@timurproko/a1 0.2.7-dev.767 → 0.2.7-dev.772

package/dist/foundation/resident-tabs/terminal-host-artifact.js

@@ -0,0 +1,53 @@
+import { createHash } from "node:crypto";
+import { readFile, stat } from "node:fs/promises";
+import { basename, dirname, resolve } from "node:path";
+export const TERMINAL_HOST_MANIFEST_FILENAME = "terminal-host.manifest.json";
+export const TERMINAL_HOST_GENERATION = 1;
+export class TerminalHostArtifactError extends Error {
+    code;
+    constructor(message, code) {
+        super(message);
+        this.name = "TerminalHostArtifactError";
+        this.code = code;
+    }
+}
+/**
+ * Verifies a release's terminal host and its session-writer lock against their manifest before
+ * anything executes or loads them: schema, generation, platform, architecture, file names, sizes,
+ * and SHA-256 digests.
+ */
+export async function verifyTerminalHostArtifact(executable, platform = process.platform, architecture = process.arch, generation = TERMINAL_HOST_GENERATION) {
+    const directory = dirname(executable);
+    let manifest;
+    try {
+        manifest = JSON.parse(await readFile(resolve(directory, TERMINAL_HOST_MANIFEST_FILENAME), "utf8"));
+    }
+    catch (error) {
+        throw new TerminalHostArtifactError(`terminal host manifest is missing or malformed: ${errorMessage(error)}`, "TERMINAL_HOST_ARTIFACT_MISSING");
+    }
+    if (manifest.schema !== "a1-terminal-host-artifact-v1" || manifest.protocolVersion !== 1 || manifest.generation !== generation
+        || manifest.platform !== platform || manifest.architecture !== architecture
+        || manifest.artifact?.filename !== basename(executable) || typeof manifest.sessionLock?.filename !== "string"
+        || basename(manifest.sessionLock.filename) !== manifest.sessionLock.filename) {
+        throw new TerminalHostArtifactError("terminal host manifest is incompatible with this platform or generation", "TERMINAL_HOST_ARTIFACT_INCOMPATIBLE");
+    }
+    if (manifest.capability !== "supported") {
+        throw new TerminalHostArtifactError(`resident tabs are not supported on ${platform}-${architecture}`, "TERMINAL_HOST_ARTIFACT_UNSUPPORTED");
+    }
+    const sessionLock = resolve(directory, manifest.sessionLock.filename);
+    await verifyFile(executable, manifest.artifact, "terminal host");
+    await verifyFile(sessionLock, manifest.sessionLock, "session-writer lock");
+    return { executable, sessionLock, generation: manifest.generation };
+}
+async function verifyFile(path, expected, label) {
+    const [bytes, metadata] = await Promise.all([readFile(path), stat(path)]).catch((error) => {
+        throw new TerminalHostArtifactError(`${label} artifact is unavailable: ${errorMessage(error)}`, "TERMINAL_HOST_ARTIFACT_MISSING");
+    });
+    const digest = createHash("sha256").update(bytes).digest("hex");
+    if (metadata.size !== expected.size || digest !== expected.sha256) {
+        throw new TerminalHostArtifactError(`${label} artifact integrity verification failed`, "TERMINAL_HOST_ARTIFACT_TAMPERED");
+    }
+}
+function errorMessage(error) {
+    return error instanceof Error ? error.message : String(error);
+}

package/dist/foundation/resident-tabs/zip-archive.d.ts

@@ -0,0 +1,9 @@
+export interface ZipEntry {
+    readonly name: string;
+    readonly data: Buffer;
+}
+/**
+ * Encodes a small deflated zip archive. Names are forward-slash relative paths; there are no
+ * directories, extra fields, or encryption, so any standard unzip tool reads it.
+ */
+export declare function encodeZip(entries: readonly ZipEntry[], modified?: Date): Buffer;

package/dist/foundation/resident-tabs/zip-archive.js

@@ -0,0 +1,56 @@
+import { crc32, deflateRawSync } from "node:zlib";
+/**
+ * Encodes a small deflated zip archive. Names are forward-slash relative paths; there are no
+ * directories, extra fields, or encryption, so any standard unzip tool reads it.
+ */
+export function encodeZip(entries, modified = new Date()) {
+    const time = ((modified.getHours() << 11) | (modified.getMinutes() << 5) | Math.floor(modified.getSeconds() / 2)) & 0xffff;
+    const date = (((modified.getFullYear() - 1980) << 9) | ((modified.getMonth() + 1) << 5) | modified.getDate()) & 0xffff;
+    const locals = [];
+    const centrals = [];
+    let offset = 0;
+    for (const entry of entries) {
+        const segments = entry.name.split("/");
+        if (segments.some(segment => !/^[A-Za-z0-9._-]+$/u.test(segment) || segment === "." || segment === "..")) {
+            throw new Error(`zip entry name is unsafe: ${entry.name}`);
+        }
+        const name = Buffer.from(entry.name, "utf8");
+        const compressed = deflateRawSync(entry.data);
+        const checksum = crc32(entry.data);
+        const local = Buffer.alloc(30);
+        local.writeUInt32LE(0x04034b50, 0);
+        local.writeUInt16LE(20, 4);
+        local.writeUInt16LE(0x0800, 6);
+        local.writeUInt16LE(8, 8);
+        local.writeUInt16LE(time, 10);
+        local.writeUInt16LE(date, 12);
+        local.writeUInt32LE(checksum, 14);
+        local.writeUInt32LE(compressed.length, 18);
+        local.writeUInt32LE(entry.data.length, 22);
+        local.writeUInt16LE(name.length, 26);
+        locals.push(local, name, compressed);
+        const central = Buffer.alloc(46);
+        central.writeUInt32LE(0x02014b50, 0);
+        central.writeUInt16LE(20, 4);
+        central.writeUInt16LE(20, 6);
+        central.writeUInt16LE(0x0800, 8);
+        central.writeUInt16LE(8, 10);
+        central.writeUInt16LE(time, 12);
+        central.writeUInt16LE(date, 14);
+        central.writeUInt32LE(checksum, 16);
+        central.writeUInt32LE(compressed.length, 20);
+        central.writeUInt32LE(entry.data.length, 24);
+        central.writeUInt16LE(name.length, 28);
+        central.writeUInt32LE(offset, 42);
+        centrals.push(central, name);
+        offset += local.length + name.length + compressed.length;
+    }
+    const directory = Buffer.concat(centrals);
+    const end = Buffer.alloc(22);
+    end.writeUInt32LE(0x06054b50, 0);
+    end.writeUInt16LE(entries.length, 8);
+    end.writeUInt16LE(entries.length, 10);
+    end.writeUInt32LE(directory.length, 12);
+    end.writeUInt32LE(offset, 16);
+    return Buffer.concat([...locals, directory, end]);
+}

package/dist/foundation/session-writer-lock/index.d.ts

@@ -1,3 +1,4 @@
+import { existsSync } from "node:fs";
 export interface NativeLock {
     readonly bound: boolean;
     bindCreated(path: string): void;
@@ -18,6 +19,10 @@ export interface SessionWriterHandle {
     bind(createdPath?: string): void;
     release(): void;
 }
+/** Development-only override naming a native lock addon to load first. */
+export declare const SESSION_LOCK_OVERRIDE_ENVIRONMENT = "A1_SESSION_LOCK_PATH";
+/** Security: a release that carries its own lock never loads an addon chosen by the environment or cwd. */
+export declare function nativeCandidates(moduleUrl?: string, env?: NodeJS.ProcessEnv, cwd?: string, exists?: typeof existsSync): string[];
 export declare function acquireExisting(path: string): SessionWriterHandle;
 export declare function reserveNew(parent: string, name: string): SessionWriterHandle;
 export declare function acquireSessionWriter(path: string): SessionWriterHandle;

package/dist/foundation/session-writer-lock/index.js

@@ -2,7 +2,9 @@ import { closeSync, existsSync, mkdirSync, openSync, readFileSync, realpathSync,
 import { createRequire } from "node:module";
 import { tmpdir } from "node:os";
 import { basename, dirname, join, resolve } from "node:path";
+import { fileURLToPath } from "node:url";
 import { createHash } from "node:crypto";
+import { PRODUCT_IDENTITY } from "../../product-identity.js";
 /** Reports that a canonical session identity already has a live writer. */
 export class SessionWriterConflict extends Error {
     path;
@@ -16,14 +18,16 @@ export class SessionWriterConflict extends Error {
 }
 let backendOverride;
 let cachedBackend;
-function nativeCandidates() {
-    const suffix = process.platform === "win32" ? "win32" : process.platform;
-    const target = `${suffix}-${process.arch}`;
-    return [
-        process.env.A1_SESSION_LOCK_PATH,
-        resolve(process.cwd(), "dist", "native", target, "a1_session_lock.node"),
-        resolve(process.cwd(), ".artifacts", "terminal-host", "a1_session_lock.node"),
-    ].filter((value) => typeof value === "string" && value.length > 0);
+/** Development-only override naming a native lock addon to load first. */
+export const SESSION_LOCK_OVERRIDE_ENVIRONMENT = "A1_SESSION_LOCK_PATH";
+/** Security: a release that carries its own lock never loads an addon chosen by the environment or cwd. */
+export function nativeCandidates(moduleUrl = import.meta.url, env = process.env, cwd = process.cwd(), exists = existsSync) {
+    const addon = "a1_session_lock.node";
+    // Invariant: this module sits at dist/foundation/session-writer-lock/ inside the release root.
+    const own = resolve(fileURLToPath(new URL("../../../", moduleUrl)), "dist", "native", `${process.platform}-${process.arch}`, addon);
+    const override = env[PRODUCT_IDENTITY.environment.developmentInstanceId] ? env[SESSION_LOCK_OVERRIDE_ENVIRONMENT]?.trim() || undefined : undefined;
+    const local = exists(own) ? [own] : [resolve(cwd, "dist", "native", `${process.platform}-${process.arch}`, addon), resolve(cwd, ".artifacts", "terminal-host", addon)];
+    return override ? [override, ...local] : local;
 }
 function loadNativeBackend() {
     const require = createRequire(import.meta.url);
@@ -50,7 +54,7 @@ function processIsLive(pid) {
         return false;
     }
 }
-/** Development fallback. Packaged builds use the Node-API lock above. */
+/** Development fallback. Installed releases carry the verified Node-API lock resolved above. */
 function portableBackend() {
     const root = join(tmpdir(), "a1-session-writer-locks");
     mkdirSync(root, { recursive: true, mode: 0o700 });

package/dist/integrations/pi/components/shell-hotkey-sections.js

@@ -6,7 +6,7 @@ import { hotkeysMarkdown } from "./shell-presenters-info.js";
 export function renderPiShellHotkeySections(presentation, width) {
     ensureTheme();
     const shortcuts = presentation.getShortcuts ?? (() => []);
-    const markdown = hotkeysMarkdown(presentation.bindings, shortcuts, presentation.profile ?? "pi");
+    const markdown = hotkeysMarkdown(presentation.bindings, shortcuts, presentation.profile ?? "pi", presentation.residentTabs);
     const sections = [];
     for (const line of markdown.split("\n")) {
         const heading = /^\*\*(.+)\*\*$/.exec(line)?.[1];

package/dist/integrations/pi/components/shell-presenters-info.d.ts

@@ -68,11 +68,13 @@ export interface PiShellHotkeysPresentation {
     readonly bindings?: KeybindingsConfig;
     readonly getShortcuts?: NonNullable<PiShellExtensionRendererResolver["getShortcuts"]>;
     readonly profile?: "pi" | "a1";
+    readonly residentTabs?: boolean;
 }
-export declare function createPiShellHotkeys(bindings?: KeybindingsConfig, getShortcuts?: NonNullable<PiShellExtensionRendererResolver["getShortcuts"]>, profile?: "pi" | "a1"): PiShellComponentPort;
+export declare function createPiShellHotkeys(bindings?: KeybindingsConfig, getShortcuts?: NonNullable<PiShellExtensionRendererResolver["getShortcuts"]>, profile?: "pi" | "a1", residentTabs?: boolean): PiShellComponentPort;
 /** The keyboard-shortcut document rows the feed presenter shows, without its spacer, borders, and heading. */
 export declare function renderPiShellHotkeysLines(presentation: PiShellHotkeysPresentation, width: number): readonly string[];
-export declare function hotkeysMarkdown(bindings: KeybindingsConfig | undefined, getShortcuts: NonNullable<PiShellExtensionRendererResolver["getShortcuts"]>, profile: "pi" | "a1"): string;
+export declare const TAB_HOTKEYS: readonly (readonly [string, string | null, string])[];
+export declare function hotkeysMarkdown(bindings: KeybindingsConfig | undefined, getShortcuts: NonNullable<PiShellExtensionRendererResolver["getShortcuts"]>, profile: "pi" | "a1", residentTabs?: boolean): string;
 /**
  * Pinned Pi's `showPackageUpdateNotification` banner: warning-coloured dynamic
  * borders around a bold warning title, the muted update instruction with the

package/dist/integrations/pi/components/shell-presenters-info.js

@@ -147,9 +147,9 @@ function shortcutDisplay(key) {
         return label.charAt(0).toUpperCase() + label.slice(1);
     }).join("+")).join("/");
 }
-export function createPiShellHotkeys(bindings, getShortcuts = () => [], profile = "pi") {
+export function createPiShellHotkeys(bindings, getShortcuts = () => [], profile = "pi", residentTabs = false) {
     ensureTheme();
-    const markdown = hotkeysMarkdown(bindings, getShortcuts, profile);
+    const markdown = hotkeysMarkdown(bindings, getShortcuts, profile, residentTabs);
     const container = new Container();
     container.addChild(new Spacer(1));
     container.addChild(new DynamicBorder(paintPiBorder));
@@ -162,12 +162,20 @@ export function createPiShellHotkeys(bindings, getShortcuts = () => [], profile
 /** The keyboard-shortcut document rows the feed presenter shows, without its spacer, borders, and heading. */
 export function renderPiShellHotkeysLines(presentation, width) {
     ensureTheme();
-    return hotkeysMarkdownComponent(hotkeysMarkdown(presentation.bindings, presentation.getShortcuts ?? (() => []), presentation.profile ?? "pi")).render(width);
+    return hotkeysMarkdownComponent(hotkeysMarkdown(presentation.bindings, presentation.getShortcuts ?? (() => []), presentation.profile ?? "pi", presentation.residentTabs)).render(width);
 }
 function hotkeysMarkdownComponent(markdown) {
     return new Markdown(markdown, 1, 1, getPiHotkeysMarkdownTheme());
 }
-export function hotkeysMarkdown(bindings, getShortcuts, profile) {
+// Performance: keep startup presentation independent from the registry; parity is contract-tested.
+export const TAB_HOTKEYS = [
+    ["tabs.new", "alt+a", "New A1 tab"], ["tabs.close", "alt+w", "Close A1 tab"],
+    ["tabs.rename", "f2", "Rename A1 tab"],
+    ...Array.from({ length: 10 }, (_, index) => [`tabs.jump${index + 1}`, `alt+${(index + 1) % 10}`, `View A1 tab ${index + 1}`]),
+    ["tabs.next", null, "View next A1 tab"], ["tabs.previous", null, "View previous A1 tab"],
+    ["tabs.moveRight", null, "Move A1 tab right"], ["tabs.moveLeft", null, "Move A1 tab left"],
+];
+export function hotkeysMarkdown(bindings, getShortcuts, profile, residentTabs = false) {
     const keys = profile === "a1" ? KeybindingsManager.fromOwnedBindings(bindings) : new KeybindingsManager(bindings);
     // Compatibility: the owned viewport consumes these physical chords before editor actions.
     const display = (action) => keys.getKeys(action)
@@ -180,6 +188,32 @@ export function hotkeysMarkdown(bindings, getShortcuts, profile) {
             : `\`${label}\``;
     }).join(" / ")} | ${description} |`;
     let markdown = ["**Navigation**", "| Key | Action |", "|-----|--------|", row(["tui.editor.cursorUp", "tui.editor.cursorDown", "tui.editor.cursorLeft", "tui.editor.cursorRight"], "Move cursor / browse history"), row(["tui.editor.cursorWordLeft", "tui.editor.cursorWordRight"], "Move by word"), row(["tui.editor.cursorLineStart"], profile === "a1" ? "Start of prompt line" : "Start of line"), row(["tui.editor.cursorLineEnd"], profile === "a1" ? "End of prompt line" : "End of line"), ...(profile === "a1" ? ["| `Ctrl+Home` | Start of content |", "| `Ctrl+End` | End of content / follow output |"] : []), row(["tui.editor.jumpForward"], "Jump forward to character"), row(["tui.editor.jumpBackward"], "Jump backward to character"), row(["tui.editor.pageUp", "tui.editor.pageDown"], "Scroll by page"), "", "**Editing**", "| Key | Action |", "|-----|--------|", row(["tui.input.submit"], "Send message"), row(["tui.input.newLine"], `New line${process.platform === "win32" ? " (Ctrl+Enter on Windows Terminal)" : ""}`), row(["tui.editor.deleteWordBackward"], "Delete word backwards"), row(["tui.editor.deleteWordForward"], "Delete word forwards"), row(["tui.editor.deleteToLineStart"], "Delete to start of line"), row(["tui.editor.deleteToLineEnd"], "Delete to end of line"), row(["tui.editor.yank"], "Paste the most-recently-deleted text"), row(["tui.editor.yankPop"], "Cycle through the deleted text after pasting"), row(["tui.editor.undo"], "Undo"), "", "**Other**", "| Key | Action |", "|-----|--------|", row(["tui.input.tab"], "Path completion / accept autocomplete"), row(["app.interrupt"], "Cancel autocomplete / abort streaming"), row(["app.clear"], "Clear editor (first) / exit (second)"), row(["app.exit"], "Exit (when editor is empty)"), row(["app.suspend"], "Suspend to background"), row(["app.thinking.cycle"], "Cycle thinking level"), row(["app.model.cycleForward", "app.model.cycleBackward"], "Cycle models"), row(["app.model.select"], profile === "a1" ? "Open the Models dialog" : "Open model selector"), row(["app.tools.expand"], "Toggle tool output expansion"), row(["app.thinking.toggle"], "Toggle thinking block visibility"), row(["app.editor.external"], "Edit message in external editor"), row(["app.message.copy"], "Copy selection or last assistant message"), row(["app.message.followUp"], "Queue follow-up message"), row(["app.message.dequeue"], "Restore queued messages"), row(["app.clipboard.pasteImage"], profile === "a1" ? "Paste image or text from clipboard" : "Paste files on macOS, images, or text from clipboard"), "| `/` | Slash commands |", "| `!` | Run bash command |", "| `!!` | Run bash command (excluded from context) |", ...(profile === "a1" ? ["", "**Models dialog**", "| Key | Action |", "|-----|--------|", "| `Space` | Toggle the selected model in the cycling scope |", "| `Tab` | Switch the all/scoped filter |", row(["app.models.save"], "Save the scope to settings"), row(["app.models.enableAll"], "Scope every listed model"), row(["app.models.clearAll"], "Clear the listed models from the scope"), row(["app.models.toggleProvider"], "Toggle the selected model's provider"), row(["app.models.reorderUp", "app.models.reorderDown"], "Reorder the cycling scope")] : [])].join("\n");
+    if (profile === "a1" && residentTabs) {
+        const configured = (bindings ?? {});
+        markdown += "\n\n**Tabs**\n| Key | Action |\n|-----|--------|\n";
+        const claimed = new Set();
+        for (const [action, value] of Object.entries(configured)) {
+            if (action.startsWith("tabs."))
+                continue;
+            const keys = typeof value === "string" ? [value] : Array.isArray(value) ? value : [];
+            for (const key of keys)
+                if (typeof key === "string")
+                    claimed.add(key.toLowerCase());
+        }
+        markdown += TAB_HOTKEYS.map(([id, defaultKey, description]) => {
+            const value = configured[id];
+            const assigned = (typeof value === "string" ? [value] : Array.isArray(value) ? value.filter((key) => typeof key === "string") : defaultKey === null ? [] : [defaultKey])
+                .filter(key => {
+                const normalized = key.toLowerCase();
+                if (claimed.has(normalized))
+                    return false;
+                claimed.add(normalized);
+                return true;
+            });
+            const label = assigned.length === 0 ? "Unbound" : `\`${assigned.map(shortcutDisplay).join("/")}\``;
+            return `| ${label} | ${description} |`;
+        }).join("\n");
+    }
     const shortcuts = getShortcuts(bindings ?? keys.getEffectiveConfig());
     if (shortcuts.length > 0) {
         markdown += "\n\n**Extensions**\n| Key | Action |\n|-----|--------|\n";

package/dist/integrations/pi/engine/adapter.d.ts

@@ -98,6 +98,7 @@ export declare class PiEngineAdapter implements OwnedUiSessionBackend, OwnedUiPr
     announceReleaseUpdate(release: OwnedUiReleaseUpdate): void;
     suggestionReasoningPolicy(): OwnedUiPromptSuggestionReasoning;
     generate(request: OwnedUiPromptSuggestionRequest): Promise<OwnedUiPromptSuggestionResult>;
+    generateResidentTabName(instruction: string, maxTokens: number, signal: AbortSignal): Promise<string | null>;
     start(): Promise<OwnedUiSessionViewModel>;
     /** Announce pinned Pi's changelog since the profile's last seen version; the host calls this once per process. */
     announceStartupChangelog(): Promise<void>;

package/dist/integrations/pi/engine/adapter.js

@@ -280,6 +280,9 @@ export class PiEngineAdapter {
     generate(request) {
         return this.#suggestions.generate(request);
     }
+    generateResidentTabName(instruction, maxTokens, signal) {
+        return this.#suggestions.completeInstruction(instruction, maxTokens, signal);
+    }
     async start() {
         if (this.#engine.started)
             return this.view();

package/dist/integrations/pi/engine/prompt-suggestions.d.ts

@@ -26,5 +26,6 @@ export declare class PiPromptSuggestions implements OwnedUiPromptSuggestionGener
     #private;
     constructor(ports: PiPromptSuggestionPorts);
     reasoningPolicy(): OwnedUiPromptSuggestionReasoning;
+    completeInstruction(instruction: string, maxTokens: number, signal: AbortSignal): Promise<string | null>;
     generate(request: OwnedUiPromptSuggestionRequest): Promise<OwnedUiPromptSuggestionResult>;
 }

package/dist/integrations/pi/engine/prompt-suggestions.js

@@ -20,6 +20,46 @@ export class PiPromptSuggestions {
         // Performance: the run's own level keeps the provider's thinking parameters, and the cached prefix, identical.
         return readSuggestionReasoning(session.thinkingLevel);
     }
+    async completeInstruction(instruction, maxTokens, signal) {
+        const session = this.#ports.session();
+        const runtime = this.#ports.runtime();
+        if (this.#ports.unavailable() || session === undefined || runtime === undefined || signal.aborted
+            || session.model === undefined || typeof runtime.services.modelRuntime.completeSimple !== "function")
+            return null;
+        const agent = session.agent;
+        try {
+            const transformed = typeof agent.transformContext === "function"
+                ? await agent.transformContext(agent.state.messages, signal)
+                : agent.state.messages;
+            const messages = typeof agent.convertToLlm === "function"
+                ? await agent.convertToLlm(transformed)
+                : transformed.filter(message => message.role === "user" || message.role === "assistant" || message.role === "toolResult");
+            const response = await runtime.services.modelRuntime.completeSimple(session.model, {
+                systemPrompt: agent.state.systemPrompt,
+                messages: [...messages, { role: "user", content: instruction, timestamp: Date.now() }],
+                tools: [],
+            }, {
+                signal,
+                maxTokens,
+                ...(agent.sessionId === undefined ? {} : { sessionId: agent.sessionId }),
+                ...(agent.transport === undefined ? {} : { transport: agent.transport }),
+                ...(agent.onPayload === undefined ? {} : { onPayload: agent.onPayload }),
+            });
+            if (signal.aborted || !isRecord(response) || response.stopReason === "aborted"
+                || response.stopReason === "error" || response.stopReason === "length"
+                || stringValue(response.errorMessage) !== undefined)
+                return null;
+            const content = Array.isArray(response.content) ? response.content : [];
+            if (content.some(block => isRecord(block) && block.type === "toolCall"))
+                return null;
+            const text = content.filter(block => isRecord(block) && block.type === "text")
+                .map(block => stringValue(block.text) ?? "").join("\n").trim();
+            return text || null;
+        }
+        catch {
+            return null;
+        }
+    }
     async generate(request) {
         assertOwnedUiPromptSuggestionRequest(request);
         const identity = request.identity;

package/dist/native/darwin-arm64/manifest.json

@@ -5,7 +5,7 @@
   "platform": "darwin",
   "architecture": "arm64",
   "capability": "supported",
-  "builtAt": "2026-10-14T05:01:03.252Z",
+  "builtAt": "2026-10-15T16:36:26.826Z",
   "artifact": {
     "filename": "process-guardian",
     "sha256": "51b0b2dc1c9ae577f2586c4217066929278726c2c15308d9144eb6f538e118ff",