerns once, in reset order, in `#createConcerns`. New submission, routing, dialog, or login behavior goes into the concern that owns it, or a new concern added to that list. The render root (`session-shell-root.ts`) likewise picks one `ShellLayout` at construction and delegates transcript caching to `TranscriptDocument`, dock chrome to `DockChrome`, workflow output to `WorkflowOutput`, extension surfaces to `ExtensionSurface`, and the dock's input surface to `InputSurfaceSwitch`. The engine adapter serves the shell through the ports built in `src/integrations/pi/engine/ports.ts`, and the composition root delegates runtime claims and the startup release note to their own modules under `src/composition/`.
+The session presenter (`src/app/session-shell/session-shell.ts`) coordinates; it does not own per-concern state. Each concern implements `SessionConcern` (`session-concern.ts`): it resets its own state in `onSessionReplaced` and releases it in `dispose`, and the presenter lists its concerns once, in reset order, in `#createConcerns`. New submission, routing, dialog, or login behavior goes into the concern that owns it, or a new concern added to that list. One shell's clipboard wiring is `ShellClipboard` (it borrows the process-wide helper pools composition creates), prompt suggestions are `ShellPromptSuggestions`, and the shell's own setting sources bind through `bindShellSettings`. The render root (`session-shell-root.ts`) likewise picks one `ShellLayout` at construction and exposes its parts to callers directly: transcript caching is `root.transcript` (`TranscriptDocument`), dock chrome is `root.chrome` (`DockChrome`), workflow output is `root.workflow` (`WorkflowOutput`); it also delegates extension surfaces to `ExtensionSurface`, and the dock's input surface to `InputSurfaceSwitch`. The engine adapter serves the shell through the ports built in `src/integrations/pi/engine/ports.ts`, and the composition root delegates runtime claims and the startup release note to their own modules under `src/composition/`.
 
 ## Unit size ratchet
 

package/docs/architecture/internal-naming.md

@@ -66,6 +66,8 @@ The old environment registry included `fixture` and `inputAcknowledgement`, but
 
 `certificationTarball`, `internalPackaging`, `nativePi`, `piParityIntentionalMutation`, `protocolVersion`, `structuredFlowLimits`, `terminalArgumentsJson`, and `terminalExecutable` had no active runtime consumer in the reviewed tree. They are removed from the current environment authority, not renamed into new settings. Rejection patterns and immutable historical evidence remain factual.
 
+The release store (`src/foundation/release/release-state.ts`, persisted as `release-state.json`) keeps the schema id `a1-release-cohort-v1` and the identity key `releaseCohortSchema`. "Cohort" is a legacy name from the retired supervisor era; the id is unchanged because every installed release state carries it, and renaming it would make existing installations unreadable.
+
 ## Negotiated handoff and protected state
 
 An update is performed by the release that is already installed, so the contract is negotiated rather than cut over. `neutral-launch-v1` is the only contract this build **writes** for its own releases, and the superseded `A1_RELEASE_*`/`A1_IMMUTABLE_WARMUP` keys are still **read** when an older launcher starts this build, and still **written** when this build starts a retained release that declares no contract. An installation therefore stays launchable across the cutover in both directions, and no user is asked to stop processes and reinstall by hand.

package/docs/architecture/project-structure.md

@@ -37,12 +37,14 @@ src/
   ui/
     apps/                          application registry and host lifecycle
     components/                    vendor-neutral terminal UI primitives
-    settings/                      owned settings declarations, resolution, migration, and persistence
+    settings/                      owned settings declarations, resolution, and persistence
 ```
 
 Each directory owner exposes `index.ts`, which lists its named exports; `export *` is rejected there so a public contract is readable in one place. Imports within one owner may use private files. Imports crossing owners must use the provider's public entry and follow the dependency DAG declared by `PROJECT_OWNERS`. Two exceptions exist: `src/composition` is the dependency-injection root and may reach past any public entry, and a module on the eager startup path may import a leaf of a provider whose public entry is a prohibited startup entry (`PROHIBITED_STARTUP_ENTRIES` in `startup-graph-policy.mjs`), because loading that barrel would pull the provider's whole graph into startup. `product-identity` is the sole exception to the directory-entry convention because its public entry is `src/product-identity.ts`.
 
-Three layer boundaries hold regardless of the DAG: `src/contracts/*` import nothing outside their own contract; `src/ui/components` imports only contracts; only `src/integrations/pi/*` and the shipped `bin/` entries import the pinned Pi packages. The session shell under `src/app` is the application layer: it may import the contracts, the UI foundations, the three Pi adapters, and the feature owners, and only composition imports it. The shell never holds a Pi engine object: selectors and transcript renderers built from one live in `src/integrations/pi/session-presenters`, the only owner besides composition that may import both the engine and the component adapters, and the shell opens them through the `OwnedUiSessionPresenters` contract.
+Three layer boundaries hold regardless of the DAG: `src/contracts/*` import nothing outside their own contract; `src/ui/components` imports only contracts; only `src/integrations/pi/*` and the shipped `bin/` entries import the pinned Pi packages. The session shell under `src/app` is the application layer: it may import the contracts, the UI foundations, and the feature owners, never `src/integrations/pi`, and only composition imports it. Composition hands it one `OwnedUiSessionPresenters` value from `src/integrations/pi/session-presenters`: the theme and terminal runtime (`ShellPresentationPorts`), the component factories (`OwnedUiShellComponents`), and the engine-backed selectors. That owner is the only one besides composition that may import both the engine and the component adapters.
+
+Every exported value under `src/` needs a production consumer: a file under `src/`, `bin/`, or `scripts/` that imports its module and names it. Owner public entries, declared entry modules, the product identity entry, copied upstream sources, and types are exempt. A value only a test reads stays private, and the test goes through the owner's public entry or an observable result.
 
 `src/cli` contains command policy but delegates runtime work. `src/composition` is the concrete dependency-injection boundary: it may know both neutral contracts and Pi implementations, while product features receive vendor-neutral ports. Foundation modules never import product features. Pi package knowledge remains inside the Pi adapter owners.
 

package/docs/validation.md

@@ -40,7 +40,7 @@ Do not run preflight, `test:fast`, `test:full`, `test:release`, or directory-wid
 npm run preflight                  # pull-request validation's fast gates on the committed head
 ```
 
-Preflight selects the committed merge-base diff with `origin/develop` exactly as validation does (uncommitted paths are reported, not checked), writes it to `.artifacts/validation/local-impact.json`, and stops at the first failure. It runs the core job's install build and receipt, `typecheck`, `check:architecture`, changed-file code documentation, release documentation, changed-file naming, docs governance, strict OpenSpec validation with the workflow's pinned validator, the delivery-guidance test, and the core job's `pr-core-tests` and `pr-selected-tests` scopes. Each step invokes the script and arguments its workflow job runs, so a failure reports the same rule identifier and path. It does not run resource-sensitive or integration owners, and CI remains the authority.
+Preflight selects the committed merge-base diff with `origin/develop` exactly as validation does (uncommitted paths are reported, not checked), writes it to `.artifacts/validation/local-impact.json`, and stops at the first failure. It runs the core job's install build and receipt, `typecheck`, `check:architecture`, changed-file code documentation, release documentation, changed-file naming, docs governance, strict OpenSpec validation with the workflow's pinned validator, and the core job's `pr-core-tests` and `pr-selected-tests` scopes. Each step invokes the script and arguments its workflow job runs, so a failure reports the same rule identifier and path. It does not run resource-sensitive or integration owners, and CI remains the authority.
 
 `test:pr-core` is not a replacement for `test:fast`: CI combines it with directly changed and coarse-owner tests from the exact impact selection. Selected resource-sensitive tests run independently on an isolated Windows runner. Selected package, startup, rendering, Pi, compatibility, and platform owners also run independently after their actual prerequisites.
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@timurproko/a1",
-  "version": "0.2.7-dev.1252",
+  "version": "0.2.7-dev.1255",
   "description": "Standalone single-agent terminal UI on pinned Pi",
   "type": "module",
   "privateLaunchContract": "neutral-launch-v1",
@@ -89,7 +89,6 @@
     "@typescript/native-preview": "7.0.0-dev.20260707.2",
     "@xterm/headless": "6.0.0",
     "esbuild": "0.25.10",
-    "node-pty": "1.1.0",
     "tsx": "4.20.3",
     "typescript": "5.9.2",
     "vitest": "3.2.7",
@@ -114,7 +113,7 @@
     "@mariozechner/clipboard": "^0.3.9"
   },
   "publication": {
-    "source": "9f0307c00ea0b83cfd4aea196543ddb7738fc6ee",
-    "pullRequest": 878
+    "source": "c42a37a9eb7e1c01d121f82a7be42376aaa7c542",
+    "pullRequest": 879
   }
 }

package/dist/integrations/pi/components/components.d.ts

@@ -1,4 +0,0 @@
-import type { OwnedUiTranscriptBlock } from "../../../contracts/owned-ui/index.js";
-export declare function adaptPiUserMessage(block: OwnedUiTranscriptBlock, width: number): readonly string[];
-export declare function adaptPiAssistantMessage(block: OwnedUiTranscriptBlock, width: number): readonly string[];
-export declare function adaptPiToolExecution(block: OwnedUiTranscriptBlock, width: number, cwd: string): readonly string[];

package/dist/integrations/pi/components/components.js

@@ -1,48 +0,0 @@
-import { AssistantMessageComponent, ToolExecutionComponent, UserMessageComponent, } from "../startup-public.js";
-import { createTuiFacade, validatedAssistantMessage } from "./shell-components.js";
-import { ensurePiTheme, getPiMarkdownTheme } from "./theme.js";
-export function adaptPiUserMessage(block, width) {
-    requireBlock(block, "user");
-    ensurePiTheme();
-    return new UserMessageComponent(block.text).render(width);
-}
-export function adaptPiAssistantMessage(block, width) {
-    requireBlock(block, "assistant");
-    ensurePiTheme();
-    return new AssistantMessageComponent(validatedAssistantMessage(block), false, getPiMarkdownTheme()).render(width);
-}
-export function adaptPiToolExecution(block, width, cwd) {
-    if (block.kind !== "tool-call" && block.kind !== "tool-result") {
-        throw new TypeError("Pi tool execution adaptation requires a tool block");
-    }
-    ensurePiTheme();
-    const payload = blockPayload(block);
-    const toolCallId = stringPayload(payload, "toolCallId") ?? block.id;
-    const toolName = stringPayload(payload, "toolName") ?? block.title ?? "tool";
-    const args = isRecord(payload.arguments) && "json" in payload.arguments ? payload.arguments.json : {};
-    const component = new ToolExecutionComponent(toolName, toolCallId, args, undefined, undefined, createTuiFacade({ getColumns: () => width, getRows: () => 24, requestRender() { } }), cwd);
-    if (block.status === "live")
-        component.markExecutionStarted();
-    component.setArgsComplete();
-    if (block.kind === "tool-result") {
-        component.updateResult({
-            content: [{ type: "text", text: block.text }],
-            isError: payload.isError === true,
-        });
-    }
-    return component.render(width);
-}
-function requireBlock(block, kind) {
-    if (block.kind !== kind)
-        throw new TypeError(`Pi component adaptation requires ${kind}, received ${block.kind}`);
-}
-function blockPayload(block) {
-    return isRecord(block.payload) ? block.payload : {};
-}
-function stringPayload(payload, key) {
-    const value = payload[key];
-    return typeof value === "string" && value.length > 0 ? value : undefined;
-}
-function isRecord(value) {
-    return typeof value === "object" && value !== null;
-}

package/dist/integrations/pi/components/conformance.d.ts

@@ -1,18 +0,0 @@
-export interface PiComponentConformanceResult {
-    readonly component: "user-message" | "assistant-message" | "tool-execution";
-    readonly renderRows: number;
-    readonly width: number;
-}
-export interface PiComponentConformanceReport {
-    readonly packageName: "@earendil-works/pi-coding-agent";
-    readonly packageVersion: string;
-    readonly ownedUiContractVersion: number;
-    readonly componentResults: readonly PiComponentConformanceResult[];
-    readonly componentFamilies: readonly string[];
-}
-/** Identifies the Pi presentation-conformance stage that failed against the pinned component surface. */
-export declare class PiComponentConformanceError extends Error {
-    readonly stage: "theme" | "components";
-    constructor(stage: "theme" | "components", cause: unknown);
-}
-export declare function runPiComponentConformance(): Promise<PiComponentConformanceReport>;