@xingular/harness 0.1.5 → 0.1.7

package/docs/evidence/terminal-2026-10-17-followup/verification.json

@@ -0,0 +1,207 @@
+{
+  "passed": true,
+  "implementation": "production standalone CLI + real Pi SDK + loopback OpenAI SSE transport",
+  "cli": "/Users/tanny/Documents/Projects/Xingular/Xingular Agent/Harness/dist/cli.js",
+  "cliSha256": "2f5df943661a1e89440d0e81d59cd4a5bdb7aaf087a2a930e232b6743d5db093",
+  "verifierSha256": "6b7652f0093b12a37bd975fcffa7accc0f34d627022397b7e45923be270abc85",
+  "provider": "controlled loopback OpenAI-compatible streaming transport; no external model requests or user credentials",
+  "requestCount": 39,
+  "profiles": [
+    {
+      "size": "40x20",
+      "checks": [
+        "welcome and real configured model",
+        "actual settings tabs, section focus, keyboard search/control and Escape return",
+        "command autocomplete and real accounts selector",
+        "suspend/resume restores cooked/raw terminal modes and command input",
+        "Unicode, real streaming/thinking/read/bash/approval/question, expansion, resizing and scrolling",
+        "trusted plugin custom overlay, widget, status and disposal",
+        "grouped question progress and atomic choice/text answers through real registry",
+        "approval deny and Escape cancellation prevent actual tool execution",
+        "question Escape cancellation settles pending tools and interrupts run",
+        "new session, explicit scoped resume and session naming",
+        "actual stream cancellation and interrupted run record",
+        "explicit account switching, process restart and real run on newly pinned account",
+        "fatal asynchronous plugin failure exits 1 and restores terminal modes",
+        "plugin startup failure exits 1 and restores terminal modes"
+      ],
+      "persistedRunCount": 7,
+      "exitCode": 0,
+      "termiosRestored": true,
+      "bracketedPasteDisabled": true,
+      "cursorShown": true,
+      "fatalCleanup": {
+        "exitCode": 1,
+        "termiosRestored": true,
+        "bracketedPasteDisabled": true,
+        "cursorShown": true
+      },
+      "startupCleanup": {
+        "exitCode": 1,
+        "termiosRestored": true,
+        "bracketedPasteDisabled": true,
+        "cursorShown": true
+      }
+    },
+    {
+      "size": "80x24",
+      "checks": [
+        "welcome and real configured model",
+        "actual settings tabs, section focus, keyboard search/control and Escape return",
+        "command autocomplete and real accounts selector",
+        "suspend/resume restores cooked/raw terminal modes and command input",
+        "Unicode, real streaming/thinking/read/bash/approval/question, expansion, resizing and scrolling",
+        "trusted plugin custom overlay, widget, status and disposal",
+        "grouped question progress and atomic choice/text answers through real registry",
+        "approval deny and Escape cancellation prevent actual tool execution",
+        "question Escape cancellation settles pending tools and interrupts run",
+        "new session, explicit scoped resume and session naming",
+        "actual stream cancellation and interrupted run record",
+        "explicit account switching, process restart and real run on newly pinned account",
+        "fatal asynchronous plugin failure exits 1 and restores terminal modes",
+        "plugin startup failure exits 1 and restores terminal modes"
+      ],
+      "persistedRunCount": 7,
+      "exitCode": 0,
+      "termiosRestored": true,
+      "bracketedPasteDisabled": true,
+      "cursorShown": true,
+      "fatalCleanup": {
+        "exitCode": 1,
+        "termiosRestored": true,
+        "bracketedPasteDisabled": true,
+        "cursorShown": true
+      },
+      "startupCleanup": {
+        "exitCode": 1,
+        "termiosRestored": true,
+        "bracketedPasteDisabled": true,
+        "cursorShown": true
+      }
+    },
+    {
+      "size": "120x40",
+      "checks": [
+        "welcome and real configured model",
+        "actual settings tabs, section focus, keyboard search/control and Escape return",
+        "command autocomplete and real accounts selector",
+        "suspend/resume restores cooked/raw terminal modes and command input",
+        "Unicode, real streaming/thinking/read/bash/approval/question, expansion, resizing and scrolling",
+        "trusted plugin custom overlay, widget, status and disposal",
+        "grouped question progress and atomic choice/text answers through real registry",
+        "approval deny and Escape cancellation prevent actual tool execution",
+        "question Escape cancellation settles pending tools and interrupts run",
+        "new session, explicit scoped resume and session naming",
+        "actual stream cancellation and interrupted run record",
+        "explicit account switching, process restart and real run on newly pinned account",
+        "fatal asynchronous plugin failure exits 1 and restores terminal modes",
+        "plugin startup failure exits 1 and restores terminal modes"
+      ],
+      "persistedRunCount": 7,
+      "exitCode": 0,
+      "termiosRestored": true,
+      "bracketedPasteDisabled": true,
+      "cursorShown": true,
+      "fatalCleanup": {
+        "exitCode": 1,
+        "termiosRestored": true,
+        "bracketedPasteDisabled": true,
+        "cursorShown": true
+      },
+      "startupCleanup": {
+        "exitCode": 1,
+        "termiosRestored": true,
+        "bracketedPasteDisabled": true,
+        "cursorShown": true
+      }
+    }
+  ],
+  "captures": [
+    {
+      "file": "40x20-welcome.ansi.gz",
+      "kind": "actual PTY cumulative raw ANSI stream",
+      "columns": 40,
+      "rows": 20,
+      "rawBytes": 3085,
+      "rawSha256": "5ad9d6b7743730c00331865a713ade17a96d8a82254073eff8f7123f78ba0dfd",
+      "archiveBytes": 647,
+      "archiveSha256": "4e1d09e9e2b8ab6dd716c27342cb427e6d327b4517b2d5a1f9d6abe507ae6150"
+    },
+    {
+      "file": "40x20-settings-interaction.ansi.gz",
+      "kind": "actual PTY cumulative raw ANSI stream",
+      "columns": 40,
+      "rows": 20,
+      "rawBytes": 10579,
+      "rawSha256": "6e8cb197fd6444abd5b34500d14d36def96d945f6ffe75b70c107511a2fc6f92",
+      "archiveBytes": 1250,
+      "archiveSha256": "33227bf1354591624311e69f016862cea964aeb0d2cf6af0274bc8c49b6aa39c"
+    },
+    {
+      "file": "40x20-settings-keyboard.ansi.gz",
+      "kind": "actual PTY cumulative raw ANSI stream",
+      "columns": 40,
+      "rows": 20,
+      "rawBytes": 12779,
+      "rawSha256": "6071b778e316c86fdc6976ac024faffcf75221ba1043dfbd524e32cfcdff5e79",
+      "archiveBytes": 1387,
+      "archiveSha256": "722b555638b343520b7896527fb9287c71a2a9ba55e9a2f7c1ea573058db3a22"
+    },
+    {
+      "file": "80x24-approval-0.ansi.gz",
+      "kind": "actual PTY cumulative raw ANSI stream",
+      "columns": 80,
+      "rows": 24,
+      "rawBytes": 63082,
+      "rawSha256": "d182c53020bc8f9dae3b3f910ab78bbccae229b41fb927983b26b9352e13c7d1",
+      "archiveBytes": 5420,
+      "archiveSha256": "c00dd2d226ff8d0d8455311b903791dff1a4fc2b9fc4921ffc08837290570c99"
+    },
+    {
+      "file": "80x24-question.ansi.gz",
+      "kind": "actual PTY cumulative raw ANSI stream",
+      "columns": 80,
+      "rows": 24,
+      "rawBytes": 73627,
+      "rawSha256": "50c7fc4da8748ddcd2868007cf944e2294a9d55d035c60ad30cbe8820068682e",
+      "archiveBytes": 5834,
+      "archiveSha256": "d5371974389a6f99758d3d4e3bc820a69a48aa05fe344b3d0f4d3143cdd44298"
+    },
+    {
+      "file": "80x24-plugin-light.ansi.gz",
+      "kind": "actual PTY cumulative raw ANSI stream",
+      "columns": 120,
+      "rows": 30,
+      "rawBytes": 118891,
+      "rawSha256": "089d74da63cf763e1a06faf0264966d5b8d788518eda880ed91fb556fe844ab5",
+      "archiveBytes": 7618,
+      "archiveSha256": "55fe9f7742387b7e10692711daef697fe1f55af76486554c40290eb039c4a1fa"
+    },
+    {
+      "file": "80x24-question-batch.ansi.gz",
+      "kind": "actual PTY cumulative raw ANSI stream",
+      "columns": 120,
+      "rows": 30,
+      "rawBytes": 169983,
+      "rawSha256": "aee0560c4fb6bb878d187827ab8c40ceee81dda1022a98f663f8bb079e9bc2f6",
+      "archiveBytes": 8742,
+      "archiveSha256": "11ae7c4c7b3991014dbef17d126608104661c0776198e51e519ba35ad557dd35"
+    },
+    {
+      "file": "120x40-completed-transcript.ansi.gz",
+      "kind": "actual PTY cumulative raw ANSI stream",
+      "columns": 120,
+      "rows": 40,
+      "rawBytes": 140149,
+      "rawSha256": "abdbba2e7db4a94d25b82826539e1acbb9e59be7bb9d15167eeeee8f3838644d",
+      "archiveBytes": 7935,
+      "archiveSha256": "2f79e0637ed13a1fbf69d237eb2e644939fd4e3bb5cb257e5b6910fb19981012"
+    }
+  ],
+  "limits": [
+    "The AgentSession, frontend, native tools, authorization and run writer are production code.",
+    "The controlled local transport supplies deterministic model responses and usage fixtures.",
+    "These functional checks do not establish external provider OAuth/service availability or visual equivalence to OMP.",
+    "Each compressed capture is a cumulative actual ANSI stream from PTY startup through the named interaction. Replay at its recorded dimensions."
+  ]
+}

package/docs/terminal-tui.md

@@ -0,0 +1,254 @@
+# Harness terminal frontend
+
+Status: implemented in the working tree; publication is separate. Last updated: 2026-10-17.
+Decision: [ADR-0001](decisions/ADR-0001-owned-terminal.md).
+
+## Ownership and process boundary
+
+Harness owns its interactive terminal application in [`src/terminal/tui/`](../src/terminal/tui/).
+[`TerminalApplication`](../src/terminal/tui/application.ts) owns terminal lifecycle, screen
+composition, focus, input dispatch, scrolling, editor mounting, dialogs and keyboard actions.
+It does not construct Pi's `InteractiveMode`. Pi 1.2.0 supplies the persistent agent session,
+model and auth runtime, native JSONL history, tool execution and rich content components.
+
+The parent process still calls `Terminals.prepare()`, spawns its returned specification in a
+PTY or inherited terminal, and eventually calls `dispose()`. Its default command is the active
+Node runtime followed by the existing Harness CLI and `terminal-frontend`; it requires no global
+`pi` command. `TerminalAssets` remains `{ node, cli, piExtension }`, and the existing
+`prepare`, `send`, `state`, `input` and `dispose` contracts remain in place. The `piExtension`
+path remains the final prepared extension argument. The owned runtime recognizes that bridge
+position and loads its trusted, bundled factory inline after the selected disk extensions.
+
+```text
+Harness parent: account + compiled context + trusted resources + run writer
+       | launch specification / existing session socket
+Harness terminal child: TerminalApplication + persistent Pi AgentSessionRuntime
+       | typed native events / plugin UI callbacks
+Harness screen: welcome, transcript, status band, editor, dialogs and overlays
+```
+
+[`runtime.ts`](../src/terminal/tui/runtime.ts) builds a public `AgentSessionRuntime` around
+`createAgentSession`, `ModelRuntime`, `SessionManager` and `DefaultResourceLoader`. Events and
+subscriptions survive session replacement. Before replacement it detaches extension UI; after
+replacement it binds a fresh `ExtensionUIContext` in `tui` mode. Presentation reads frozen
+`TerminalSnapshot` values; submission, interruption, navigation, decision polling and decision
+responses pass through `TerminalRuntime`. Native components retain a scoped SDK adapter for
+rich Markdown, tool and extension rendering. Native history remains owned by
+Pi; Harness run records remain written through the existing controller/run store.
+
+A persistent child retains queues, session-local extension state and interactive UI between
+prompts. Reusing `sessions.run` for each prompt would recreate and dispose a session for every
+turn and overlap the terminal controller's run lifecycle. That API remains the embedding and
+unattended execution path.
+
+## Reference and reproduced presentation
+
+The reference is **Oh My Pi 18.11.3**, identified from npm and GitHub on 2026-10-17; its release
+publication timestamp was 2026-10-16T21:45:36Z. Inspection used the shipped npm package sources,
+not an arbitrary checkout of upstream main. The source repository is
+[can1357/oh-my-pi](https://github.com/can1357/oh-my-pi).
+
+| Inspected artifact | SHA-256 |
+|---|---|
+| `@oh-my-pi/pi-coding-agent@18.11.3` npm tarball | `b4a4eaf8057a7591f4ca83be293780489fd72b174e6a629d4704320165177f09` |
+| `@oh-my-pi/pi-tui@18.11.3` npm tarball | `d28351b1309474eaf02f9be0fdd59c099ba9b8baeec811ef61349facf7a3565c` |
+| Native `omp` artifact used for observation | `d518310d647d467a2c5c3f2d38e34489a761996d766395c03b37c61a2203d02b` |
+
+In the extracted `pi-tui` package, `src/theme/defaults/titanium.json` establishes the titanium
+palette and `src/prompt/welcome.ts` establishes the five-row Pi logo, exact diagonal RGB stops
+and indexed-color fallback, centered lockup and narrow-width behavior. Harness adapts these
+into [`theme.ts`](../src/terminal/tui/theme.ts) and [`welcome.ts`](../src/terminal/tui/welcome.ts),
+with its own product name, package version and existing-command tips. The status band and
+curved `╰─` input framing are implemented in [`status.ts`](../src/terminal/tui/status.ts) and
+[`editor.ts`](../src/terminal/tui/editor.ts). Startup selects the Harness titanium presentation
+without rewriting the user's saved theme settings. The shipped OMP light palette is also
+available as `light`; native rich components and the status band switch together. Missing
+Pi-specific color tokens use documented Harness fallbacks in `theme.ts`.
+
+The frontend exposes capabilities already present in Harness/Pi. It does not import OMP's
+agent runtime, tools, providers, MCP implementation, task system or other product features.
+Harness-owned composition reuses public Pi Markdown, message, tree/model selector and rich
+tool components. Tool diffs, expandable output, images and extension renderers therefore retain
+the existing Pi interpretation. This is an implementation of the requested terminal presentation;
+complete visual or behavioral parity with every OMP surface has not been established.
+
+Full upstream copyright and MIT permission notices are in [NOTICE.md](../NOTICE.md).
+
+## Runtime compatibility adapter
+
+Most integration uses public Pi exports. [`piAdapter.ts`](../src/terminal/tui/piAdapter.ts)
+contains the remaining implementation dependencies and requires exactly Pi **1.2.0** before
+loading them:
+
+| Internal dependency | Reason |
+|---|---|
+| `dist/extensions/index.js` builtin inventory | Preserve selected `llama.cpp`, `codemode`, `tool-search` and MCP builtins with the CLI's replacement semantics |
+| `dist/modes/interactive/theme/theme.js:setThemeInstance` | Keep public native rich components on the same active theme as the Harness screen |
+| `dist/core/tools/renderers/index.js:withBuiltInRenderers` | Preserve existing read/edit/bash/write formatting without replacing tool execution |
+| `dist/utils/clipboard.js` and `clipboard-image.js` read helpers | Preserve explicit user clipboard paste behavior; these are not called during inspection or startup |
+
+The adapter is initialized once; its global theme setter and renderer lookup are synchronous
+thereafter. A Pi dependency upgrade must update this adapter deliberately and rerun the
+terminal compatibility tests. These module imports do not instantiate `InteractiveMode`.
+
+## Accounts, history and resource trust
+
+The child requires the prepared absolute `PI_CODING_AGENT_DIR`; there is no fallback to a
+personal Pi profile. Provider authentication and model catalogs use that account's files.
+The selected account stays pinned. The existing `/accounts` command requests a parent-managed
+restart to use a different account while resuming the conversation.
+
+An initial `--session` or `/resume` target must resolve inside the prepared history directory,
+including symlink targets, and its stored absolute working folder must match the terminal's
+canonical working folder. `/import` may copy an explicitly selected external native JSONL file
+only when its recorded working folder matches. A caller cannot override a foreign recorded
+folder to borrow the current project's permissions. Lifecycle navigation and reload refuse an
+active response; cancel it first. Opening a conversation from another working folder requires
+opening that folder's terminal and preparing a fresh context/resource scope.
+
+Navigation revalidates resource trust before tearing down the current runtime. The resource
+loader suppresses its own discovery and uses only the prepared extensions,
+skills, prompts and themes. Before **every** loader reload, including startup and native
+session replacements, the child calls protected `terminal.resources`. The parent reruns
+`Plugins.loading` for the original scope and compares selected paths and content/trust
+identities with the preparation snapshot. Changed, detached or revoked code requires review
+and a fresh terminal. Explicit `/reload` validates before invalidating the current session.
+The Harness approval extension remains last, so it gates the final tool arguments.
+
+## Private control and user decisions
+
+The environment contains a session socket address and bearer token. The frontend claims a
+second key once with `control.claim`, before plugin code loads. [`control.ts`](../src/terminal/control.ts)
+retains it in a process-local promise shared with the bridge; it is never written to disk or
+placed in the environment. It survives `/new`, resume, fork and reload.
+
+The private key is required for `terminal.pending`, `terminal.approve`, `terminal.answer`,
+`terminal.draft`, `terminal.interrupt` and `terminal.resources`, as well as existing account and
+plugin mutations. A model-spawned shell with only the environment token cannot answer its own
+pending questions or approvals. The application renders decisions obtained from the existing
+controller and returns the person's answer through these calls.
+
+The editor sends exact draft state to `terminal.draft`; host delivery waits for that state
+instead of overwriting a draft. Interruption resolves pending socket-backed questions and
+approvals in the run registry before awaiting Pi abort. Disposal uses that order too, avoiding
+a tool waiting forever on a question after the screen has closed. Native `session_shutdown`
+clears controller readiness and stops that session's poller; the replacement's `session_start`
+restores readiness while retaining the same process control claim.
+
+The bridge exposes the shared `ask_user` batch tool alongside the existing single-question
+`ask_user_question` contract. Registry events project the actual batch IDs, order, summaries,
+choices and descriptions into the terminal inbox. The frontend stages answers locally and
+submits them together through protected `terminal.answers`; the registry validates the entire
+batch before resolving any question. Escape interrupts a pending question; cancelling optional
+text entry returns to the choices and preserves selections. Disappearing requests abort their
+open dialogs. Labels are numbered so a real choice cannot collide with a dialog action.
+
+Plugin UI methods carry a generation guard, including methods a plugin retained before an
+`await`. Session replacement, reload and disposal revoke the old generation. Outgoing native
+event subscriptions and custom transcript components detach before native invalidation.
+Cleanup failures cannot prevent terminal restoration. Fatal asynchronous errors restore the
+terminal and exit with failure; startup failures and suspend/resume use the same lifecycle.
+
+The command registry supplies help and completion for every pinned Pi built-in command name,
+plus Harness commands supplied by the bridge. `/trust` opens the existing protected code-review
+workflow in `/plugins`; trust changes require a freshly prepared terminal. `/bug` opens a
+reviewable Harness issue draft after confirmation, without attaching history. `/changelog`
+reads bundled Harness change notes. `/reload` also applies the isolated account's edited
+keyboard bindings through the public TUI manager.
+
+## Verification and remaining limits
+
+Harness typecheck, **419 passing tests / two platform skips**, build and standalone proof
+passed on 2026-10-17. A final cleanup-order adjustment was rechecked with all **91 frontend
+tests**, typecheck, build and standalone proof. Coverage includes the real isolated persistent SDK/socket boundary,
+exact history scope and symlink rejection, resource-trust refusal before new/reload, event and
+UI rebinding, retained stale plugin callbacks, immutable snapshots, commands, keybinding reload,
+modal/focus behavior, grouped answers, Unicode widths and cleanup failures. Tests make no
+external provider request.
+
+The controlled production PTY verifier exercises the real CLI, persistent SDK, native tools,
+final gate/socket and run writer using a loopback OpenAI-compatible SSE fixture. See the
+[retained result](evidence/terminal-2026-10-17-followup/verification.json) and its compressed
+ANSI captures. The earlier [three-size result](evidence/terminal-2026-10-17/verification.json)
+is retained separately. Fixture responses verify transport and actual runtime/tool behavior;
+they do not establish commercial-provider or OAuth availability.
+
+The final three-size acceptance run covers 40×20, 80×24 and 120×40, live resizing, streaming,
+thinking, actual read/bash execution, approval allow/deny/Escape, grouped and single questions,
+question cancellation, account switching/restart, new/resume, trusted plugin custom overlays,
+widgets/status, light-theme switching, tool expansion and scrolling. It also checks
+suspend/resume, fatal asynchronous plugin failure and plugin startup failure. Normal exits
+restore terminal attributes, bracketed paste and cursor visibility; failure cases restore them
+and exit 1. Each report binds the exact CLI and verifier SHA-256 digests.
+
+After the user reported that the global command still displayed Pi, inspection found an older
+installed 0.1.6 bundle despite the checkout sharing that version. The checkout build was packed
+and installed locally, without publication or account-data changes. The installed CLI now matches
+the tested build byte for byte and passed all 14 isolated PTY groups at 80×24. See the
+[global installation evidence](evidence/terminal-2026-10-17-followup/global-install/README.md).
+Already-running sessions need to exit and relaunch to load the replacement.
+
+A direct REA comparison of the pinned OMP executable and Harness at 80×24 captures startup and
+settings without output truncation; both exit 0. The [readable comparison](evidence/terminal-2026-10-17-followup/reference-comparison.md)
+retains exact frame/evidence IDs. It established matching centered welcome/composer geometry,
+rounded settings framing and the need for flat settings rows at 80 columns; the latter was
+corrected using the shipped SettingsList's minimum editable-pane width. Product lockups, tips,
+capability tabs, setting names, paths and unavailable-model guidance differ deliberately.
+This is bounded visual review, not proof of equivalence for every OMP surface.
+
+The App sidecar build passed, and its actual bundled `dist/cli.js` passed the same **14 PTY
+interaction groups at 80×24**, including account restart, suspension and both failure cleanup
+cases. Its [separate report](evidence/terminal-2026-10-17-followup/app-bundle/verification.json)
+binds that bundle digest. App typecheck, layer/UI checks, all **29 sidecar tests**, and **215 Rust tests** passed (one Rust
+test ignored). The full renderer run remains blocked by the existing untracked
+`PendingRequestDock.test.ts:68` expectation for `Planner needs your answer`; those App UI files
+were preserved. The combined App test script stops there, so sidecar tests were run separately.
+
+The user-authorized personal Codex live attempt used a disposable Harness profile and only
+an unexpired copied access token. Codex returned **“The usage limit has been reached”** before
+a successful response or tool execution. Harness persisted the failed run and restored the
+terminal; the source sign-in file was unchanged and the disposable credentials were deleted.
+The [live report and capture](evidence/terminal-2026-10-17-followup/live-codex/README.md) retain
+this quota failure explicitly. Successful live streaming/tool acceptance remains open until
+account capacity is available. GitHub gist publication, actual OS clipboard/image transfer,
+Windows behavior and every terminal emulator remain unverified. Rich image/diff rendering and clipboard adapters have
+focused compatibility tests; that does not establish OS interaction. These working-tree changes
+are not a published release and the complete plan's acceptance remains open while required
+integration/provider evidence is outstanding.
+
+To reproduce the controlled scenario after building:
+
+```sh
+npm run build
+python3 scripts/verify-terminal.py --save-evidence docs/evidence/terminal-2026-10-17-followup
+```
+
+Complete REA records are retained as compressed JSON in the follow-up evidence directory; the
+[evidence manifest](evidence/terminal-2026-10-17-followup/rea-artifacts.json) records their IDs,
+digests, coverage and sizes. The earlier REA IDs below are inherited ledger references; only
+new portable records in that manifest are independently available from this checkout.
+
+### REA evidence ledger
+
+- `ev_f372e317bc5780ef895531421d5ec29e62fcea219ed9e8f792bc132805ac4f07`:
+  shipped JavaScript static analysis; 13 selected files, 935 unselected. Semantic limits were
+  3,000 per file and 25,000 globally. This is bounded static evidence, not whole-program or runtime coverage.
+- `ev_3f4ebe0f81050df8144f3fb02fb712753350635dffbe1f37c1606fc45cca610f`:
+  focused shipped welcome implementation evidence.
+- `ev_5d7ec70517e2e0da4258e5236ab93b9f4c269086dd7664c8b760e0375fba512b`:
+  native OMP observation; animation caused output truncation, so it is incomplete runtime evidence.
+- `ev_12f82d325a8a2cf48c1f1783b4737696caf3ec98c7d8063910c9ddece4ad4028`:
+  owned frontend 80×24 menu/startup capture described above; no output truncation.
+
+Evidence IDs refer to the investigation's retained REA ledger. The package digests and source
+paths above allow artifact identity to be re-established; a fresh session does not implicitly
+inherit that retained ledger.
+
+- `ev_4438bf7b94a78ee2d13d0fe3b7a22238671d48b29a68f8beafbf942b9cee930c`:
+  supplemental static inspection of nine selected shipped files: default band composer,
+  composer integration, light palette, selector, approval/question dialogs, errors and generic
+  tool rendering. 939 inventoried files remain outside scope; semantic limits were 2,500 per
+  file and 20,000 globally. Source parsing did not execute the package.
+- The portable OMP/Harness runtime evidence IDs and selected frame numbers are recorded in
+  the readable comparison and manifest linked above. An earlier OMP capture sent input before
+  startup completed; it is retained as incomplete evidence and excluded from the comparison.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@xingular/harness",
-  "version": "0.1.5",
+  "version": "0.1.7",
   "type": "module",
   "description": "Xingular Harness — a Pi agent harness with multi-account sign-in, a compiled system prompt, a memory lifecycle (Wiki), tools, MCP, and skills",
   "repository": {
@@ -19,13 +19,16 @@
   },
   "scripts": {
     "build": "esbuild src/cli.ts --bundle --platform=node --target=node22 --format=esm --packages=external --outfile=dist/cli.js && esbuild src/terminal/piExtension.ts --bundle --platform=node --target=node22 --format=esm --packages=external --outfile=dist/terminal-pi.js",
+    "dev": "npm run build && node dist/cli.js",
     "prepack": "npm run build",
+    "ci": "bash scripts/ci.sh",
     "typecheck": "tsc --noEmit -p tsconfig.json",
     "test": "vitest run",
     "prove": "npm run build && node scripts/prove-standalone.mjs"
   },
   "dependencies": {
     "@earendil-works/pi-coding-agent": "1.2.0",
+    "@earendil-works/pi-tui": "1.2.0",
     "@modelcontextprotocol/client": "^2.2.0",
     "@modelcontextprotocol/server": "^2.2.0",
     "typebox": "^1.3.7",
@@ -45,6 +48,9 @@
     "src",
     "dist",
     "builtin",
-    "README.md"
+    "README.md",
+    "NOTICE.md",
+    "CHANGELOG.md",
+    "docs"
   ]
 }

package/src/accounts/accounts.test.ts

@@ -2,6 +2,7 @@ import { existsSync, lstatSync, mkdirSync, mkdtempSync, readdirSync, readFileSyn
 import { homedir, tmpdir } from 'node:os'
 import { join } from 'node:path'
 import { expect, test } from 'vitest'
+import type { ModelRuntime } from '@earendil-works/pi-coding-agent'
 
 import { Bus, type Notice } from '../core/bus'
 import { Accounts, classifyMessage } from './accounts'
@@ -21,6 +22,100 @@ function service(dir = temp()) {
   return { dir, secrets, notices, accounts: new Accounts({ dir, secrets, bus }) }
 }
 
+function loginService(login: (interaction: {
+  signal: AbortSignal
+  notify: (notification: Record<string, unknown>) => void
+  prompt: (prompt: { type: string; message: string; placeholder?: string; options?: unknown; signal?: AbortSignal }) => Promise<string>
+}) => Promise<void>) {
+  const dir = temp()
+  const secrets = memorySecretStore()
+  const notices: Notice[] = []
+  const bus = new Bus()
+  bus.on((notice) => void notices.push(notice))
+  let loginOptions: { getDeviceId?: () => string } | undefined
+  let loginCalls = 0
+  const runtime = {
+    login: (_provider: string, _method: string, interaction: Parameters<typeof login>[0], options?: { getDeviceId?: () => string }) => {
+      loginCalls += 1
+      loginOptions = options
+      return login(interaction)
+    }
+  }
+  class LoginAccounts extends Accounts {
+    override runtime(account: Parameters<Accounts['runtime']>[0]): Promise<ModelRuntime> {
+      void account
+      return Promise.resolve(runtime as unknown as ModelRuntime)
+    }
+  }
+  const accounts = new LoginAccounts({ dir, secrets, bus })
+  const account = accounts.create('Login test', 'subscription').accounts[0]
+  return { accounts, account, notices, loginOptions: () => loginOptions, loginCalls: () => loginCalls }
+}
+
+async function waitFor(predicate: () => boolean): Promise<void> {
+  for (let attempt = 0; attempt < 100; attempt++) {
+    if (predicate()) return
+    await new Promise((resolve) => setTimeout(resolve, 5))
+  }
+  throw new Error('Timed out waiting for the account operation.')
+}
+
+test('OpenAI login uses one persisted Harness installation device ID across accounts', async () => {
+  const { accounts, account, loginOptions, loginCalls } = loginService(async () => {})
+  const deviceId = await accounts.installationDeviceId()
+  const second = accounts.create('Second account', 'subscription').accounts.find((item) => item.id !== account.id)!
+
+  await accounts.loginStart(account.id, 'openai', 'oauth')
+  await waitFor(() => loginCalls() === 1)
+  expect(loginOptions()?.getDeviceId?.()).toBe(deviceId)
+
+  await accounts.loginStart(second.id, 'openai', 'oauth')
+  await waitFor(() => loginCalls() === 2)
+  expect(loginOptions()?.getDeviceId?.()).toBe(deviceId)
+  expect(JSON.parse(readFileSync(join(sharedDir(accounts.dir), 'settings.json'), 'utf8')).deviceId).toBe(deviceId)
+  expect(deviceId).toMatch(/^[0-9a-f]{8}(?:-[0-9a-f]{4}){3}-[0-9a-f]{12}$/i)
+})
+
+test('device-code sign-in progress survives listener detachment and is available from status', async () => {
+  const { accounts, account, notices } = loginService((interaction) => new Promise<void>((_resolve, reject) => {
+    interaction.notify({ type: 'device_code', userCode: 'ABCD-EFGH', verificationUri: 'https://example.test/device' })
+    interaction.signal.addEventListener('abort', () => reject(new Error('aborted')), { once: true })
+  }))
+
+  const { loginId } = await accounts.loginStart(account.id, 'openai-codex', 'oauth')
+  await waitFor(() => (accounts.loginStatus(account.id)?.events.length ?? 0) > 0)
+  const detached = accounts.loginStatus(account.id)
+  expect(detached).toMatchObject({ loginId, status: 'running', events: [{ type: 'device_code', userCode: 'ABCD-EFGH' }] })
+  expect(notices.find((notice) => notice.type === 'accounts.loginEvent')).toMatchObject({ revision: 1, loginId })
+
+  // Asking again models a renderer returning to Accounts while the Harness stays alive.
+  expect(accounts.loginStatus(account.id)).toEqual(detached)
+  accounts.loginCancel(account.id, loginId)
+  await waitFor(() => accounts.loginStatus(account.id)?.status === 'cancelled')
+  const ended = accounts.loginStatus(account.id)
+  expect(ended).toMatchObject({ loginId, status: 'cancelled', events: [], prompt: null, success: false })
+  expect(JSON.stringify(ended)).not.toContain('ABCD-EFGH')
+})
+
+test('login status exposes the active prompt but never retains its response after completion', async () => {
+  const { accounts, account, notices } = loginService(async (interaction) => {
+    const value = await interaction.prompt({ type: 'secret', message: 'Enter the one-time value' })
+    expect(value).toBe('private-response')
+  })
+
+  const { loginId } = await accounts.loginStart(account.id, 'provider-with-prompt', 'oauth')
+  await waitFor(() => accounts.loginStatus(account.id)?.prompt !== null)
+  const waiting = accounts.loginStatus(account.id)
+  expect(waiting).toMatchObject({ loginId, status: 'running', prompt: { type: 'prompt', prompt: { type: 'secret' } } })
+  const promptId = String(waiting?.prompt?.promptId)
+  accounts.loginRespond(loginId, promptId, 'private-response')
+  await waitFor(() => accounts.loginStatus(account.id)?.status === 'completed')
+  const ended = accounts.loginStatus(account.id)
+  expect(ended).toMatchObject({ loginId, status: 'completed', success: true, events: [], prompt: null })
+  expect(JSON.stringify(ended)).not.toContain('private-response')
+  expect(notices.filter((notice) => notice.type === 'accounts.loginEvent' || notice.type === 'accounts.login').map((notice) => notice.revision)).toEqual([1, 2, 3])
+})
+
 test('health reflects sign-in, errors and limits', () => {
   const state = { ...emptyState(), signedIn: true }
   expect(deriveHealth(state)).toBe('ok')
@@ -157,6 +252,21 @@ test('provider errors are classified', () => {
   expect(classifyMessage('the model said no')).toBeNull()
 })
 
+test('a rejected OAuth refresh requests reauthentication and keeps the credential', async () => {
+  const { dir, accounts } = service()
+  const account = accounts.create('OpenAI', 'subscription').accounts[0]
+  await accounts.writeCredential(account.id, 'openai', { type: 'oauth', access: 'old-access', refresh: 'old-refresh', expires: 0 })
+  accounts.runtime = async () => ({
+    listCredentials: async () => [{ providerId: 'openai', type: 'oauth' }],
+    getAvailable: async () => { throw new Error('OAuth refresh failed for openai: OpenAI OAuth token request failed (400): {"error":"invalid_grant"}') }
+  } as unknown as ModelRuntime)
+
+  await accounts.refreshOne(account)
+
+  expect(loadState(dir, account.id)).toMatchObject({ health: 'auth_expired', lastError: { category: 'auth_expired' } })
+  expect(await accounts.readCredential(account.id, 'openai')).toMatchObject({ refresh: 'old-refresh' })
+})
+
 test('native config lists what is shared and what exists', () => {
   const dir = temp()
   const before = nativeConfig(dir)