@agi-fans/dsh-tui 0.21.0 → 0.23.0

package/lib/chrome/secret-mask.d.ts

@@ -0,0 +1,35 @@
+/**
+ * Credential masking for drawn user text.
+ *
+ * A terminal is shown to other people: a screen share, a recording, a screenshot
+ * pasted into an issue. When someone sends an API key by accident, the transcript
+ * is the copy that outlives the mistake. This masks a recognized credential's
+ * tail in what is drawn and nothing else — the stored message, the copy action
+ * and the model input keep the original characters, so the key still works and
+ * `Ctrl+C` on the selection still gives the reader what they sent.
+ *
+ * Recognition follows published formats only, the same rule the Harness client
+ * uses: a provider key or token after its fixed prefix, a JSON Web Token, and a
+ * private key block. Free-form passwords and `name=value` assignments have no
+ * published format, so they stay plain — guessing would mask ordinary prose and
+ * teach the reader to distrust the mask.
+ *
+ * @module @agi-fans/dsh-tui/chrome/secret-mask
+ */
+/** One credential range found in the text, as offsets. */
+interface Range {
+    start: number;
+    end: number;
+    /** A key block keeps its BEGIN line and any END line readable. */
+    block?: boolean;
+}
+/** Every credential range in `text`, in order and never overlapping. */
+export declare function findSecrets(text: string): readonly Range[];
+/**
+ * Mask every recognized credential in `text`.
+ *
+ * Returns the text unchanged when nothing matched, so a caller can compare by
+ * identity to know whether the drawn form differs from the stored one.
+ */
+export declare function maskSecrets(text: string): string;
+export {};

package/lib/chrome/secret-mask.js

@@ -0,0 +1,180 @@
+/**
+ * Credential masking for drawn user text.
+ *
+ * A terminal is shown to other people: a screen share, a recording, a screenshot
+ * pasted into an issue. When someone sends an API key by accident, the transcript
+ * is the copy that outlives the mistake. This masks a recognized credential's
+ * tail in what is drawn and nothing else — the stored message, the copy action
+ * and the model input keep the original characters, so the key still works and
+ * `Ctrl+C` on the selection still gives the reader what they sent.
+ *
+ * Recognition follows published formats only, the same rule the Harness client
+ * uses: a provider key or token after its fixed prefix, a JSON Web Token, and a
+ * private key block. Free-form passwords and `name=value` assignments have no
+ * published format, so they stay plain — guessing would mask ordinary prose and
+ * teach the reader to distrust the mask.
+ *
+ * @module @agi-fans/dsh-tui/chrome/secret-mask
+ */
+/** What replaces each hidden character. */
+const MASK = '*';
+/** Characters of a prefixed key left readable: the provider prefix and little else. */
+const VISIBLE_PREFIX = 8;
+/**
+ * The formats worth recognizing in a terminal.
+ *
+ * `sk-` requires a digit and twenty characters because they are the model keys
+ * people paste by accident; without both, a hyphenated identifier reads as a
+ * credential. Cloud key ids are bounded because their length is fixed by format.
+ */
+const RUN_FORMATS = [
+    { literal: 'sk-', min: 20, digit: true },
+    { literal: 'AIza', min: 35 },
+    { literal: 'ghp_', min: 36 },
+    { literal: 'gho_', min: 36 },
+    { literal: 'ghu_', min: 36 },
+    { literal: 'ghs_', min: 36 },
+    { literal: 'ghr_', min: 36 },
+    { literal: 'github_pat_', min: 22 },
+    { literal: 'glpat-', min: 20 },
+    { literal: 'npm_', min: 36 },
+    { literal: 'hf_', min: 30 },
+    { literal: 'AKIA', min: 16, max: 16 },
+    { literal: 'ASIA', min: 16, max: 16 },
+    { literal: 'LTAI', min: 12, max: 20 },
+    { literal: 'AKID', min: 28, max: 36 },
+    { literal: 'xoxa-', min: 10 },
+    { literal: 'xoxb-', min: 10 },
+    { literal: 'xoxp-', min: 10 },
+    { literal: 'xoxr-', min: 10 },
+    { literal: 'xoxs-', min: 10 },
+    { literal: 'sk_live_', min: 16 },
+    { literal: 'sk_test_', min: 16 },
+    { literal: 'rk_live_', min: 16 },
+    { literal: 'rk_test_', min: 16 },
+    { literal: 'whsec_', min: 24 },
+];
+const KEY_BLOCK_BEGIN = '-----BEGIN ';
+const KEY_BLOCK_END = '-----END';
+const JWT_PREFIX = 'eyJ';
+/** Characters a key or token run may contain. */
+function isKeyChar(code) {
+    return (code >= 0x30 && code <= 0x39)
+        || (code >= 0x41 && code <= 0x5a)
+        || (code >= 0x61 && code <= 0x7a)
+        || code === 0x5f || code === 0x2d;
+}
+function runEnd(text, from) {
+    let at = from;
+    while (at < text.length && isKeyChar(text.charCodeAt(at)))
+        at += 1;
+    return at;
+}
+function hasDigit(text, start, end) {
+    for (let at = start; at < end; at += 1) {
+        const code = text.charCodeAt(at);
+        if (code >= 0x30 && code <= 0x39)
+            return true;
+    }
+    return false;
+}
+/** The prefixed key or token starting at `start`, when the literal and run both validate. */
+function prefixedAt(text, start) {
+    for (const format of RUN_FORMATS) {
+        if (!text.startsWith(format.literal, start))
+            continue;
+        const runStart = start + format.literal.length;
+        const end = runEnd(text, runStart);
+        const length = end - runStart;
+        if (length < format.min)
+            continue;
+        if (format.max !== undefined && length > format.max)
+            continue;
+        if (format.digit === true && !hasDigit(text, runStart, end))
+            continue;
+        return { start, end };
+    }
+    return undefined;
+}
+/** A JSON Web Token: three base64url runs joined by dots, starting with the header prefix. */
+function jwtAt(text, start) {
+    if (!text.startsWith(JWT_PREFIX, start))
+        return undefined;
+    const headerEnd = runEnd(text, start);
+    if (text[headerEnd] !== '.' || !text.startsWith('.eyJ', headerEnd))
+        return undefined;
+    const payloadEnd = runEnd(text, headerEnd + 1);
+    if (text[payloadEnd] !== '.')
+        return undefined;
+    const end = runEnd(text, payloadEnd + 1);
+    return end > payloadEnd + 1 ? { start, end } : undefined;
+}
+/** A private key block, from its BEGIN line through the END line when one is present. */
+function keyBlockAt(text, start) {
+    if (!text.startsWith(KEY_BLOCK_BEGIN, start))
+        return undefined;
+    const lineEnd = text.indexOf('\n', start);
+    if (lineEnd === -1)
+        return undefined;
+    const endAt = text.indexOf('\n' + KEY_BLOCK_END, lineEnd);
+    return { start, end: endAt === -1 ? text.length : endAt, block: true };
+}
+/** Every credential range in `text`, in order and never overlapping. */
+export function findSecrets(text) {
+    const found = [];
+    let at = 0;
+    while (at < text.length) {
+        const next = keyBlockAt(text, at) ?? prefixedAt(text, at) ?? jwtAt(text, at);
+        if (next === undefined) {
+            at += 1;
+            continue;
+        }
+        found.push(next);
+        at = next.end;
+    }
+    return found;
+}
+/** The drawn form of a key block: its BEGIN line, a mask per body line, its END line. */
+function maskBlock(text, range) {
+    const bodyStart = text.indexOf('\n', range.start);
+    if (bodyStart === -1)
+        return text.slice(range.start, range.start + VISIBLE_PREFIX).padEnd(range.end - range.start, MASK);
+    // Lines and their breaks stay in place so a block does not change the height of
+    // what the reader already scrolled past.
+    let out = text.slice(range.start, bodyStart + 1);
+    for (let at = bodyStart + 1; at <= range.end; at += 1) {
+        const code = text.charCodeAt(at);
+        if (at === range.end)
+            return out;
+        if (code === 10)
+            out += '\n';
+        else if (code === 13)
+            out += '\r';
+        else
+            out += MASK;
+    }
+    return out;
+}
+/**
+ * Mask every recognized credential in `text`.
+ *
+ * Returns the text unchanged when nothing matched, so a caller can compare by
+ * identity to know whether the drawn form differs from the stored one.
+ */
+export function maskSecrets(text) {
+    const ranges = findSecrets(text);
+    if (ranges.length === 0)
+        return text;
+    let out = '';
+    let at = 0;
+    for (const range of ranges) {
+        out += text.slice(at, range.start);
+        out += range.block === true
+            ? maskBlock(text, range)
+            : text.slice(range.start, range.start + VISIBLE_PREFIX)
+                .padEnd(range.end - range.start, MASK);
+        at = range.end;
+    }
+    return out + text.slice(at);
+}
+//# sourceMappingURL=secret-mask.js.map

package/lib/chrome/secret-mask.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secret-mask.js","sourceRoot":"","sources":["../../src/chrome/secret-mask.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,2CAA2C;AAC3C,MAAM,IAAI,GAAG,GAAG,CAAA;AAChB,uFAAuF;AACvF,MAAM,cAAc,GAAG,CAAC,CAAA;AAcxB;;;;;;GAMG;AACH,MAAM,WAAW,GAAuB;IACtC,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE;IACxC,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,EAAE;IAC5B,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,EAAE;IAC5B,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,EAAE;IAC5B,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,EAAE;IAC5B,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,EAAE;IAC5B,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,EAAE;IAC5B,EAAE,OAAO,EAAE,aAAa,EAAE,GAAG,EAAE,EAAE,EAAE;IACnC,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,EAAE,EAAE;IAC9B,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,EAAE;IAC5B,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE;IAC3B,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE;IACrC,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE;IACrC,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE;IACrC,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE;IACrC,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE;IAC7B,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE;IAC7B,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE;IAC7B,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE;IAC7B,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE;IAC7B,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,EAAE,EAAE;IAChC,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,EAAE,EAAE;IAChC,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,EAAE,EAAE;IAChC,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,EAAE,EAAE;IAChC,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,EAAE,EAAE;CAC/B,CAAA;AAED,MAAM,eAAe,GAAG,aAAa,CAAA;AACrC,MAAM,aAAa,GAAG,UAAU,CAAA;AAChC,MAAM,UAAU,GAAG,KAAK,CAAA;AAExB,iDAAiD;AACjD,SAAS,SAAS,CAAC,IAAY;IAC7B,OAAO,CAAC,IAAI,IAAI,IAAI,IAAI,IAAI,IAAI,IAAI,CAAC;WAChC,CAAC,IAAI,IAAI,IAAI,IAAI,IAAI,IAAI,IAAI,CAAC;WAC9B,CAAC,IAAI,IAAI,IAAI,IAAI,IAAI,IAAI,IAAI,CAAC;WAC9B,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,IAAI,CAAA;AACrC,CAAC;AAED,SAAS,MAAM,CAAC,IAAY,EAAE,IAAY;IACxC,IAAI,EAAE,GAAG,IAAI,CAAA;IACb,OAAO,EAAE,GAAG,IAAI,CAAC,MAAM,IAAI,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;QAAE,EAAE,IAAI,CAAC,CAAA;IAClE,OAAO,EAAE,CAAA;AACX,CAAC;AAED,SAAS,QAAQ,CAAC,IAAY,EAAE,KAAa,EAAE,GAAW;IACxD,KAAK,IAAI,EAAE,GAAG,KAAK,EAAE,EAAE,GAAG,GAAG,EAAE,EAAE,IAAI,CAAC,EAAE,CAAC;QACvC,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC,CAAA;QAChC,IAAI,IAAI,IAAI,IAAI,IAAI,IAAI,IAAI,IAAI;YAAE,OAAO,IAAI,CAAA;IAC/C,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAUD,6FAA6F;AAC7F,SAAS,UAAU,CAAC,IAAY,EAAE,KAAa;IAC7C,KAAK,MAAM,MAAM,IAAI,WAAW,EAAE,CAAC;QACjC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC;YAAE,SAAQ;QACrD,MAAM,QAAQ,GAAG,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAA;QAC9C,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAA;QAClC,MAAM,MAAM,GAAG,GAAG,GAAG,QAAQ,CAAA;QAC7B,IAAI,MAAM,GAAG,MAAM,CAAC,GAAG;YAAE,SAAQ;QACjC,IAAI,MAAM,CAAC,GAAG,KAAK,SAAS,IAAI,MAAM,GAAG,MAAM,CAAC,GAAG;YAAE,SAAQ;QAC7D,IAAI,MAAM,CAAC,KAAK,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,EAAE,GAAG,CAAC;YAAE,SAAQ;QACrE,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,CAAA;IACvB,CAAC;IACD,OAAO,SAAS,CAAA;AAClB,CAAC;AAED,8FAA8F;AAC9F,SAAS,KAAK,CAAC,IAAY,EAAE,KAAa;IACxC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,EAAE,KAAK,CAAC;QAAE,OAAO,SAAS,CAAA;IACzD,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;IACrC,IAAI,IAAI,CAAC,SAAS,CAAC,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,SAAS,CAAC;QAAE,OAAO,SAAS,CAAA;IACpF,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,EAAE,SAAS,GAAG,CAAC,CAAC,CAAA;IAC9C,IAAI,IAAI,CAAC,UAAU,CAAC,KAAK,GAAG;QAAE,OAAO,SAAS,CAAA;IAC9C,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,EAAE,UAAU,GAAG,CAAC,CAAC,CAAA;IACxC,OAAO,GAAG,GAAG,UAAU,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,SAAS,CAAA;AAC1D,CAAC;AAED,yFAAyF;AACzF,SAAS,UAAU,CAAC,IAAY,EAAE,KAAa;IAC7C,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,eAAe,EAAE,KAAK,CAAC;QAAE,OAAO,SAAS,CAAA;IAC9D,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;IACzC,IAAI,OAAO,KAAK,CAAC,CAAC;QAAE,OAAO,SAAS,CAAA;IACpC,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,GAAG,aAAa,EAAE,OAAO,CAAC,CAAA;IACzD,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,CAAA;AACxE,CAAC;AAED,wEAAwE;AACxE,MAAM,UAAU,WAAW,CAAC,IAAY;IACtC,MAAM,KAAK,GAAY,EAAE,CAAA;IACzB,IAAI,EAAE,GAAG,CAAC,CAAA;IACV,OAAO,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;QACxB,MAAM,IAAI,GAAG,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC,CAAA;QAC5E,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YAAC,EAAE,IAAI,CAAC,CAAC;YAAC,SAAQ;QAAC,CAAC;QAC7C,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAChB,EAAE,GAAG,IAAI,CAAC,GAAG,CAAA;IACf,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED,yFAAyF;AACzF,SAAS,SAAS,CAAC,IAAY,EAAE,KAAY;IAC3C,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,CAAA;IACjD,IAAI,SAAS,KAAK,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,GAAG,cAAc,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,GAAG,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,CAAA;IACxH,gFAAgF;IAChF,yCAAyC;IACzC,IAAI,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,SAAS,GAAG,CAAC,CAAC,CAAA;IAChD,KAAK,IAAI,EAAE,GAAG,SAAS,GAAG,CAAC,EAAE,EAAE,IAAI,KAAK,CAAC,GAAG,EAAE,EAAE,IAAI,CAAC,EAAE,CAAC;QACtD,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC,CAAA;QAChC,IAAI,EAAE,KAAK,KAAK,CAAC,GAAG;YAAE,OAAO,GAAG,CAAA;QAChC,IAAI,IAAI,KAAK,EAAE;YAAE,GAAG,IAAI,IAAI,CAAA;aACvB,IAAI,IAAI,KAAK,EAAE;YAAE,GAAG,IAAI,IAAI,CAAA;;YAC5B,GAAG,IAAI,IAAI,CAAA;IAClB,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,WAAW,CAAC,IAAY;IACtC,MAAM,MAAM,GAAG,WAAW,CAAC,IAAI,CAAC,CAAA;IAChC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAA;IACpC,IAAI,GAAG,GAAG,EAAE,CAAA;IACZ,IAAI,EAAE,GAAG,CAAC,CAAA;IACV,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,KAAK,CAAC,CAAA;QAClC,GAAG,IAAI,KAAK,CAAC,KAAK,KAAK,IAAI;YACzB,CAAC,CAAC,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC;YACxB,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,GAAG,cAAc,CAAC;iBACpD,MAAM,CAAC,KAAK,CAAC,GAAG,GAAG,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,CAAA;QAC1C,EAAE,GAAG,KAAK,CAAC,GAAG,CAAA;IAChB,CAAC;IACD,OAAO,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;AAC7B,CAAC"}

package/lib/chrome/status-config.d.ts

@@ -1,83 +1,193 @@
 /**
  * Status-line customization shared by settings, persistence, and rendering.
+ *
+ * The footer is two rows of fixed copy. This module owns *which* parts of those
+ * rows appear and how much of each telemetry group is shown — nothing more.
+ *
+ * There used to be a layout engine here: twelve independently placed items, each
+ * with its own colour, its own column, and two levels of ordering, plus a legacy
+ * `metrics` colour slot for groups that had no colour of their own. That is a
+ * page of settings for a two-line footer, and it asked the reader to decide
+ * things the footer could decide better. The reader now picks a density, and can
+ * turn individual telemetry groups off when a terminal is narrow or a metric is
+ * not interesting to them.
+ *
  * @module @agi-fans/dsh-tui/status-config
  */
 import type { VolatileSnapshot } from '@deepseek-ai/cordis';
-/** Stable telemetry groups users can show, hide, and reorder. */
+/**
+ * Telemetry groups on the second line, in the order they are shown.
+ *
+ * The order is fixed and follows the priority stated in `AGENTS.md`: cache,
+ * tokens, and latency first because they say how the turn is going; durations
+ * second; turn and step counts last, because they are the least actionable.
+ */
 export declare const STATUS_GROUP_IDS: readonly ["context", "cache", "tokens", "speed", "durations", "counts"];
 export type StatusGroupId = (typeof STATUS_GROUP_IDS)[number];
 /** First-line pieces: model, reasoning effort, workspace path, Git branch, and session title. */
 export declare const STATUS_META_IDS: readonly ["model", "effort", "path", "git", "session"];
 export type StatusMetaId = (typeof STATUS_META_IDS)[number];
-/** Every independently placed footer item. */
+/** Every part of the footer a reader can show or hide. */
 export declare const STATUS_ITEM_IDS: readonly ["model", "effort", "path", "git", "session", "context", "cache", "tokens", "speed", "durations", "counts"];
 export type StatusItemId = (typeof STATUS_ITEM_IDS)[number];
 export declare const STATUS_LABEL_STYLES: readonly ["compact", "full"];
 export type StatusLabelStyle = (typeof STATUS_LABEL_STYLES)[number];
+/** How context occupancy is written, which is a rendering choice, not a layout one. */
 export declare const STATUS_CONTEXT_STYLES: readonly ["percent", "bar", "tokens", "detailed"];
 export type StatusContextStyle = (typeof STATUS_CONTEXT_STYLES)[number];
 /**
- * Color slots: one per preview item, plus legacy `metrics` as a fallback for
- * telemetry groups that do not have their own color yet.
+ * How much the footer says.
+ *
+ * A density is the whole vocabulary now: three whole-footer shapes a reader can
+ * recognize, instead of twelve items they have to assemble. Individual groups
+ * can still be hidden on top of one, which is the one per-item decision that
+ * survives — "I do not care about this number" is real, "put this number on the
+ * left in accent green" is chrome nobody asked for.
+ */
+export declare const STATUS_DENSITIES: readonly ["minimal", "standard", "verbose"];
+export type StatusDensity = (typeof STATUS_DENSITIES)[number];
+/**
+ * Which telemetry row each group is drawn on.
+ *
+ * Two rows exist so the widest density can state everything without dropping
+ * anything: the first row is the window and the turn in flight, the second is
+ * what the session has accumulated. `minimal` and `standard` only fill the first
+ * row, so their footer stays two lines; the row is a property of the group, not
+ * of the density, so nothing moves between rows when the density changes.
+ */
+export declare const STATUS_ROWS: readonly (readonly StatusGroupId[])[];
+/**
+ * Groups drawn against the left edge of their row.
+ *
+ * A row answers two questions from opposite edges, and each side keeps its
+ * meaning down the footer: occupancy and the time already spent read on the
+ * left, throughput and the count of work done on the right.
+ */
+export declare const STATUS_LEFT_GROUPS: readonly StatusGroupId[];
+/** Which telemetry row a group is drawn on; 0 is the row under the composer. */
+export declare function statusGroupRow(id: StatusGroupId): number;
+/** Which side of its row a group is drawn on. */
+export declare function statusGroupSide(id: StatusGroupId): 'left' | 'right';
+/** Which groups each density shows, in footer order. */
+export declare const DENSITY_GROUPS: Readonly<Record<StatusDensity, readonly StatusGroupId[]>>;
+/** Which first-line pieces each density shows. */
+export declare const DENSITY_META: Readonly<Record<StatusDensity, readonly StatusMetaId[]>>;
+/** The label style each density defaults to. */
+export declare const DENSITY_LABELS: Readonly<Record<StatusDensity, StatusLabelStyle>>;
+/** The context representation each density defaults to. */
+export declare const DENSITY_CONTEXT: Readonly<Record<StatusDensity, StatusContextStyle>>;
+export declare const DEFAULT_STATUS_DENSITY: StatusDensity;
+/**
+ * Stored status-line input.
+ *
+ * `density` is the whole user-facing decision. `meta` and `groups` are narrowings
+ * on top of it: a reader who turned a number off keeps it off across densities,
+ * because hiding something is a statement about the number, not about the layout.
  */
-export declare const STATUS_COLOR_SLOTS: readonly ["model", "effort", "path", "git", "session", "context", "cache", "tokens", "speed", "durations", "counts", "metrics"];
-export type StatusColorSlot = (typeof STATUS_COLOR_SLOTS)[number];
-/** Theme tokens offered for a status item. `default` keeps the built-in hierarchy. */
-export declare const STATUS_COLOR_TOKENS: readonly ["default", "text", "muted", "accent", "success", "warning", "border", "label"];
-export type StatusColorToken = (typeof STATUS_COLOR_TOKENS)[number];
-/** Footer column an item can occupy. */
-export declare const STATUS_SIDES: readonly ["left", "right"];
-export type StatusSide = (typeof STATUS_SIDES)[number];
-export declare const DEFAULT_STATUS_SIDES: Record<StatusItemId, StatusSide>;
-/** Per-item color choices. Omitted items keep their built-in tone. */
-export type StatusBarColors = Partial<Record<StatusColorSlot, StatusColorToken>>;
-/** User-owned status-line layout. Missing `groups`/`meta` are hidden; `order` retains their slots. */
 export interface StatusBarConfig {
+    density: StatusDensity;
+    /**
+     * Whether the second line is drawn at all.
+     *
+     * Kept as its own field rather than expressed as "every group hidden": hiding
+     * all of them and calling that off would forget what to bring back when the
+     * reader turns telemetry on again.
+     */
+    enabled?: boolean;
+    /** Pieces the reader hid, on top of what the density shows. */
+    hidden: StatusItemId[];
+    /**
+     * Pieces the reader added beyond what the density shows.
+     *
+     * Without this, a part the density omits could not be turned on at all: `Space`
+     * on it was a no-op, while the row still said `hidden` — a control that looked
+     * broken. Positive and negative narrowing are both deltas from the density, so
+     * changing the density still changes everything the reader has not overruled.
+     */
+    shown: StatusItemId[];
+}
+/** A status-line document, including every field earlier releases wrote. */
+export type StatusBarInput = Partial<VolatileSnapshot<StatusBarConfig>> & {
+    /** Earlier releases spelled the whole layout out; read only while migrating. */
+    enabled?: boolean;
+    labels?: StatusLabelStyle;
+    contextStyle?: StatusContextStyle;
+    groups?: readonly StatusGroupId[];
+    order?: readonly StatusGroupId[];
+    meta?: readonly StatusMetaId[];
+    metaOrder?: readonly StatusMetaId[];
+    colors?: Readonly<Record<string, string>>;
+    sides?: Readonly<Record<string, string>>;
+};
+/** What the renderer consumes: the density expanded, with narrowings applied. */
+export interface ResolvedStatusBarConfig {
+    density: StatusDensity;
+    /** False when the reader hid the whole second line. */
     enabled: boolean;
     labels: StatusLabelStyle;
-    /** Context occupancy representation; omitted preferences default to percent. */
-    contextStyle?: StatusContextStyle;
-    groups: StatusGroupId[];
-    /** Complete visual order, including hidden groups. Absent in legacy settings. */
-    order?: StatusGroupId[];
-    /** Visible first-line items. Absent means every meta item is shown. */
-    meta?: StatusMetaId[];
-    /** Complete first-line order, including hidden meta items. */
-    metaOrder?: StatusMetaId[];
-    /** Optional per-item colors for the two-line footer. */
-    colors?: StatusBarColors;
-    /** Optional left/right column for each item. */
-    sides?: Partial<Record<StatusItemId, StatusSide>>;
-}
-/** Stored status-line input: a settings document value or a frozen config snapshot. */
-export type StatusBarInput = Partial<VolatileSnapshot<StatusBarConfig>>;
-/** Normalized layout always carries complete orders, colors, and columns. */
-export interface ResolvedStatusBarConfig extends StatusBarConfig {
     contextStyle: StatusContextStyle;
-    order: StatusGroupId[];
+    /** Visible telemetry groups, in fixed footer order. */
+    groups: StatusGroupId[];
+    /** Visible first-line pieces, in fixed footer order. */
     meta: StatusMetaId[];
-    metaOrder: StatusMetaId[];
-    colors: Required<StatusBarColors>;
-    sides: Record<StatusItemId, StatusSide>;
 }
-/** Legacy value accepted while existing settings documents migrate. */
+/** Earlier releases stored a three-value `statusPreset` beside the layout. */
 export declare const STATUS_PRESETS: readonly ["minimal", "compact", "full"];
 export type StatusPreset = (typeof STATUS_PRESETS)[number];
+/** Everything shown at the shipped density. */
 export declare const DEFAULT_STATUS_GROUPS: readonly StatusGroupId[];
-/**
- * Session title is offered but off by default: adding it to the first line
- * would push narrow terminals into degradation sooner. The terminal window
- * title carries it unconditionally.
- */
 export declare const DEFAULT_STATUS_META: readonly StatusMetaId[];
-export declare const DEFAULT_STATUS_COLORS: Required<StatusBarColors>;
-/** Return a fresh default so callers can safely replace its group list. */
-export declare function defaultStatusBarConfig(): ResolvedStatusBarConfig;
-export declare function isStatusMetaId(value: unknown): value is StatusMetaId;
 export declare function isStatusItemId(value: unknown): value is StatusItemId;
-export declare function itemSide(config: StatusBarConfig, id: StatusItemId): StatusSide;
+export declare function isStatusMetaId(value: unknown): value is StatusMetaId;
+export declare function isStatusGroupId(value: unknown): value is StatusGroupId;
 /**
- * Normalize persisted input at the single configuration seam. Invalid and
- * duplicate groups disappear; legacy presets retain their previous meaning.
+ * Normalize persisted input at the single configuration seam.
+ *
+ * A document written by an earlier release described its layout item by item.
+ * Rather than fail it or resurrect the engine, the shape it asked for is reduced
+ * to the nearest density: what was visible decides the narrowing, and the retired
+ * per-item colour and column choices are dropped, because both shipped palettes
+ * already paint them the right way.
  */
 export declare function resolveStatusBarConfig(config?: StatusBarInput, legacyPreset?: StatusPreset): ResolvedStatusBarConfig;
+/**
+ * What a stored document asks to hide, relative to its density.
+ *
+ * Exported because writing the document back needs the same reading: a caller
+ * that reconstructed the narrowing from the *rendered* footer instead would turn
+ * every part its density happens to omit into a permanent hiding, and changing
+ * the density afterwards would no longer restore them.
+ */
+export declare function statusNarrowing(config: StatusBarInput | undefined, density: StatusDensity): StatusItemId[];
+/** What a stored document adds beyond its density. */
+export declare function statusAdditions(config: StatusBarInput | undefined): StatusItemId[];
+/**
+ * True when a document has already been expanded.
+ *
+ * `resolveStatusBarConfig` is idempotent only if it can tell the two shapes
+ * apart: an expanded config carries `groups`/`meta`, which a stored document
+ * never does. Without this the renderer re-resolved its own input and silently
+ * dropped every narrowing, so a hidden group came back.
+ */
+export declare function isResolvedStatusBarConfig(config: ResolvedStatusBarConfig | StatusBarInput): config is ResolvedStatusBarConfig;
+/**
+ * The document a resolved config came from.
+ *
+ * Visibility cannot say which of two reasons a part is missing: the reader hid
+ * it, or the density never included it. Rebuilding the document from what the
+ * footer shows therefore has to keep them apart — a part the density omits must
+ * stay out of `hidden`, or raising the density would silently do nothing — and it
+ * is the only way a caller that holds the resolved form (the provider holds the
+ * footer it is drawing) can hand the document back without losing a choice.
+ */
+export declare function statusBarDocument(config: ResolvedStatusBarConfig): StatusBarConfig;
+/** True when the footer shows this part at the current narrowing. */
+export declare function statusItemVisible(config: ResolvedStatusBarConfig, id: StatusItemId): boolean;
+/**
+ * The same document with one part turned on or off.
+ *
+ * Both directions are deltas from the density, so a part the density omits can
+ * be added and a part it includes can be removed, without either one rewriting
+ * the other's state.
+ */
+export declare function toggleStatusItem(config: StatusBarConfig, id: StatusItemId): StatusBarConfig;