feat(shell): welcome banner redesign + TUI polish, update orchestrator, release-orchestration plans (#37)

* docs: add 3-repo release orchestration design spec

Approved design for finishing the GitHub App/OIDC migration, a self-owned
release.py single-source-of-truth tool, fail-loud promotion, and broadened
distribution (Scoop/GHCR/Nix/WinGet). Phased P0->P2 roadmap. Produced via a
multi-agent design workflow, ground-truthed against the live repos.

* docs: add welcome banner redesign spec (footer chip)

* docs: add welcome banner redesign implementation plan

* test: lock welcome banner redesign (footer chip, no pipe, split strapline)

* feat(shell): redesign welcome banner with footer chip layout

* docs: add P0-P2 release-orchestration implementation plans (draft)

Write-stage plans recovered from the plan-writing workflow, each with its
automated review punch-list embedded. Finalize pass (applying the punch-lists)
pending after a session-limit interruption.

* docs: finalize P0-P2 release-orchestration plans

Applied the automated review punch-lists (finalize pass): P0 fixes the invalid
gh api --jq, the $GITHUB_ENV bottleneck plumbing, semver-ordered readiness-issue
auto-close, and the changelog-gate verification; P1 wires the PYTHINKER_MANAGED
hook end-to-end; P2 fixes the Scoop extract_dir/bin nesting and the Docker
ancestor-check dry-run. Removed draft banners and embedded punch-lists.

* feat(shell): TUI redesign, update orchestrator, release-orchestration docs

Broad checkpoint of the welcome-banner-redesign branch:

- Shell/TUI: welcome banner footer-chip layout, design system, glyphs,
  motion, prompt, slash, tool renderers, MCP status, activity tree,
  live view, worklog, theme tokens.
- Update flow: new update_orchestrator module + CLI wiring; terminal
  capability detection (terminal_capabilities) with tests.
- Feedback: structured feedback repo (feedback_repo) and slash command.
- Auth/config/llm: OpenAI auth + platform/config/llm adjustments.
- Docs: welcome-banner spec/plan and P0–P2 release-orchestration plans.
- Web: subagent-steps component update.
- Address CodeRabbit review: -> None on update CLI handlers, drop a
  duplicate test assertion, correct the backoff verification budget
  (7 retries / 364s), and de-hardcode uv paths in the P2 plan.

* test(shell): follow-up tweaks to update, feedback, and TUI tests

Adjust update_orchestrator, mcp_status, feedback_repo, and live_view
alongside their tests; add update CLI test coverage.

* fix(ci): make UI tests terminal-agnostic, fix docs build, add changelog

CI runs the suite with TERM=dumb and NO_COLOR=1 to keep logs clean. The new
terminal_capabilities module correctly degrades the TUI to ASCII glyphs and
no-color under those, but ~115 pre-existing UI-contract tests assert the rich
(Unicode + color + motion) appearance and only ever ran in UTF-8 dev shells.

- tests/conftest.py: pin a capable terminal (drop NO_COLOR/CLICOLOR/glyph/motion
  overrides, set TERM=xterm-256color) before any pythinker import freezes the
  glyph constants in ui.shell.glyphs. The degraded fallbacks stay covered by
  tests/ui_and_conv/test_terminal_capabilities.py. Verified: full tests/ run
  green under NO_COLOR=1 TERM=dumb PYTHONUTF8=1.
- docs p0-quick-wins: wrap inline-code GitHub Actions ${{ ... }} in <code v-pre>
  so VitePress's Vue SSR stops evaluating them as template interpolation.
  Fixes the docs build crash on PYTHINKER_HOME_REPO_DISPATCH_TOKEN. Verified
  with a local build over the committed doc set.
- CHANGELOG.md (+ synced docs mirror): add Unreleased entries for the welcome
  banner redesign and terminal-aware rendering, satisfying the changelog gate.

* fix: address CodeRabbit review (null guard, ASCII glyphs, annotations)

- slash.py: guard provider.api_key (SecretStr | None) before get_secret_value()
  to avoid AttributeError when no API key is configured.
- mcp_status.py + glyphs.py: add an ASCII-aware LIST_BULLET glyph and use it for
  the MCP startup/inventory bullets instead of a hardcoded "•", so they degrade
  with the rest of the TUI under TERM=dumb / legacy code pages.
- _blocks.py: build changed-paths via a list comprehension (PERF401).
- test_update_cli.py, test_update_orchestrator.py: add -> None on the
  _isolate_update_files helpers.
- p0-quick-wins plan: scope the release-bot App secrets to
  --visibility selected --repos pythinker-code instead of org-wide.

* docs: use repo-relative paths in release-orchestration design spec

* docs: address CodeRabbit doc nits (relative paths, telemetry wording, fence langs, plan note)

* fix(ci): resolve PR 37 review failures

* test(cli): normalize export help output

* docs(ci): tighten release tag filters

Author: elkaix

.github/workflows/homebrew-tap.yml

@@ -3,7 +3,7 @@ name: Update Homebrew tap
 on:
   push:
     tags:
-      - "v[0-9]+.[0-9]+.[0-9]+"
+      - "v+([0-9]).+([0-9]).+([0-9])"
   workflow_dispatch:
     inputs:
       version:

.github/workflows/linux-installer.yml

@@ -4,7 +4,7 @@ on:
   push:
     tags:
       # Same scheme as release-pythinker-cli.yml and windows-installer.yml.
-      - "v[0-9]+.[0-9]+.[0-9]+"
+      - "v+([0-9]).+([0-9]).+([0-9])"
   workflow_dispatch:
     inputs:
       version:

.github/workflows/promote-release.yml

@@ -16,7 +16,7 @@ name: Promote release
 on:
   push:
     tags:
-      - "v[0-9]+.[0-9]+.[0-9]+"
+      - "v+([0-9]).+([0-9]).+([0-9])"
   workflow_dispatch:
     inputs:
       tag:

.github/workflows/release-pythinker-cli.yml

@@ -3,7 +3,7 @@ name: Release (pythinker-code)
 on:
   push:
     tags:
-      - "v[0-9]+.[0-9]+.[0-9]+"
+      - "v+([0-9]).+([0-9]).+([0-9])"
 
 permissions:
   contents: write

.github/workflows/windows-installer.yml

@@ -4,7 +4,7 @@ on:
   push:
     tags:
       # Match the existing PyPI release workflow's tag scheme: v<MAJOR>.<MINOR>.<PATCH>.
-      - "v[0-9]+.[0-9]+.[0-9]+"
+      - "v+([0-9]).+([0-9]).+([0-9])"
   workflow_dispatch:
     inputs:
       version:

.gitignore

@@ -56,6 +56,7 @@ static/
 .memo/
 .entire
 .claude
+.pythinker/
 .worktrees/
 blackbox/
 

CHANGELOG.md

@@ -15,6 +15,8 @@ GitHub Releases page; `0.8.0` is the new starting line.
 
 ## Unreleased
 
+- **Redesigned startup welcome banner.** The banner now uses a cleaner footer-chip layout: the "What's new / Update available" chip sits on the panel's bottom border, the headline/strapline/help lines align beside the robot logo, and the info grid drops its vertical separator. The robot art and palette are unchanged.
+- **Terminal-aware rendering for minimal and CI terminals.** The shell UI adapts to the terminal — ASCII glyph fallbacks for `TERM=dumb` and legacy Windows code pages, reduced-motion mode (`PYTHINKER_REDUCED_MOTION`), and `NO_COLOR`/`CLICOLOR` support that strips color cleanly — so output stays readable in CI logs, SSH panes, and bare terminals.
 - **Windows updates avoid encoded PowerShell.** Native updates now launch the signed Inno installer directly with Restart Manager flags instead of a `powershell.exe -EncodedCommand` helper, reducing antivirus command-line heuristic false positives. Windows bootstrap installs use visible `/SILENT` progress instead of fully suppressed setup, and the installer build signs bundled PE files plus Inno's setup/uninstaller/temp copies when signing credentials are configured.
 
 ## 0.27.0 (2026-05-31)

PRODUCT.md

@@ -0,0 +1,33 @@
+# Product
+
+## Register
+
+Use a product-engineering register: concise, practical, and confident. Write for developers who value clear terminal workflows; prefer precise verbs, concrete outcomes, and short examples over marketing slogans.
+
+## Users
+
+Developers using Pythinker inside terminal workflows, including PowerShell, Windows Terminal, macOS Terminal, iTerm2, GNOME Terminal, CI logs, SSH sessions, and low-color or no-color shells. They are reviewing code, diagnosing failures, running commands, approving changes, and switching between AI and shell work.
+
+## Product Purpose
+
+Pythinker Code is a review-first AI engineering CLI. The interface should help users understand what the agent is doing, trust approvals and results, move quickly through repeated terminal actions, and keep context visible without leaving the shell.
+
+## Brand Personality
+
+Disciplined, terminal-native, precise.
+
+## Anti-references
+
+Do not make the TUI feel like a neon dashboard, glassmorphism mockup, emoji-heavy chat toy, or novelty terminal skin. Avoid fragile color-only semantics, excessive borders, box-heavy layouts, decorative motion, AI-purple gradients, and UI effects that slow repeated keyboard workflows.
+
+## Design Principles
+
+1. Standardize first: core structure, labels, states, and colors must behave consistently across shells and terminal capabilities.
+2. Text is the UI: layout, copy, hierarchy, and semantic labels should remain usable in no-color and narrow-width environments.
+3. Speed over spectacle: feedback should be immediate, short, and interruptible; repeated keyboard actions should not animate.
+4. State must be explicit: approvals, background work, errors, warnings, and tool execution need clear shape and wording, not just color.
+5. Compatibility is craft: PowerShell, Windows Terminal, Unix terminals, SSH, CI, and screen readers should all get a coherent experience.
+
+## Accessibility & Inclusion
+
+Target WCAG-minded contrast within ANSI limitations, colorblind-safe state semantics, reduced-motion behavior, keyboard-first operation, graceful no-color fallback, and responsive rendering from narrow split panes to wide terminals.

README.md

@@ -801,4 +801,8 @@ Distributed under the **Apache-2.0 License**. See [`LICENSE`](https://github.com
 [🧩 ACP](https://github.com/agentclientprotocol/agent-client-protocol)  · 
 [🔌 MCP](https://modelcontextprotocol.io/)
 
+<p align="center">
+  <em>Thanks for visiting ✨ Pythinker! Viewing this README does not trigger telemetry.</em>
+</p>
+
 </div>

docs/en/release-notes/changelog.md

@@ -17,6 +17,10 @@ GitHub Releases page; `0.8.0` is the new starting line.
 
 ## Unreleased
 
+- **Redesigned startup welcome banner.** The banner now uses a cleaner footer-chip layout: the "What's new / Update available" chip sits on the panel's bottom border, the headline/strapline/help lines align beside the robot logo, and the info grid drops its vertical separator. The robot art and palette are unchanged.
+- **Terminal-aware rendering for minimal and CI terminals.** The shell UI adapts to the terminal — ASCII glyph fallbacks for `TERM=dumb` and legacy Windows code pages, reduced-motion mode (`PYTHINKER_REDUCED_MOTION`), and `NO_COLOR`/`CLICOLOR` support that strips color cleanly — so output stays readable in CI logs, SSH panes, and bare terminals.
+- **Windows updates avoid encoded PowerShell.** Native updates now launch the signed Inno installer directly with Restart Manager flags instead of a `powershell.exe -EncodedCommand` helper, reducing antivirus command-line heuristic false positives. Windows bootstrap installs use visible `/SILENT` progress instead of fully suppressed setup, and the installer build signs bundled PE files plus Inno's setup/uninstaller/temp copies when signing credentials are configured.
+
 ## 0.27.0 (2026-05-31)
 
 ### What changed in this release