@timurproko/a1 0.2.7-dev.820 → 0.2.7-dev.828

package/README.md

@@ -145,7 +145,13 @@ Stuck on `0.2.2` and `a1 update` fails? Run the installer once, then use `a1 upd
 npm x -y -- @timurproko/a1-install
 ```
 
-A1 shows an `Update Available` notice at most once a day and never installs anything by itself. Turn it off in Settings (`Update check`) or with `A1_SKIP_VERSION_CHECK=1`.
+The **Update** setting controls the at-most-daily startup check:
+
+- **Auto** (default) silently installs a verified update for the running channel, then shows `Update installed · Restart to update`.
+- **Notify** keeps the `Update Available` notice and leaves installation manual.
+- **No** performs no startup update check; updates remain available through the commands above.
+
+`A1_SKIP_VERSION_CHECK=1` also disables the startup check. Manual stable, development, and exact-version update commands remain available in every mode.
 
 <p align="center"><picture><source media="(prefers-color-scheme: dark)" srcset="docs/assets/readme/separator-dark.svg"><img src="docs/assets/readme/separator.svg" alt="" width="280"></picture></p>
 

package/bin/automatic-update.js

@@ -0,0 +1,7 @@
+#!/usr/bin/env node
+
+import("../dist/foundation/release/automatic-update.js").then(async ({ runAutomaticUpdateWorker }) => {
+  process.exitCode = await runAutomaticUpdateWorker(process.argv.slice(2));
+}).catch(() => {
+  process.exitCode = 1;
+});

package/bin/tab-launch-context.d.ts

@@ -2,6 +2,7 @@ export interface TabLaunchCredentials {
   readonly tabId: string;
   readonly token: string;
   readonly endpoint: string;
+  readonly releaseId?: string;
 }
 
 export function formatResidentFallbackNotice(reason: string): string;

package/bin/tab-launch-context.js

@@ -1,6 +1,6 @@
 import { existsSync } from "node:fs";
 
-const TAB_ENVIRONMENT_NAMES = ["A1_TAB_ID", "A1_TAB_TOKEN", "A1_TAB_ENDPOINT"];
+const TAB_ENVIRONMENT_NAMES = ["A1_TAB_ID", "A1_TAB_TOKEN", "A1_TAB_ENDPOINT", "A1_TAB_RELEASE_ID"];
 
 /** @param {string} reason */
 export function formatResidentFallbackNotice(reason) {
@@ -83,12 +83,12 @@ export function consumeTabLaunchContext(arguments_, environment) {
   const incarnationArgument = uiArguments.indexOf("--tab-incarnation");
   const tabIncarnation = incarnationArgument === -1 ? undefined : Number(uiArguments[incarnationArgument + 1]);
   if (incarnationArgument !== -1) uiArguments.splice(incarnationArgument, 2);
-  const [tabId, token, endpoint] = TAB_ENVIRONMENT_NAMES.map(name => environment[name]);
+  const [tabId, token, endpoint, releaseId] = TAB_ENVIRONMENT_NAMES.map(name => environment[name]);
   for (const name of TAB_ENVIRONMENT_NAMES) delete environment[name];
   if (!tabMode) return { uiArguments, tabCredentials: undefined, tabStandby: false };
   if (!tabId || !token || !endpoint || !tabDataDir || tabDataDir.includes("\0")
     || typeof tabIncarnation !== "number" || !Number.isSafeInteger(tabIncarnation) || tabIncarnation < 1) {
     throw new Error("A1 tab mode requires bridge credentials, recovery directory, and incarnation");
   }
-  return { uiArguments, tabCredentials: { tabId, token, endpoint }, tabDataDir, tabIncarnation, tabStandby };
+  return { uiArguments, tabCredentials: { tabId, token, endpoint, ...(releaseId === undefined ? {} : { releaseId }) }, tabDataDir, tabIncarnation, tabStandby };
 }

package/bin/ui.js

@@ -7,6 +7,9 @@ const { uiArguments, tabCredentials, tabDataDir, tabIncarnation, tabStandby } =
 // Invariant: one terminal module identity per process, decided before any A1 or Pi module loads.
 const { installPinnedPiTuiResolver } = await import("./module-resolver.js");
 installPinnedPiTuiResolver(new URL("..", import.meta.url).pathname.replace(/^\/(.:)/, "$1").replace(/\/$/, ""));
+const utilityRoute = tabCredentials === undefined
+  ? null
+  : (await import("../dist/foundation/resident-tabs/routes.js")).residentUtilityRoute(tabCredentials.tabId);
 const startup = await import("../dist/foundation/startup/startup-runtime.js");
 startup.enableEnvironmentCompileCache(process.env);
 const { hidesTabSettings, readLaunchContext } = await import("../dist/foundation/launch-context/index.js");
@@ -32,78 +35,105 @@ const fatal = profile === "a1" ? installFatalExit({
   ...(launchContext.releaseId === undefined ? {} : { releaseId: launchContext.releaseId }),
   dispose: () => runningApplication?.dispose(),
 }) : undefined;
-const [{ fileURLToPath }, identity, descriptor] = await Promise.all([
+const [{ fileURLToPath }, identity] = await Promise.all([
   import("node:url"),
   import("./module-identity.js"),
-  import("../dist/foundation/startup/startup-descriptor.js"),
 ]);
 const packageRootPath = fileURLToPath(new URL("..", import.meta.url));
 identity.configurePinnedPiPublicPackage(packageRootPath);
-// Performance: begin the exact launch graph together while the trace write is pending.
-// Direct owned-module entries avoid evaluating unrelated barrel exports before first paint.
-const modules = descriptor.loadDeclaredStartupGraph();
-await startup.markStartupPhase(process.env, "ui-entry");
-const [
-  { runSelectedInteractiveRuntime },
-  { parseSessionSelection },
-  { createConsoleProjectTrustPrompt },
-  { createConsoleSessionForkPrompt },
-  { runOwnedUi, terminateOwnedUiProcess },
-  { composeOwnedUi },
-] = await modules;
 
-if (tabStandby) await waitForStandbyPromotion(process.stdin, tabDataDir === undefined ? undefined : join(tabDataDir, "standby-promote"));
+// Compatibility: before either composition uses pinned Pi's terminal stack, confirm A1 and Pi
+// resolve it to the same copy so every owned screen shares one module identity.
+const assertPiTuiIdentity = () => identity.assertSinglePiTuiModuleAtLaunch(
+  packageRootPath,
+  (/** @type {string} */ message) => process.stderr.write(message),
+);
+
+if (utilityRoute !== null) {
+  if (profile !== "a1" || tabCredentials === undefined) throw new Error("utility tabs require the normal A1 tab profile");
+  await startup.markStartupPhase(process.env, "ui-entry");
+  assertPiTuiIdentity();
+  const utility = await import("../dist/composition/utility-tab.js");
+  await startup.markStartupPhase(process.env, "ui-modules-loaded");
+  const bridge = new (await import("../dist/foundation/resident-tabs/bridge-client.js")).TabBridgeClient({ credentials: tabCredentials });
+  completeRun(utility.runUtilityTab({
+    route: utilityRoute,
+    bridge,
+    cwd: process.cwd(),
+    profileId: profile,
+    onApplication: application => { runningApplication = application; },
+  }), utility.terminateOwnedUiProcess);
+} else {
+  const descriptor = await import("../dist/foundation/startup/startup-descriptor.js");
+  // Performance: begin the exact Agent launch graph together while the trace write is pending.
+  // Direct owned-module entries avoid evaluating unrelated barrel exports before first paint.
+  const modules = descriptor.loadDeclaredStartupGraph();
+  await startup.markStartupPhase(process.env, "ui-entry");
+  const [
+    { runSelectedInteractiveRuntime },
+    { parseSessionSelection },
+    { createConsoleProjectTrustPrompt },
+    { createConsoleSessionForkPrompt },
+    { runOwnedUi, terminateOwnedUiProcess },
+    { composeOwnedUi },
+  ] = await modules;
 
-// Compatibility: before the composition uses pinned Pi's terminal stack: confirm A1 and Pi
-// resolve it to the same copy, so extensions and the owned UI share one module identity.
-identity.assertSinglePiTuiModuleAtLaunch(packageRootPath, (/** @type {string} */ message) => process.stderr.write(message));
-await startup.markStartupPhase(process.env, "ui-modules-loaded");
+  if (tabStandby) await waitForStandbyPromotion(process.stdin, tabDataDir === undefined ? undefined : join(tabDataDir, "standby-promote"));
+  assertPiTuiIdentity();
+  await startup.markStartupPhase(process.env, "ui-modules-loaded");
+
+  const sessionSelection = parseSessionSelection(uiArguments);
+  completeRun(Promise.resolve().then(async () => {
+    const tab = tabCredentials === undefined ? undefined : {
+      bridge: new (await import("../dist/foundation/resident-tabs/bridge-client.js")).TabBridgeClient({ credentials: tabCredentials }),
+      dataDir: /** @type {string} */ (tabDataDir),
+      incarnation: /** @type {number} */ (tabIncarnation),
+    };
+    if (sessionSelection && profile !== "a1") throw new Error("session selection requires the normal A1 profile");
+    return runSelectedInteractiveRuntime(profile, {
+      ownedUi: async (profileId, ownedSurfaces) => {
+        const processInspector = ownedSurfaces
+          ? await import("../dist/foundation/process-containment/native-process-inspector.js")
+            .then(module => module.createNativeProcessInspector(process.env, process.platform, launchContext.releaseRoot))
+            .catch(() => null)
+          : null;
+        const { application, settings } = await composeOwnedUi({
+          cwd: process.cwd(),
+          profileId,
+          ownedSurfaces,
+          notificationVersion: launchContext.updateVersion,
+          ...(hidesTabSettings(launchContext) ? { hideTabSettings: true } : {}),
+          ...(processInspector === null ? {} : { inspectProcess: pid => processInspector.observe(pid) }),
+          projectTrustPrompt: createConsoleProjectTrustPrompt({ presentation: profile === "a1" ? "bare" : "comparison" }),
+          sessionForkPrompt: createConsoleSessionForkPrompt(),
+          ...(sessionSelection === undefined ? {} : { sessionSelection }),
+          ...(tab === undefined ? {} : { tab }),
+          ...(launchContext.residentFallback === undefined ? {} : {
+            residentFallbackNotice: formatResidentFallbackNotice(launchContext.residentFallback),
+          }),
+        });
+        runningApplication = application;
+        return await runOwnedUi({ application, ...(settings === null ? {} : { settings }) });
+      },
+    });
+  }), terminateOwnedUiProcess);
+}
 
-const sessionSelection = parseSessionSelection(uiArguments);
-Promise.resolve().then(async () => {
-  const tab = tabCredentials === undefined ? undefined : {
-    bridge: new (await import("../dist/foundation/resident-tabs/bridge-client.js")).TabBridgeClient({ credentials: tabCredentials }),
-    dataDir: /** @type {string} */ (tabDataDir),
-    incarnation: /** @type {number} */ (tabIncarnation),
-  };
-  if (sessionSelection && profile !== "a1") throw new Error("session selection requires the normal A1 profile");
-  return runSelectedInteractiveRuntime(profile, {
-    ownedUi: async (profileId, ownedSurfaces) => {
-      const processInspector = ownedSurfaces
-        ? await import("../dist/foundation/process-containment/native-process-inspector.js")
-          .then(module => module.createNativeProcessInspector(process.env, process.platform, launchContext.releaseRoot))
-          .catch(() => null)
-        : null;
-      const { application, settings } = await composeOwnedUi({
-        cwd: process.cwd(),
-        profileId,
-        ownedSurfaces,
-        ...(hidesTabSettings(launchContext) ? { hideTabSettings: true } : {}),
-        ...(processInspector === null ? {} : { inspectProcess: pid => processInspector.observe(pid) }),
-        projectTrustPrompt: createConsoleProjectTrustPrompt({ presentation: profile === "a1" ? "bare" : "comparison" }),
-        sessionForkPrompt: createConsoleSessionForkPrompt(),
-        ...(sessionSelection === undefined ? {} : { sessionSelection }),
-        ...(tab === undefined ? {} : { tab }),
-        ...(launchContext.residentFallback === undefined ? {} : {
-          residentFallbackNotice: formatResidentFallbackNotice(launchContext.residentFallback),
-        }),
-      });
-      runningApplication = application;
-      return await runOwnedUi({ application, ...(settings === null ? {} : { settings }) });
+/** @param {Promise<number>} run @param {(code: number) => Promise<never>} terminate */
+function completeRun(run, terminate) {
+  run.then(
+    code => {
+      fatal?.remove();
+      return terminate(code);
     },
-  });
-}).then(
-  code => {
-    fatal?.remove();
-    return terminateOwnedUiProcess(code);
-  },
-  error => {
-    const sessionSelectionError = error?.name === "PiSessionSelectionError";
-    const trustExit = error?.name === "ProjectTrustPromptExitError";
-    if (fatal && !sessionSelectionError && !trustExit) { fatal.fail(error); return; }
-    fatal?.remove();
-    if (trustExit) return terminateOwnedUiProcess(error.exitCode);
-    console.error(error instanceof Error ? error.message : String(error));
-    process.exitCode = sessionSelectionError ? error.exitCode : 1;
-  },
-);
+    error => {
+      const sessionSelectionError = error?.name === "PiSessionSelectionError";
+      const trustExit = error?.name === "ProjectTrustPromptExitError";
+      if (fatal && !sessionSelectionError && !trustExit) { fatal.fail(error); return; }
+      fatal?.remove();
+      if (trustExit) return terminate(error.exitCode);
+      console.error(error instanceof Error ? error.message : String(error));
+      process.exitCode = sessionSelectionError ? error.exitCode : 1;
+    },
+  );
+}

package/dist/app/session-shell/session-shell-root.d.ts

@@ -116,6 +116,13 @@ export interface OwnedUiShellPresentationOptions {
 /** Persistent prompt history: its store, its bound, the editor that recalls it, and the image sidecar. */
 export interface OwnedUiShellHistoryOptions {
     readonly store: import("../../contracts/owned-ui/index.js").PromptHistoryPort;
+    /** When present, session replacement selects a new store and sidecar, not the old session's recall. */
+    readonly sessionId?: string;
+    readonly scope?: "unique" | "shared";
+    readonly forSession?: (sessionId: string) => Pick<OwnedUiShellHistoryOptions, "store" | "imageSidecar">;
+    /** A live scope change selects the matching store for this session without copying records. */
+    readonly forScope?: (scope: "unique" | "shared", sessionId: string | null) => Pick<OwnedUiShellHistoryOptions, "store" | "imageSidecar"> | null;
+    readonly onScopeChange?: (listener: (scope: "unique" | "shared") => void) => () => void;
     readonly limit: number;
     readonly editor: import("../../integrations/pi/components/index.js").HistoryEditorConstructor;
     /** Optional per-profile filesystem sidecar for image chip payloads. When present, submit
@@ -165,19 +172,19 @@ export interface OwnedUiShellSharedServices {
 /** What composes an owned session shell, grouped by the collaborator that provides each part. */
 export interface OwnedUiSessionShellOptions {
     readonly engine: OwnedUiShellEngineOptions;
-    /** Opens the selectors and resolves the transcript renderers whose inputs are engine objects. */
+    /** Resolves selectors and engine-backed transcript renderers. */
     readonly presenters: OwnedUiSessionPresenters;
     readonly presentation?: OwnedUiShellPresentationOptions;
     readonly history?: OwnedUiShellHistoryOptions;
     readonly suggestions?: OwnedUiShellSuggestionOptions;
-    /** Supplied only to bare A1; absent retains the fixed eight-image comparison policy. */
+    /** Bare A1 only; absent keeps the eight-image comparison limit. */
     readonly promptImages?: OwnedUiShellPromptImagesOptions;
-    /** Supplied only to the bare-A1 composition; absent keeps the pinned per-skill command list. */
+    /** Bare A1 only; absent keeps pinned per-skill commands. */
     readonly skills?: OwnedUiShellSkillsOptions;
     readonly diagnostics?: OwnedUiShellDiagnosticOptions;
     readonly shared?: OwnedUiShellSharedServices;
 }
-/** Composes backend session state into the owned transcript, viewport, editor, and dock presentation. */
+/** Composes session state into the owned transcript, viewport, editor, and dock. */
 export declare class OwnedUiSessionShellRoot implements PiTuiComponentPort {
     #private;
     readonly editor: PiShellEditorPort;
@@ -191,7 +198,7 @@ export declare class OwnedUiSessionShellRoot implements PiTuiComponentPort {
         readonly requestHyperlinkCleanup?: (rows?: readonly number[]) => void;
         readonly enableDockInputReuse?: boolean;
         readonly persistentHistory?: boolean;
-        readonly hideSettingsCommand?: boolean;
+        readonly hideUtilityTabCommands?: boolean;
         readonly historyEditor?: import("../../integrations/pi/components/index.js").HistoryEditorConstructor;
         readonly onSubmit: (text: string) => void;
         readonly onPasteRejected?: (error: unknown) => void;
@@ -217,7 +224,7 @@ export declare class OwnedUiSessionShellRoot implements PiTuiComponentPort {
         readonly keybindings?: PiKeybindingsHost;
         readonly promptImageLimit?: () => number;
         readonly skillsPresentation?: () => "collapse" | "expand";
-        /** A resident tab chip already shows the session name, so its footer omits the duplicate. */
+        /** Resident tab chips already show the session name. */
         readonly footerSessionName?: boolean;
     }, startup?: PiShellHeaderOptions, agentDir?: string, extensionRenderers?: OwnedUiTranscriptRendererPort, sessionLayout?: "pinned" | "custom-viewport", imageAssets?: PiShellImageAssetResolver);
     setEditorPaddingX(padding: number): void;

package/dist/app/session-shell/session-shell-root.js

@@ -6,7 +6,7 @@ import { progressStatusFrame, progressStatusText } from "../../ui/components/pro
 import { createPiQueuedInputStatus, createPiShellFooter, createPiShellHeader, createPiShellLoadedResources, createPiShellStatus, } from "../../integrations/pi/components/shell-footer-status.js";
 import { createPiShellTranscriptComponent, } from "../../integrations/pi/components/shell-presenters-transcript.js";
 import { onPiThemeChange, piTheme } from "../../integrations/pi/components/upstream/theme/theme.js";
-import {} from "../../integrations/pi/components/shell-shared-facade.js";
+import { piShellTruncateToWidth, } from "../../integrations/pi/components/shell-shared-facade.js";
 import {} from "../../integrations/pi/tui-runtime/input-presentation-coordinator.js";
 import { PromptChipStore } from "./prompt-chips.js";
 import { SessionViewportController } from "./session-viewport-controller.js";
@@ -18,7 +18,7 @@ import { InputSurfaceSwitch } from "./input-surface-switch.js";
 import { PinnedLayout } from "./shell-layout.js";
 import { ViewportLayout } from "./viewport-layout.js";
 import { nativeTranscriptLinkColor, TranscriptDocument } from "./transcript-document.js";
-/** Composes backend session state into the owned transcript, viewport, editor, and dock presentation. */
+/** Composes session state into the owned transcript, viewport, editor, and dock. */
 export class OwnedUiSessionShellRoot {
     editor;
     header;
@@ -128,8 +128,8 @@ export class OwnedUiSessionShellRoot {
                 this.editor.addToHistory(block.text);
         }
         this.#document.sync(view.transcript);
-        // Invariant: colours come from the active theme, so rendered rows outlive their revision only
-        // until the theme under them changes.
+        // Invariant: rendered rows expire when
+        // their active theme changes.
         this.#themeUnsubscribe = onPiThemeChange(() => {
             this.invalidate();
             this.#componentRuntime.requestRender(true);
@@ -607,7 +607,11 @@ export class OwnedUiSessionShellRoot {
         return this.#customViewport ? this.#status.renderLive(width) : this.#status.render(width);
     }
     #renderFooter(width) {
-        return (this.#extensions.footer ?? this.#footer).render(width);
+        const footer = this.#extensions.footer ?? this.#footer;
+        if (!this.#customViewport)
+            return footer.render(width);
+        width = Math.max(0, width - 2);
+        return footer.render(width).map(row => ` ${piShellTruncateToWidth(row, width)}`);
     }
     #setToolsExpanded(expanded) {
         this.#toolsExpanded = expanded;

package/dist/app/session-shell/session-shell.js

@@ -27,6 +27,12 @@ import { writeSystemClipboardText, } from "./system-clipboard.js";
 import { OwnedUiSessionShellRoot, shellResourceEntries, } from "./session-shell-root.js";
 // Invariant: a disposed shell leaves the engine a host that holds no reference back to it.
 const DETACHED_WORKFLOW_INTERACTION = { prompt: async () => null, notify() { } };
+/** Resident Agents refuse the commands their tab bar serves instead, naming where they live. */
+const RESIDENT_UTILITY_TAB_REFUSALS = Object.freeze({
+    settings: "Settings is available from the global Settings tab.",
+    changelog: "The changelog opens as its own tab from the command palette (Alt+/).",
+    name: "Rename the session by renaming its tab (F2).",
+});
 export { OwnedUiSessionShellRoot, } from "./session-shell-root.js";
 export { OwnedUiTerminalHost, sessionTerminalHostOptions } from "./shell-host.js";
 export { formatSessionResumeCommand, quoteCommandArgument } from "./session-lifecycle.js";
@@ -55,7 +61,7 @@ export class OwnedUiSessionPresenter {
     #unsubscribeSkills;
     #installedCommandSignature = "";
     #promptHistory = null;
-    #promptHistoryImageSidecar;
+    #historyBinding;
     #extensionBridge;
     #stop = new SessionStopLatch();
     #dialogs;
@@ -169,7 +175,7 @@ export class OwnedUiSessionPresenter {
                 }),
                 enableDockInputReuse: inputPresentation?.viewportReuse !== false,
                 footerSessionName: options.engine.residentTab === undefined,
-                hideSettingsCommand: options.engine.residentTab !== undefined,
+                hideUtilityTabCommands: options.engine.residentTab !== undefined,
                 persistentHistory: this.#customViewport && promptHistory !== undefined,
                 ...(promptHistory === undefined ? {} : { historyEditor: promptHistory.editor }),
                 onSubmit: text => { void this.submit(text).catch(() => this.#submission.reportError()); },
@@ -316,9 +322,10 @@ export class OwnedUiSessionPresenter {
                 });
             };
             applyViewportSettings();
-            this.#unsubscribeSettings = this.#customViewport && viewportSettings
-                ? viewportSettings.onChange(settings => this.root.setViewportConfig(settings))
-                : () => { };
+            const unsubscribeViewport = this.#customViewport && viewportSettings ? viewportSettings.onChange(settings => this.root.setViewportConfig(settings)) : () => { };
+            const unsubscribeHistoryScope = this.#customViewport && promptHistory?.onScopeChange?.(scope => this.#rebindTranscript(scope));
+            this.#unsubscribeSettings = () => { unsubscribeViewport(); if (unsubscribeHistoryScope)
+                unsubscribeHistoryScope(); };
             constructed.push(this.#unsubscribeSettings);
             this.#unbindSessionSettings = bindSessionSettings(this.backend.settings, initialPiSettings, {
                 terminal: this.#terminal,
@@ -331,8 +338,7 @@ export class OwnedUiSessionPresenter {
             }, { customViewport: this.#customViewport });
             constructed.push(this.#unbindSessionSettings);
             if (this.#customViewport && promptHistory !== undefined) {
-                this.#promptHistoryImageSidecar = promptHistory.imageSidecar;
-                const sidecar = this.#promptHistoryImageSidecar;
+                this.#historyBinding = { options: promptHistory, scope: promptHistory.scope ?? "unique", sessionId: promptHistory.sessionId, imageSidecar: promptHistory.imageSidecar };
                 this.#promptHistory = new PromptHistoryController({
                     editor: this.root.editor,
                     store: promptHistory.store,
@@ -340,7 +346,7 @@ export class OwnedUiSessionPresenter {
                     fallback: this.view().transcript.flatMap(block => block.kind === "user" ? [block.text] : []),
                     active: () => this.root.usesDefaultInputSurface(),
                     render: () => this.#terminal.requestRender(),
-                    rehydrate: value => this.root.rehydrateHistoryText(value, id => sidecar?.readAttachment(id) ?? null),
+                    rehydrate: value => this.root.rehydrateHistoryText(value, id => this.#historyBinding?.imageSidecar?.readAttachment(id) ?? null),
                 });
                 constructed.push(() => { void this.#promptHistory?.close().catch(() => false); });
             }
@@ -1154,7 +1160,7 @@ export class OwnedUiSessionPresenter {
             residentTab: this.#resident,
             cwd,
             promptHistory: () => this.#promptHistory,
-            imageSidecar: () => this.#promptHistoryImageSidecar,
+            imageSidecar: () => this.#historyBinding?.imageSidecar,
             disposed: () => this.#disposed,
             correlation: prefix => this.#correlation(prefix),
             lifecycle: () => this.view().lifecycle,
@@ -1183,13 +1189,57 @@ export class OwnedUiSessionPresenter {
             this.#resident,
         ]);
     }
-    // Invariant: delivery recovery invalidates callbacks, not same-session local recall or its draft.
-    #rebindTranscript() {
-        if (this.#sessionBindingGeneration === this.backend.identity.sessionBindingGeneration)
+    // Invariant: delivery recovery does not replace a store; conversation or live scope changes can.
+    #rebindTranscript(scope) {
+        const replaced = this.#sessionBindingGeneration !== this.backend.identity.sessionBindingGeneration;
+        if (!replaced && scope === undefined)
             return;
-        this.#sessionBindingGeneration = this.backend.identity.sessionBindingGeneration;
-        this.root.resetTranscript();
-        this.#promptHistory?.reset(this.view().transcript.flatMap(block => block.kind === "user" ? [block.text] : []));
+        if (replaced) {
+            this.#sessionBindingGeneration = this.backend.identity.sessionBindingGeneration;
+            this.root.resetTranscript();
+        }
+        const binding = this.#historyBinding;
+        if (binding?.options.forSession !== undefined || binding?.options.forScope !== undefined) {
+            const sessionId = this.backend.identity.currentHistorySessionId();
+            const selectedScope = scope ?? binding.scope;
+            if (selectedScope !== binding.scope || sessionId !== binding.sessionId) {
+                if (!replaced)
+                    this.root.editor.recall?.restoreDraft?.();
+                const previous = this.#promptHistory;
+                this.#promptHistory = null;
+                binding.imageSidecar = undefined;
+                binding.scope = selectedScope;
+                binding.sessionId = sessionId ?? undefined;
+                void previous?.close().catch(() => false);
+                const destination = binding.options.forScope !== undefined
+                    ? binding.options.forScope(selectedScope, sessionId)
+                    : sessionId === null ? null : binding.options.forSession(sessionId);
+                if (destination !== null) {
+                    binding.imageSidecar = destination.imageSidecar;
+                    const controller = new PromptHistoryController({
+                        editor: this.root.editor,
+                        store: destination.store,
+                        limit: binding.options.limit,
+                        fallback: replaced ? this.view().transcript.flatMap(block => block.kind === "user" ? [block.text] : []) : [],
+                        active: () => this.root.usesDefaultInputSurface(),
+                        render: () => this.#terminal.requestRender(),
+                        rehydrate: value => this.root.rehydrateHistoryText(value, id => this.#historyBinding?.imageSidecar?.readAttachment(id) ?? null),
+                    });
+                    this.#promptHistory = controller;
+                    if (this.#started)
+                        controller.start();
+                }
+                else {
+                    // Security: missing identity must not reopen Shared or retain another session's recall.
+                    const fallback = replaced ? this.view().transcript.flatMap(block => block.kind === "user" ? [block.text] : []).reverse() : [];
+                    this.root.editor.recall?.reset();
+                    this.root.editor.recall?.replace(fallback);
+                }
+                return;
+            }
+        }
+        if (replaced)
+            this.#promptHistory?.reset(this.view().transcript.flatMap(block => block.kind === "user" ? [block.text] : []));
     }
     #syncTerminalProgress(view) {
         if (!this.#terminal.running)
@@ -1254,9 +1304,9 @@ export class OwnedUiSessionPresenter {
         const separator = body.search(/\s/);
         const name = separator < 0 ? body : body.slice(0, separator);
         const argument = separator < 0 ? "" : body.slice(separator + 1).trimStart();
-        if (name === "settings" && this.#resident.active) {
-            return rejected("Settings is available from the global Settings tab.");
-        }
+        const utilityTab = this.#resident.active ? RESIDENT_UTILITY_TAB_REFUSALS[name] : undefined;
+        if (utilityTab !== undefined)
+            return rejected(utilityTab);
         if (this.#dialogs.claimsRoute(name))
             return this.#dialogs.openRoute(name);
         if (this.#isWorkflowRoute(name))

package/dist/app/session-shell/shell-host.js

@@ -102,10 +102,13 @@ export class OwnedUiTerminalHost {
                     },
                 }),
             } : { layoutRoot: pinnedLayoutRoot(this.#delegatingLayoutParts()) }),
-            ...(input?.onEvent === undefined ? {} : {
+            ...(input?.onEvent === undefined && progressObserver === null ? {} : {
                 inputDiagnostics: {
-                    onEvent: input.onEvent,
-                    ...(input.now === undefined ? {} : { now: input.now }),
+                    onEvent: event => {
+                        input?.onEvent?.(event);
+                        progressObserver?.inputPhase?.(event.phase, event.revision);
+                    },
+                    ...(input?.now === undefined ? {} : { now: input.now }),
                 },
             }),
             ...(options.terminal === undefined ? {} : { terminal: options.terminal }),

package/dist/app/session-shell/transcript-document.js

@@ -260,7 +260,7 @@ export class TranscriptDocument {
                 : createPiShellChangelog(diagnostic.message).render(width)));
         rows.push(...diagnostics
             .filter(diagnostic => diagnostic.code !== "engine-startup" && diagnostic.code !== "project-trust"
-            && diagnostic.code !== "release-update"
+            && diagnostic.code !== "release-update" && diagnostic.code !== "release-update-installed"
             && diagnostic.code !== "package-updates" && diagnostic.code !== "changelog-collapsed"
             && diagnostic.code !== "changelog-expanded")
             .slice(-3)

package/dist/cli/tabs.d.ts

@@ -2,7 +2,7 @@ import { runTerminalHostMaintenance, writeDoctorBundle } from "../foundation/res
 import type { TabsRequest } from "./tabs-request.js";
 export type { TabsRequest } from "./tabs-request.js";
 export interface TabsCommandOptions {
-    /** The running package root; its terminal host is a candidate after the active release. */
+    /** The invoking package, never a different active or retained release. */
     readonly packageRoot?: string;
     readonly environment?: NodeJS.ProcessEnv;
     readonly stdout?: (message: string) => void;

package/dist/cli/tabs.js

@@ -1,5 +1,5 @@
 import { resolveProductPaths } from "../foundation/lifecycle/index.js";
-import { CohortStateStore } from "../foundation/release/index.js";
+import { materializeRelease } from "../foundation/release/index.js";
 import { readResidentTabLaunchSettings, runTerminalHostMaintenance, writeDoctorBundle, } from "../foundation/resident-tabs/index.js";
 import { PRODUCT_IDENTITY, PRODUCT_TEXT } from "../product-identity.js";
 /** `a1 tabs`: inspect or stop resident tabs without attaching, and never start a host to report state. */
@@ -9,7 +9,7 @@ export async function runTabsCommand(request, options = {}) {
     const stderr = options.stderr ?? (message => process.stderr.write(message));
     const paths = resolveProductPaths(environment);
     const profileRoot = environment[PRODUCT_IDENTITY.environment.profileHome] ?? paths.configDir;
-    const releaseRoots = await installedReleaseRoots(paths.dataDir, options.packageRoot);
+    const releaseRoots = await invokingReleaseRoots(paths.dataDir, options.packageRoot, environment);
     const maintenance = options.maintenance ?? runTerminalHostMaintenance;
     const report = await maintenance({
         action: request.action === "doctor" ? "host-status" : request.action,
@@ -51,22 +51,18 @@ export async function runTabsCommand(request, options = {}) {
     }
     return report.exitCode === 0 ? 0 : 1;
 }
-async function installedReleaseRoots(dataDir, packageRoot) {
-    const roots = [];
+async function invokingReleaseRoots(dataDir, packageRoot, environment) {
+    if (!packageRoot)
+        return [];
+    if (environment[PRODUCT_IDENTITY.environment.developmentInstanceId])
+        return [packageRoot];
     try {
-        const state = await new CohortStateStore(dataDir).read();
-        for (const id of [state.references.active, state.references.rollback]) {
-            if (id && state.releases[id])
-                roots.push(state.releases[id].releaseRoot);
-        }
-        roots.push(...Object.values(state.releases).map(record => record.releaseRoot));
+        // Invariant: immutable materialization selects exact payload bytes without activating or starting a host.
+        return [(await materializeRelease(packageRoot, dataDir)).releaseRoot];
     }
     catch {
-        // Rationale: unreadable release state still leaves the running package's own host.
+        return [];
     }
-    if (packageRoot)
-        roots.push(packageRoot);
-    return [...new Set(roots)];
 }
 const NO_TABS = "No resident tabs are running.\n";
 function describe(request, report) {

package/dist/composition/owned-settings.d.ts

@@ -0,0 +1,12 @@
+import type { AgentSettingsPort } from "../contracts/agent-engine/index.js";
+import { OwnedSettingsManager } from "../ui/settings/manager.js";
+export interface OwnedSettingsManagerFactoryOptions {
+    readonly profileId: string;
+    readonly hideTabSettings?: boolean;
+    readonly agent?: AgentSettingsPort | null;
+    readonly agentProvider?: () => AgentSettingsPort | null;
+}
+/** Builds the profile-global settings manager shared by the Agent and slim utility compositions. */
+export declare function createOwnedSettingsManager(options: OwnedSettingsManagerFactoryOptions): OwnedSettingsManager;
+/** Rereads the shared settings document whenever its stat changes; returns the stop. */
+export declare function watchSharedSettings(settings: Pick<OwnedSettingsManager, "file" | "refresh">): () => void;

package/dist/composition/owned-settings.js

@@ -0,0 +1,36 @@
+import { unwatchFile, watchFile } from "node:fs";
+import { resolveLaunchProfilePaths } from "../features/launch/profile-paths.js";
+import { resolveProductPaths } from "../foundation/lifecycle/paths.js";
+import { PRODUCT_IDENTITY } from "../product-identity.js";
+import { OwnedSettingsManager } from "../ui/settings/manager.js";
+/** Builds the profile-global settings manager shared by the Agent and slim utility compositions. */
+export function createOwnedSettingsManager(options) {
+    const profilePaths = resolveLaunchProfilePaths();
+    const productPaths = resolveProductPaths();
+    return new OwnedSettingsManager({
+        profileDir: profilePaths.agentProfile,
+        profileId: options.profileId,
+        namespace: PRODUCT_IDENTITY.commandName,
+        legacyConfigDir: productPaths.configDir,
+        ...(options.agent === undefined ? {} : { agent: options.agent }),
+        ...(options.agentProvider === undefined ? {} : { agentProvider: options.agentProvider }),
+        ...(options.hideTabSettings ? { hiddenOwnedSettingIds: ["tabsAutoName", "tabsPosition", "tabBarPlusMenu"] } : {}),
+        hiddenAgentSettingIds: ["fullscreenWheelScrollLines"],
+        agentSettingLabelOverrides: { fullscreenCopyOnSelect: "Copy on select" },
+    });
+}
+const SHARED_SETTINGS_POLL_MS = 250;
+/** Rereads the shared settings document whenever its stat changes; returns the stop. */
+export function watchSharedSettings(settings) {
+    const file = settings.file;
+    const listener = () => {
+        try {
+            settings.refresh();
+        }
+        catch {
+            // Compatibility: an unreadable peer write resolves on the next stat change.
+        }
+    };
+    watchFile(file, { interval: SHARED_SETTINGS_POLL_MS, persistent: false }, listener);
+    return () => unwatchFile(file, listener);
+}