@agimon-ai/po-web-dashboard 0.0.0-alpha.0

package/dist/web/lib/settingsDraft.mjs

@@ -0,0 +1,45 @@
+//#region src/web/lib/settingsDraft.ts
+/**
+* What a settings page does with pending edits, kept out of the component so it
+* can be checked without a browser.
+*
+* The rules that matter are all here: a field is only editable at a scope the
+* key is actually read from, a cleared field removes the key rather than
+* writing an empty value the parser rejects, and numeric drafts retain their
+* type when the page combines these edits into one atomic save.
+*/
+const KEY_SEPARATOR = ".";
+function settingsKeyOf(field) {
+	return field.keyPath.join(KEY_SEPARATOR);
+}
+/** Why a field cannot be edited at the selected scope, or nothing. */
+function settingsLockedReason(view, scope) {
+	if (view === void 0 || view.scope === "both" || view.scope === scope) return void 0;
+	return view.scope === "global" ? "global only" : "repository only";
+}
+/**
+* The typed edits a save combines into one request with the file's read hash.
+* Keeping contribution order makes the result predictable for callers.
+*/
+function plannedSettingsWrites(input) {
+	return input.fields.filter((field) => settingsKeyOf(field) in input.drafts).map((field) => {
+		const draft = input.drafts[settingsKeyOf(field)] ?? null;
+		const numeric = field.kind === "number" && draft !== null && draft.trim() !== "" ? Number(draft) : void 0;
+		return {
+			repoRoot: input.repoRoot,
+			scope: input.scope,
+			keyPath: field.keyPath,
+			value: numeric !== void 0 && Number.isFinite(numeric) ? numeric : draft,
+			expectedHash: input.startingHash
+		};
+	});
+}
+/** Whether a save can be attempted at all: something changed, and it can land somewhere. */
+function canSaveSettings(input) {
+	if (input.dirty === 0) return false;
+	return input.scope === "global" || input.repoRoot !== "";
+}
+//#endregion
+export { canSaveSettings, plannedSettingsWrites, settingsKeyOf, settingsLockedReason };
+
+//# sourceMappingURL=settingsDraft.mjs.map

package/dist/web/lib/settingsDraft.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"settingsDraft.mjs","names":[],"sources":["../../../src/web/lib/settingsDraft.ts"],"sourcesContent":["import type { SettingsFieldContribution } from '@agimon-ai/po-core/web';\n\nimport type { SettingsScope, SettingsValueView, SettingsWriteRequest } from '../../types/settings';\n\n/**\n * What a settings page does with pending edits, kept out of the component so it\n * can be checked without a browser.\n *\n * The rules that matter are all here: a field is only editable at a scope the\n * key is actually read from, a cleared field removes the key rather than\n * writing an empty value the parser rejects, and numeric drafts retain their\n * type when the page combines these edits into one atomic save.\n */\n\nconst KEY_SEPARATOR = '.';\n\nexport function settingsKeyOf(field: SettingsFieldContribution): string {\n  return field.keyPath.join(KEY_SEPARATOR);\n}\n\n/** Why a field cannot be edited at the selected scope, or nothing. */\nexport function settingsLockedReason(view: SettingsValueView | undefined, scope: SettingsScope): string | undefined {\n  if (view === undefined || view.scope === 'both' || view.scope === scope) return undefined;\n  return view.scope === 'global' ? 'global only' : 'repository only';\n}\n\nexport interface PlannedWritesInput {\n  fields: readonly SettingsFieldContribution[];\n  /** Pending edits by dotted key; null clears the key. */\n  drafts: Readonly<Record<string, string | null>>;\n  scope: SettingsScope;\n  repoRoot: string;\n  /** The target file's hash when the page last read it. */\n  startingHash: string;\n}\n\n/**\n * The typed edits a save combines into one request with the file's read hash.\n * Keeping contribution order makes the result predictable for callers.\n */\nexport function plannedSettingsWrites(input: PlannedWritesInput): SettingsWriteRequest[] {\n  return input.fields\n    .filter((field) => settingsKeyOf(field) in input.drafts)\n    .map((field) => {\n      const draft = input.drafts[settingsKeyOf(field)] ?? null;\n      const numeric = field.kind === 'number' && draft !== null && draft.trim() !== '' ? Number(draft) : undefined;\n      return {\n        repoRoot: input.repoRoot,\n        scope: input.scope,\n        keyPath: field.keyPath,\n        value: numeric !== undefined && Number.isFinite(numeric) ? numeric : draft,\n        expectedHash: input.startingHash,\n      };\n    });\n}\n\n/** Whether a save can be attempted at all: something changed, and it can land somewhere. */\nexport function canSaveSettings(input: { dirty: number; scope: SettingsScope; repoRoot: string }): boolean {\n  if (input.dirty === 0) return false;\n  // A repository write needs a repository; a global one never does.\n  return input.scope === 'global' || input.repoRoot !== '';\n}\n"],"mappings":";;;;;;;;;;AAcA,MAAM,gBAAgB;AAEtB,SAAgB,cAAc,OAA0C;CACtE,OAAO,MAAM,QAAQ,KAAK,aAAa;AACzC;;AAGA,SAAgB,qBAAqB,MAAqC,OAA0C;CAClH,IAAI,SAAS,KAAA,KAAa,KAAK,UAAU,UAAU,KAAK,UAAU,OAAO,OAAO,KAAA;CAChF,OAAO,KAAK,UAAU,WAAW,gBAAgB;AACnD;;;;;AAgBA,SAAgB,sBAAsB,OAAmD;CACvF,OAAO,MAAM,OACV,QAAQ,UAAU,cAAc,KAAK,KAAK,MAAM,MAAM,CAAC,CACvD,KAAK,UAAU;EACd,MAAM,QAAQ,MAAM,OAAO,cAAc,KAAK,MAAM;EACpD,MAAM,UAAU,MAAM,SAAS,YAAY,UAAU,QAAQ,MAAM,KAAK,MAAM,KAAK,OAAO,KAAK,IAAI,KAAA;EACnG,OAAO;GACL,UAAU,MAAM;GAChB,OAAO,MAAM;GACb,SAAS,MAAM;GACf,OAAO,YAAY,KAAA,KAAa,OAAO,SAAS,OAAO,IAAI,UAAU;GACrE,cAAc,MAAM;EACtB;CACF,CAAC;AACL;;AAGA,SAAgB,gBAAgB,OAA2E;CACzG,IAAI,MAAM,UAAU,GAAG,OAAO;CAE9B,OAAO,MAAM,UAAU,YAAY,MAAM,aAAa;AACxD"}

package/dist/web/lib/settingsSections.cjs

@@ -0,0 +1,108 @@
+const require_pluginRegistry = require("./pluginRegistry.cjs");
+//#region src/web/lib/settingsSections.ts
+const GENERAL_SETTINGS_SECTIONS = [
+	{
+		id: "providers",
+		label: "providers",
+		detail: "sign in to the model providers Pi can use",
+		workspace: "general"
+	},
+	{
+		id: "appearance",
+		label: "appearance",
+		detail: "pick the theme the cockpit renders with",
+		workspace: "general"
+	},
+	{
+		id: "notifications",
+		label: "notifications",
+		detail: "allow live session notifications in this browser",
+		workspace: "general"
+	},
+	{
+		id: "images",
+		label: "images",
+		detail: "how large an image may be when it reaches a model",
+		workspace: "general"
+	},
+	{
+		id: "remote",
+		label: "remote control",
+		detail: "save a named tunnel and expose live sessions to MCP clients",
+		workspace: "general"
+	},
+	{
+		id: "plugins",
+		label: "plugins",
+		detail: "the web plugins this bundle carries and what their install resolved",
+		workspace: "general"
+	}
+];
+const REPOSITORY_DEFAULTS_SECTION = {
+	id: "repositories",
+	label: "defaults",
+	detail: "mode, domains, and profile",
+	workspace: "repository"
+};
+const DEFAULT_CONTRIBUTED_ORDER = 1e3;
+/** Repository-workspace copies need their own route id, since the id is the route param. */
+const REPOSITORY_SECTION_PREFIX = "repository-";
+const DEFAULT_SETTINGS_SECTION = GENERAL_SETTINGS_SECTIONS[0].id;
+const DEFAULT_REPOSITORY_SETTINGS_SECTION = REPOSITORY_DEFAULTS_SECTION.id;
+function byMenuOrder(left, right) {
+	return (left.order ?? DEFAULT_CONTRIBUTED_ORDER) - (right.order ?? DEFAULT_CONTRIBUTED_ORDER) || left.id.localeCompare(right.id);
+}
+/**
+* Every page the menu offers. Read through a function rather than held in a
+* const: plugins install before the first render, but a module-level array
+* evaluated at import time would freeze the list before that happened.
+*/
+function settingsSections(workspace) {
+	const contributed = [...require_pluginRegistry.pluginSettingsSections()].sort(byMenuOrder).map((contribution) => ({
+		id: contribution.id,
+		label: contribution.label,
+		detail: contribution.detail,
+		workspace: "general",
+		contribution
+	}));
+	const contributedForRepository = [...require_pluginRegistry.pluginSettingsSections("workspace")].sort(byMenuOrder).map((contribution) => ({
+		id: `${REPOSITORY_SECTION_PREFIX}${contribution.id}`,
+		label: contribution.label,
+		detail: contribution.detail,
+		workspace: "repository",
+		contribution
+	}));
+	const panels = [...require_pluginRegistry.pluginSettingsPanels()].sort(byMenuOrder).map((panel) => ({
+		id: panel.id,
+		label: panel.label,
+		detail: panel.detail,
+		workspace: "general",
+		panel
+	}));
+	const repositoryPanels = require_pluginRegistry.pluginRepositorySettingsPanels().map((repositoryPanel) => ({
+		id: `${REPOSITORY_SECTION_PREFIX}${repositoryPanel.pluginId}`,
+		label: repositoryPanel.label,
+		detail: repositoryPanel.detail,
+		workspace: "repository",
+		repositoryPanel
+	}));
+	const all = [
+		...GENERAL_SETTINGS_SECTIONS,
+		...contributed,
+		...panels,
+		REPOSITORY_DEFAULTS_SECTION,
+		...repositoryPanels,
+		...contributedForRepository
+	];
+	return workspace === void 0 ? all : all.filter((section) => section.workspace === workspace);
+}
+function settingsSection(id) {
+	return settingsSections().find((section) => section.id === id);
+}
+//#endregion
+exports.DEFAULT_REPOSITORY_SETTINGS_SECTION = DEFAULT_REPOSITORY_SETTINGS_SECTION;
+exports.DEFAULT_SETTINGS_SECTION = DEFAULT_SETTINGS_SECTION;
+exports.settingsSection = settingsSection;
+exports.settingsSections = settingsSections;
+
+//# sourceMappingURL=settingsSections.cjs.map

package/dist/web/lib/settingsSections.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"settingsSections.cjs","names":["pluginSettingsSections","pluginSettingsPanels","pluginRepositorySettingsPanels"],"sources":["../../../src/web/lib/settingsSections.ts"],"sourcesContent":["import type { SettingsSectionContribution } from '@agimon-ai/po-core/web';\n\nimport {\n  pluginRepositorySettingsPanels,\n  pluginSettingsPanels,\n  pluginSettingsSections,\n  type InstalledRepositorySettingsPanel,\n  type InstalledSettingsPanel,\n} from './pluginRegistry';\n\n/**\n * The settings menu, as data: the rail's gear and the settings page both\n * need to name a section, and neither feature may import the other.\n *\n * The host's own pages come first and keep fixed positions, because they\n * are about the cockpit itself rather than about a package. Contributed pages\n * sort after them, by their declared order and then their id, so the menu is\n * stable across syncs whatever order plugins install in.\n */\nexport type SettingsWorkspace = 'general' | 'repository';\n\nexport interface SettingsSection {\n  id: string;\n  label: string;\n  detail: string;\n  workspace: SettingsWorkspace;\n  /** The fields a contributed page renders; absent on the host's own pages. */\n  contribution?: SettingsSectionContribution;\n  /** Package panel hosted inside the repository workspace. */\n  repositoryPanel?: InstalledRepositorySettingsPanel;\n  /** A page the contributing package draws itself, rather than fields the host renders. */\n  panel?: InstalledSettingsPanel;\n}\n\nconst GENERAL_SETTINGS_SECTIONS: readonly SettingsSection[] = [\n  {\n    id: 'providers',\n    label: 'providers',\n    detail: 'sign in to the model providers Pi can use',\n    workspace: 'general',\n  },\n  {\n    id: 'appearance',\n    label: 'appearance',\n    detail: 'pick the theme the cockpit renders with',\n    workspace: 'general',\n  },\n  {\n    id: 'notifications',\n    label: 'notifications',\n    detail: 'allow live session notifications in this browser',\n    workspace: 'general',\n  },\n  {\n    id: 'images',\n    label: 'images',\n    detail: 'how large an image may be when it reaches a model',\n    workspace: 'general',\n  },\n  {\n    id: 'remote',\n    label: 'remote control',\n    detail: 'save a named tunnel and expose live sessions to MCP clients',\n    workspace: 'general',\n  },\n  {\n    id: 'plugins',\n    label: 'plugins',\n    detail: 'the web plugins this bundle carries and what their install resolved',\n    workspace: 'general',\n  },\n];\n\nconst REPOSITORY_DEFAULTS_SECTION: SettingsSection = {\n  id: 'repositories',\n  label: 'defaults',\n  detail: 'mode, domains, and profile',\n  workspace: 'repository',\n};\n\nconst DEFAULT_CONTRIBUTED_ORDER = 1000;\n\n/** Repository-workspace copies need their own route id, since the id is the route param. */\nconst REPOSITORY_SECTION_PREFIX = 'repository-';\n\nexport const DEFAULT_SETTINGS_SECTION = GENERAL_SETTINGS_SECTIONS[0]!.id;\nexport const DEFAULT_REPOSITORY_SETTINGS_SECTION = REPOSITORY_DEFAULTS_SECTION.id;\n\ninterface MenuOrdered {\n  id: string;\n  order?: number;\n}\n\nfunction byMenuOrder(left: MenuOrdered, right: MenuOrdered): number {\n  return (\n    (left.order ?? DEFAULT_CONTRIBUTED_ORDER) - (right.order ?? DEFAULT_CONTRIBUTED_ORDER) ||\n    left.id.localeCompare(right.id)\n  );\n}\n\n/**\n * Every page the menu offers. Read through a function rather than held in a\n * const: plugins install before the first render, but a module-level array\n * evaluated at import time would freeze the list before that happened.\n */\nexport function settingsSections(workspace?: SettingsWorkspace): readonly SettingsSection[] {\n  const contributions = [...pluginSettingsSections()].sort(byMenuOrder);\n  // The same page is offered in both workspaces. Scope comes from the workspace\n  // the reader is in, so the general copy edits the global file and the\n  // repository copy edits whichever repository the workspace picker holds.\n  const contributed = contributions.map((contribution) => ({\n    id: contribution.id,\n    label: contribution.label,\n    detail: contribution.detail,\n    workspace: 'general' as const,\n    contribution,\n  }));\n  const contributedForRepository = [...pluginSettingsSections('workspace')].sort(byMenuOrder).map((contribution) => ({\n    id: `${REPOSITORY_SECTION_PREFIX}${contribution.id}`,\n    label: contribution.label,\n    detail: contribution.detail,\n    workspace: 'repository' as const,\n    contribution,\n  }));\n  // A self-drawn page has no scope to switch: it reports rather than writes,\n  // so it appears once, in the general workspace, and not as a repository copy.\n  const panels = [...pluginSettingsPanels()].sort(byMenuOrder).map((panel) => ({\n    id: panel.id,\n    label: panel.label,\n    detail: panel.detail,\n    workspace: 'general' as const,\n    panel,\n  }));\n  const repositoryPanels = pluginRepositorySettingsPanels().map((repositoryPanel) => ({\n    id: `${REPOSITORY_SECTION_PREFIX}${repositoryPanel.pluginId}`,\n    label: repositoryPanel.label,\n    detail: repositoryPanel.detail,\n    workspace: 'repository' as const,\n    repositoryPanel,\n  }));\n  const all = [\n    ...GENERAL_SETTINGS_SECTIONS,\n    ...contributed,\n    ...panels,\n    REPOSITORY_DEFAULTS_SECTION,\n    ...repositoryPanels,\n    ...contributedForRepository,\n  ];\n  return workspace === undefined ? all : all.filter((section) => section.workspace === workspace);\n}\n\nexport function settingsSection(id: string | undefined): SettingsSection | undefined {\n  return settingsSections().find((section) => section.id === id);\n}\n"],"mappings":";;AAkCA,MAAM,4BAAwD;CAC5D;EACE,IAAI;EACJ,OAAO;EACP,QAAQ;EACR,WAAW;CACb;CACA;EACE,IAAI;EACJ,OAAO;EACP,QAAQ;EACR,WAAW;CACb;CACA;EACE,IAAI;EACJ,OAAO;EACP,QAAQ;EACR,WAAW;CACb;CACA;EACE,IAAI;EACJ,OAAO;EACP,QAAQ;EACR,WAAW;CACb;CACA;EACE,IAAI;EACJ,OAAO;EACP,QAAQ;EACR,WAAW;CACb;CACA;EACE,IAAI;EACJ,OAAO;EACP,QAAQ;EACR,WAAW;CACb;AACF;AAEA,MAAM,8BAA+C;CACnD,IAAI;CACJ,OAAO;CACP,QAAQ;CACR,WAAW;AACb;AAEA,MAAM,4BAA4B;;AAGlC,MAAM,4BAA4B;AAElC,MAAa,2BAA2B,0BAA0B,EAAE,CAAE;AACtE,MAAa,sCAAsC,4BAA4B;AAO/E,SAAS,YAAY,MAAmB,OAA4B;CAClE,QACG,KAAK,SAAS,8BAA8B,MAAM,SAAS,8BAC5D,KAAK,GAAG,cAAc,MAAM,EAAE;AAElC;;;;;;AAOA,SAAgB,iBAAiB,WAA2D;CAK1F,MAAM,cAJgB,CAAC,GAAGA,uBAAAA,uBAAuB,CAAC,CAAC,CAAC,KAAK,WAIzB,CAAC,CAAC,KAAK,kBAAkB;EACvD,IAAI,aAAa;EACjB,OAAO,aAAa;EACpB,QAAQ,aAAa;EACrB,WAAW;EACX;CACF,EAAE;CACF,MAAM,2BAA2B,CAAC,GAAGA,uBAAAA,uBAAuB,WAAW,CAAC,CAAC,CAAC,KAAK,WAAW,CAAC,CAAC,KAAK,kBAAkB;EACjH,IAAI,GAAG,4BAA4B,aAAa;EAChD,OAAO,aAAa;EACpB,QAAQ,aAAa;EACrB,WAAW;EACX;CACF,EAAE;CAGF,MAAM,SAAS,CAAC,GAAGC,uBAAAA,qBAAqB,CAAC,CAAC,CAAC,KAAK,WAAW,CAAC,CAAC,KAAK,WAAW;EAC3E,IAAI,MAAM;EACV,OAAO,MAAM;EACb,QAAQ,MAAM;EACd,WAAW;EACX;CACF,EAAE;CACF,MAAM,mBAAmBC,uBAAAA,+BAA+B,CAAC,CAAC,KAAK,qBAAqB;EAClF,IAAI,GAAG,4BAA4B,gBAAgB;EACnD,OAAO,gBAAgB;EACvB,QAAQ,gBAAgB;EACxB,WAAW;EACX;CACF,EAAE;CACF,MAAM,MAAM;EACV,GAAG;EACH,GAAG;EACH,GAAG;EACH;EACA,GAAG;EACH,GAAG;CACL;CACA,OAAO,cAAc,KAAA,IAAY,MAAM,IAAI,QAAQ,YAAY,QAAQ,cAAc,SAAS;AAChG;AAEA,SAAgB,gBAAgB,IAAqD;CACnF,OAAO,iBAAiB,CAAC,CAAC,MAAM,YAAY,QAAQ,OAAO,EAAE;AAC/D"}

package/dist/web/lib/settingsSections.d.mts

@@ -0,0 +1,36 @@
+import { InstalledRepositorySettingsPanel, InstalledSettingsPanel } from "./pluginRegistry.mjs";
+import { SettingsSectionContribution } from "@agimon-ai/po-core/web";
+//#region src/web/lib/settingsSections.d.ts
+/**
+ * The settings menu, as data: the rail's gear and the settings page both
+ * need to name a section, and neither feature may import the other.
+ *
+ * The host's own pages come first and keep fixed positions, because they
+ * are about the cockpit itself rather than about a package. Contributed pages
+ * sort after them, by their declared order and then their id, so the menu is
+ * stable across syncs whatever order plugins install in.
+ */
+export type SettingsWorkspace = 'general' | 'repository';
+export interface SettingsSection {
+  id: string;
+  label: string;
+  detail: string;
+  workspace: SettingsWorkspace;
+  /** The fields a contributed page renders; absent on the host's own pages. */
+  contribution?: SettingsSectionContribution;
+  /** Package panel hosted inside the repository workspace. */
+  repositoryPanel?: InstalledRepositorySettingsPanel;
+  /** A page the contributing package draws itself, rather than fields the host renders. */
+  panel?: InstalledSettingsPanel;
+}
+export declare const DEFAULT_SETTINGS_SECTION: string;
+export declare const DEFAULT_REPOSITORY_SETTINGS_SECTION: string;
+/**
+ * Every page the menu offers. Read through a function rather than held in a
+ * const: plugins install before the first render, but a module-level array
+ * evaluated at import time would freeze the list before that happened.
+ */
+export declare function settingsSections(workspace?: SettingsWorkspace): readonly SettingsSection[];
+export declare function settingsSection(id: string | undefined): SettingsSection | undefined;
+//#endregion
+//# sourceMappingURL=settingsSections.d.mts.map

package/dist/web/lib/settingsSections.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"settingsSections.d.mts","names":[],"sources":["../../../src/web/lib/settingsSections.ts"],"mappings":";;;;;;;;;;;;YAmBY;iBAEK;EACf;EACA;EACA;EACA,WAAW;;EAEX,eAAe;;EAEf,kBAAkB;;EAElB,QAAQ;;qBAsDG;qBACA;;;;;;wBAmBG,iBAAiB,YAAY,6BAA6B;wBA8C1D,gBAAgB,yBAAyB"}

package/dist/web/lib/settingsSections.mjs

@@ -0,0 +1,105 @@
+import { pluginRepositorySettingsPanels, pluginSettingsPanels, pluginSettingsSections } from "./pluginRegistry.mjs";
+//#region src/web/lib/settingsSections.ts
+const GENERAL_SETTINGS_SECTIONS = [
+	{
+		id: "providers",
+		label: "providers",
+		detail: "sign in to the model providers Pi can use",
+		workspace: "general"
+	},
+	{
+		id: "appearance",
+		label: "appearance",
+		detail: "pick the theme the cockpit renders with",
+		workspace: "general"
+	},
+	{
+		id: "notifications",
+		label: "notifications",
+		detail: "allow live session notifications in this browser",
+		workspace: "general"
+	},
+	{
+		id: "images",
+		label: "images",
+		detail: "how large an image may be when it reaches a model",
+		workspace: "general"
+	},
+	{
+		id: "remote",
+		label: "remote control",
+		detail: "save a named tunnel and expose live sessions to MCP clients",
+		workspace: "general"
+	},
+	{
+		id: "plugins",
+		label: "plugins",
+		detail: "the web plugins this bundle carries and what their install resolved",
+		workspace: "general"
+	}
+];
+const REPOSITORY_DEFAULTS_SECTION = {
+	id: "repositories",
+	label: "defaults",
+	detail: "mode, domains, and profile",
+	workspace: "repository"
+};
+const DEFAULT_CONTRIBUTED_ORDER = 1e3;
+/** Repository-workspace copies need their own route id, since the id is the route param. */
+const REPOSITORY_SECTION_PREFIX = "repository-";
+const DEFAULT_SETTINGS_SECTION = GENERAL_SETTINGS_SECTIONS[0].id;
+const DEFAULT_REPOSITORY_SETTINGS_SECTION = REPOSITORY_DEFAULTS_SECTION.id;
+function byMenuOrder(left, right) {
+	return (left.order ?? DEFAULT_CONTRIBUTED_ORDER) - (right.order ?? DEFAULT_CONTRIBUTED_ORDER) || left.id.localeCompare(right.id);
+}
+/**
+* Every page the menu offers. Read through a function rather than held in a
+* const: plugins install before the first render, but a module-level array
+* evaluated at import time would freeze the list before that happened.
+*/
+function settingsSections(workspace) {
+	const contributed = [...pluginSettingsSections()].sort(byMenuOrder).map((contribution) => ({
+		id: contribution.id,
+		label: contribution.label,
+		detail: contribution.detail,
+		workspace: "general",
+		contribution
+	}));
+	const contributedForRepository = [...pluginSettingsSections("workspace")].sort(byMenuOrder).map((contribution) => ({
+		id: `${REPOSITORY_SECTION_PREFIX}${contribution.id}`,
+		label: contribution.label,
+		detail: contribution.detail,
+		workspace: "repository",
+		contribution
+	}));
+	const panels = [...pluginSettingsPanels()].sort(byMenuOrder).map((panel) => ({
+		id: panel.id,
+		label: panel.label,
+		detail: panel.detail,
+		workspace: "general",
+		panel
+	}));
+	const repositoryPanels = pluginRepositorySettingsPanels().map((repositoryPanel) => ({
+		id: `${REPOSITORY_SECTION_PREFIX}${repositoryPanel.pluginId}`,
+		label: repositoryPanel.label,
+		detail: repositoryPanel.detail,
+		workspace: "repository",
+		repositoryPanel
+	}));
+	const all = [
+		...GENERAL_SETTINGS_SECTIONS,
+		...contributed,
+		...panels,
+		REPOSITORY_DEFAULTS_SECTION,
+		...repositoryPanels,
+		...contributedForRepository
+	];
+	return workspace === void 0 ? all : all.filter((section) => section.workspace === workspace);
+}
+function settingsSection(id) {
+	return settingsSections().find((section) => section.id === id);
+}
+//#endregion
+export { DEFAULT_REPOSITORY_SETTINGS_SECTION, DEFAULT_SETTINGS_SECTION, settingsSection, settingsSections };
+
+//# sourceMappingURL=settingsSections.mjs.map

package/dist/web/lib/settingsSections.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"settingsSections.mjs","names":[],"sources":["../../../src/web/lib/settingsSections.ts"],"sourcesContent":["import type { SettingsSectionContribution } from '@agimon-ai/po-core/web';\n\nimport {\n  pluginRepositorySettingsPanels,\n  pluginSettingsPanels,\n  pluginSettingsSections,\n  type InstalledRepositorySettingsPanel,\n  type InstalledSettingsPanel,\n} from './pluginRegistry';\n\n/**\n * The settings menu, as data: the rail's gear and the settings page both\n * need to name a section, and neither feature may import the other.\n *\n * The host's own pages come first and keep fixed positions, because they\n * are about the cockpit itself rather than about a package. Contributed pages\n * sort after them, by their declared order and then their id, so the menu is\n * stable across syncs whatever order plugins install in.\n */\nexport type SettingsWorkspace = 'general' | 'repository';\n\nexport interface SettingsSection {\n  id: string;\n  label: string;\n  detail: string;\n  workspace: SettingsWorkspace;\n  /** The fields a contributed page renders; absent on the host's own pages. */\n  contribution?: SettingsSectionContribution;\n  /** Package panel hosted inside the repository workspace. */\n  repositoryPanel?: InstalledRepositorySettingsPanel;\n  /** A page the contributing package draws itself, rather than fields the host renders. */\n  panel?: InstalledSettingsPanel;\n}\n\nconst GENERAL_SETTINGS_SECTIONS: readonly SettingsSection[] = [\n  {\n    id: 'providers',\n    label: 'providers',\n    detail: 'sign in to the model providers Pi can use',\n    workspace: 'general',\n  },\n  {\n    id: 'appearance',\n    label: 'appearance',\n    detail: 'pick the theme the cockpit renders with',\n    workspace: 'general',\n  },\n  {\n    id: 'notifications',\n    label: 'notifications',\n    detail: 'allow live session notifications in this browser',\n    workspace: 'general',\n  },\n  {\n    id: 'images',\n    label: 'images',\n    detail: 'how large an image may be when it reaches a model',\n    workspace: 'general',\n  },\n  {\n    id: 'remote',\n    label: 'remote control',\n    detail: 'save a named tunnel and expose live sessions to MCP clients',\n    workspace: 'general',\n  },\n  {\n    id: 'plugins',\n    label: 'plugins',\n    detail: 'the web plugins this bundle carries and what their install resolved',\n    workspace: 'general',\n  },\n];\n\nconst REPOSITORY_DEFAULTS_SECTION: SettingsSection = {\n  id: 'repositories',\n  label: 'defaults',\n  detail: 'mode, domains, and profile',\n  workspace: 'repository',\n};\n\nconst DEFAULT_CONTRIBUTED_ORDER = 1000;\n\n/** Repository-workspace copies need their own route id, since the id is the route param. */\nconst REPOSITORY_SECTION_PREFIX = 'repository-';\n\nexport const DEFAULT_SETTINGS_SECTION = GENERAL_SETTINGS_SECTIONS[0]!.id;\nexport const DEFAULT_REPOSITORY_SETTINGS_SECTION = REPOSITORY_DEFAULTS_SECTION.id;\n\ninterface MenuOrdered {\n  id: string;\n  order?: number;\n}\n\nfunction byMenuOrder(left: MenuOrdered, right: MenuOrdered): number {\n  return (\n    (left.order ?? DEFAULT_CONTRIBUTED_ORDER) - (right.order ?? DEFAULT_CONTRIBUTED_ORDER) ||\n    left.id.localeCompare(right.id)\n  );\n}\n\n/**\n * Every page the menu offers. Read through a function rather than held in a\n * const: plugins install before the first render, but a module-level array\n * evaluated at import time would freeze the list before that happened.\n */\nexport function settingsSections(workspace?: SettingsWorkspace): readonly SettingsSection[] {\n  const contributions = [...pluginSettingsSections()].sort(byMenuOrder);\n  // The same page is offered in both workspaces. Scope comes from the workspace\n  // the reader is in, so the general copy edits the global file and the\n  // repository copy edits whichever repository the workspace picker holds.\n  const contributed = contributions.map((contribution) => ({\n    id: contribution.id,\n    label: contribution.label,\n    detail: contribution.detail,\n    workspace: 'general' as const,\n    contribution,\n  }));\n  const contributedForRepository = [...pluginSettingsSections('workspace')].sort(byMenuOrder).map((contribution) => ({\n    id: `${REPOSITORY_SECTION_PREFIX}${contribution.id}`,\n    label: contribution.label,\n    detail: contribution.detail,\n    workspace: 'repository' as const,\n    contribution,\n  }));\n  // A self-drawn page has no scope to switch: it reports rather than writes,\n  // so it appears once, in the general workspace, and not as a repository copy.\n  const panels = [...pluginSettingsPanels()].sort(byMenuOrder).map((panel) => ({\n    id: panel.id,\n    label: panel.label,\n    detail: panel.detail,\n    workspace: 'general' as const,\n    panel,\n  }));\n  const repositoryPanels = pluginRepositorySettingsPanels().map((repositoryPanel) => ({\n    id: `${REPOSITORY_SECTION_PREFIX}${repositoryPanel.pluginId}`,\n    label: repositoryPanel.label,\n    detail: repositoryPanel.detail,\n    workspace: 'repository' as const,\n    repositoryPanel,\n  }));\n  const all = [\n    ...GENERAL_SETTINGS_SECTIONS,\n    ...contributed,\n    ...panels,\n    REPOSITORY_DEFAULTS_SECTION,\n    ...repositoryPanels,\n    ...contributedForRepository,\n  ];\n  return workspace === undefined ? all : all.filter((section) => section.workspace === workspace);\n}\n\nexport function settingsSection(id: string | undefined): SettingsSection | undefined {\n  return settingsSections().find((section) => section.id === id);\n}\n"],"mappings":";;AAkCA,MAAM,4BAAwD;CAC5D;EACE,IAAI;EACJ,OAAO;EACP,QAAQ;EACR,WAAW;CACb;CACA;EACE,IAAI;EACJ,OAAO;EACP,QAAQ;EACR,WAAW;CACb;CACA;EACE,IAAI;EACJ,OAAO;EACP,QAAQ;EACR,WAAW;CACb;CACA;EACE,IAAI;EACJ,OAAO;EACP,QAAQ;EACR,WAAW;CACb;CACA;EACE,IAAI;EACJ,OAAO;EACP,QAAQ;EACR,WAAW;CACb;CACA;EACE,IAAI;EACJ,OAAO;EACP,QAAQ;EACR,WAAW;CACb;AACF;AAEA,MAAM,8BAA+C;CACnD,IAAI;CACJ,OAAO;CACP,QAAQ;CACR,WAAW;AACb;AAEA,MAAM,4BAA4B;;AAGlC,MAAM,4BAA4B;AAElC,MAAa,2BAA2B,0BAA0B,EAAE,CAAE;AACtE,MAAa,sCAAsC,4BAA4B;AAO/E,SAAS,YAAY,MAAmB,OAA4B;CAClE,QACG,KAAK,SAAS,8BAA8B,MAAM,SAAS,8BAC5D,KAAK,GAAG,cAAc,MAAM,EAAE;AAElC;;;;;;AAOA,SAAgB,iBAAiB,WAA2D;CAK1F,MAAM,cAJgB,CAAC,GAAG,uBAAuB,CAAC,CAAC,CAAC,KAAK,WAIzB,CAAC,CAAC,KAAK,kBAAkB;EACvD,IAAI,aAAa;EACjB,OAAO,aAAa;EACpB,QAAQ,aAAa;EACrB,WAAW;EACX;CACF,EAAE;CACF,MAAM,2BAA2B,CAAC,GAAG,uBAAuB,WAAW,CAAC,CAAC,CAAC,KAAK,WAAW,CAAC,CAAC,KAAK,kBAAkB;EACjH,IAAI,GAAG,4BAA4B,aAAa;EAChD,OAAO,aAAa;EACpB,QAAQ,aAAa;EACrB,WAAW;EACX;CACF,EAAE;CAGF,MAAM,SAAS,CAAC,GAAG,qBAAqB,CAAC,CAAC,CAAC,KAAK,WAAW,CAAC,CAAC,KAAK,WAAW;EAC3E,IAAI,MAAM;EACV,OAAO,MAAM;EACb,QAAQ,MAAM;EACd,WAAW;EACX;CACF,EAAE;CACF,MAAM,mBAAmB,+BAA+B,CAAC,CAAC,KAAK,qBAAqB;EAClF,IAAI,GAAG,4BAA4B,gBAAgB;EACnD,OAAO,gBAAgB;EACvB,QAAQ,gBAAgB;EACxB,WAAW;EACX;CACF,EAAE;CACF,MAAM,MAAM;EACV,GAAG;EACH,GAAG;EACH,GAAG;EACH;EACA,GAAG;EACH,GAAG;CACL;CACA,OAAO,cAAc,KAAA,IAAY,MAAM,IAAI,QAAQ,YAAY,QAAQ,cAAc,SAAS;AAChG;AAEA,SAAgB,gBAAgB,IAAqD;CACnF,OAAO,iBAAiB,CAAC,CAAC,MAAM,YAAY,QAAQ,OAAO,EAAE;AAC/D"}

package/dist/web/lib/statusLine.cjs

@@ -0,0 +1,82 @@
+//#region src/web/lib/statusLine.ts
+const emptySelection = {
+	profile: "",
+	majorMode: "",
+	domains: [],
+	pending: false
+};
+const SGR = /\u001B\[([0-9;]*)m/gu;
+/** Splits an ANSI string into runs of text carrying the truecolor in force. */
+function ansiSegments(input) {
+	const segments = [];
+	let current = null;
+	let index = 0;
+	SGR.lastIndex = 0;
+	for (let match = SGR.exec(input); match !== null; match = SGR.exec(input)) {
+		const text = input.slice(index, match.index);
+		if (text) segments.push({
+			text,
+			rgb: current
+		});
+		const codes = match[1].split(";").map((code) => Number.parseInt(code, 10));
+		if (codes[0] === 38 && codes[1] === 2) current = [
+			codes[2],
+			codes[3],
+			codes[4]
+		];
+		else if (codes[0] === 39 || codes[0] === 0 || Number.isNaN(codes[0])) current = null;
+		index = match.index + match[0].length;
+	}
+	const tail = input.slice(index);
+	if (tail) segments.push({
+		text: tail,
+		rgb: current
+	});
+	return segments;
+}
+function stripAnsi(input) {
+	return input.replace(SGR, "");
+}
+const WARNING = [
+	236,
+	190,
+	123
+];
+const ACCENT = [
+	81,
+	175,
+	239
+];
+function distance(a, b) {
+	return (a[0] - b[0]) ** 2 + (a[1] - b[1]) ** 2 + (a[2] - b[2]) ** 2;
+}
+/**
+* Reads Po's footer status line.
+*
+* The line is the only place the session publishes its selection, so this
+* parses the shape `*profile*:[major-mode]:domains` structurally and uses the
+* colour of the mode segment solely to tell a pending switch from a settled one.
+*/
+function parseSelection(statusText) {
+	const segments = ansiSegments(statusText);
+	const plain = stripAnsi(statusText).trim();
+	if (!plain) return emptySelection;
+	const profileMatch = /\*([^*]+)\*/u.exec(plain);
+	const modeMatch = /\[([^\]]+)\]/u.exec(plain);
+	const domains = (modeMatch ? plain.slice(plain.indexOf(modeMatch[0]) + modeMatch[0].length) : "").replace(/^:/u, "").split(",").map((entry) => entry.trim()).filter(Boolean);
+	const modeSegment = segments.find((segment) => segment.text.includes("["));
+	const pending = modeSegment?.rgb !== void 0 && modeSegment?.rgb !== null ? distance(modeSegment.rgb, WARNING) < distance(modeSegment.rgb, ACCENT) : false;
+	return {
+		profile: profileMatch ? profileMatch[1] : "",
+		majorMode: modeMatch ? modeMatch[1] : "",
+		domains,
+		pending
+	};
+}
+//#endregion
+exports.ansiSegments = ansiSegments;
+exports.emptySelection = emptySelection;
+exports.parseSelection = parseSelection;
+exports.stripAnsi = stripAnsi;
+
+//# sourceMappingURL=statusLine.cjs.map

package/dist/web/lib/statusLine.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"statusLine.cjs","names":[],"sources":["../../../src/web/lib/statusLine.ts"],"sourcesContent":["export interface Selection {\n  /** Empty when the session runs without a profile, which is a valid choice. */\n  profile: string;\n  majorMode: string;\n  domains: string[];\n  /** True while a mode switch is journaled but not yet applied. */\n  pending: boolean;\n}\n\nexport const emptySelection: Selection = { profile: '', majorMode: '', domains: [], pending: false };\n\ninterface Segment {\n  text: string;\n  rgb: [number, number, number] | null;\n}\n\n// The escape is the point of this parser, so the control character is\n// deliberate; spelled as a Unicode escape to keep it readable.\n// oxlint-disable-next-line no-control-regex\nconst SGR = /\\u001B\\[([0-9;]*)m/gu;\n\n/** Splits an ANSI string into runs of text carrying the truecolor in force. */\nexport function ansiSegments(input: string): Segment[] {\n  const segments: Segment[] = [];\n  let current: [number, number, number] | null = null;\n  let index = 0;\n\n  SGR.lastIndex = 0;\n  for (let match = SGR.exec(input); match !== null; match = SGR.exec(input)) {\n    const text = input.slice(index, match.index);\n    if (text) segments.push({ text, rgb: current });\n    const codes = match[1].split(';').map((code) => Number.parseInt(code, 10));\n    if (codes[0] === 38 && codes[1] === 2) current = [codes[2], codes[3], codes[4]];\n    else if (codes[0] === 39 || codes[0] === 0 || Number.isNaN(codes[0])) current = null;\n    index = match.index + match[0].length;\n  }\n  const tail = input.slice(index);\n  if (tail) segments.push({ text: tail, rgb: current });\n  return segments;\n}\n\nexport function stripAnsi(input: string): string {\n  return input.replace(SGR, '');\n}\n\n// The values po-dark.json binds to `warning` and `accent`. Po ships one\n// theme, so comparing against both and taking the nearer one reports pending\n// accurately, and falls back to \"not pending\" when it cannot tell.\nconst WARNING: [number, number, number] = [236, 190, 123];\nconst ACCENT: [number, number, number] = [81, 175, 239];\n\nfunction distance(a: [number, number, number], b: [number, number, number]): number {\n  return (a[0] - b[0]) ** 2 + (a[1] - b[1]) ** 2 + (a[2] - b[2]) ** 2;\n}\n\n/**\n * Reads Po's footer status line.\n *\n * The line is the only place the session publishes its selection, so this\n * parses the shape `*profile*:[major-mode]:domains` structurally and uses the\n * colour of the mode segment solely to tell a pending switch from a settled one.\n */\nexport function parseSelection(statusText: string): Selection {\n  const segments = ansiSegments(statusText);\n  const plain = stripAnsi(statusText).trim();\n  if (!plain) return emptySelection;\n\n  const profileMatch = /\\*([^*]+)\\*/u.exec(plain);\n  const modeMatch = /\\[([^\\]]+)\\]/u.exec(plain);\n\n  const afterMode = modeMatch ? plain.slice(plain.indexOf(modeMatch[0]) + modeMatch[0].length) : '';\n  const domains = afterMode\n    .replace(/^:/u, '')\n    .split(',')\n    .map((entry) => entry.trim())\n    .filter(Boolean);\n\n  const modeSegment = segments.find((segment) => segment.text.includes('['));\n  const pending =\n    modeSegment?.rgb !== undefined && modeSegment?.rgb !== null\n      ? distance(modeSegment.rgb, WARNING) < distance(modeSegment.rgb, ACCENT)\n      : false;\n\n  return {\n    profile: profileMatch ? profileMatch[1] : '',\n    majorMode: modeMatch ? modeMatch[1] : '',\n    domains,\n    pending,\n  };\n}\n"],"mappings":";AASA,MAAa,iBAA4B;CAAE,SAAS;CAAI,WAAW;CAAI,SAAS,CAAC;CAAG,SAAS;AAAM;AAUnG,MAAM,MAAM;;AAGZ,SAAgB,aAAa,OAA0B;CACrD,MAAM,WAAsB,CAAC;CAC7B,IAAI,UAA2C;CAC/C,IAAI,QAAQ;CAEZ,IAAI,YAAY;CAChB,KAAK,IAAI,QAAQ,IAAI,KAAK,KAAK,GAAG,UAAU,MAAM,QAAQ,IAAI,KAAK,KAAK,GAAG;EACzE,MAAM,OAAO,MAAM,MAAM,OAAO,MAAM,KAAK;EAC3C,IAAI,MAAM,SAAS,KAAK;GAAE;GAAM,KAAK;EAAQ,CAAC;EAC9C,MAAM,QAAQ,MAAM,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,KAAK,SAAS,OAAO,SAAS,MAAM,EAAE,CAAC;EACzE,IAAI,MAAM,OAAO,MAAM,MAAM,OAAO,GAAG,UAAU;GAAC,MAAM;GAAI,MAAM;GAAI,MAAM;EAAE;OACzE,IAAI,MAAM,OAAO,MAAM,MAAM,OAAO,KAAK,OAAO,MAAM,MAAM,EAAE,GAAG,UAAU;EAChF,QAAQ,MAAM,QAAQ,MAAM,EAAE,CAAC;CACjC;CACA,MAAM,OAAO,MAAM,MAAM,KAAK;CAC9B,IAAI,MAAM,SAAS,KAAK;EAAE,MAAM;EAAM,KAAK;CAAQ,CAAC;CACpD,OAAO;AACT;AAEA,SAAgB,UAAU,OAAuB;CAC/C,OAAO,MAAM,QAAQ,KAAK,EAAE;AAC9B;AAKA,MAAM,UAAoC;CAAC;CAAK;CAAK;AAAG;AACxD,MAAM,SAAmC;CAAC;CAAI;CAAK;AAAG;AAEtD,SAAS,SAAS,GAA6B,GAAqC;CAClF,QAAQ,EAAE,KAAK,EAAE,OAAO,KAAK,EAAE,KAAK,EAAE,OAAO,KAAK,EAAE,KAAK,EAAE,OAAO;AACpE;;;;;;;;AASA,SAAgB,eAAe,YAA+B;CAC5D,MAAM,WAAW,aAAa,UAAU;CACxC,MAAM,QAAQ,UAAU,UAAU,CAAC,CAAC,KAAK;CACzC,IAAI,CAAC,OAAO,OAAO;CAEnB,MAAM,eAAe,eAAe,KAAK,KAAK;CAC9C,MAAM,YAAY,gBAAgB,KAAK,KAAK;CAG5C,MAAM,WADY,YAAY,MAAM,MAAM,MAAM,QAAQ,UAAU,EAAE,IAAI,UAAU,EAAE,CAAC,MAAM,IAAI,GAAA,CAE5F,QAAQ,OAAO,EAAE,CAAC,CAClB,MAAM,GAAG,CAAC,CACV,KAAK,UAAU,MAAM,KAAK,CAAC,CAAC,CAC5B,OAAO,OAAO;CAEjB,MAAM,cAAc,SAAS,MAAM,YAAY,QAAQ,KAAK,SAAS,GAAG,CAAC;CACzE,MAAM,UACJ,aAAa,QAAQ,KAAA,KAAa,aAAa,QAAQ,OACnD,SAAS,YAAY,KAAK,OAAO,IAAI,SAAS,YAAY,KAAK,MAAM,IACrE;CAEN,OAAO;EACL,SAAS,eAAe,aAAa,KAAK;EAC1C,WAAW,YAAY,UAAU,KAAK;EACtC;EACA;CACF;AACF"}

package/dist/web/lib/statusLine.d.mts

@@ -0,0 +1,27 @@
+//#region src/web/lib/statusLine.d.ts
+export interface Selection {
+  /** Empty when the session runs without a profile, which is a valid choice. */
+  profile: string;
+  majorMode: string;
+  domains: string[];
+  /** True while a mode switch is journaled but not yet applied. */
+  pending: boolean;
+}
+export declare const emptySelection: Selection;
+interface Segment {
+  text: string;
+  rgb: [number, number, number] | null;
+}
+/** Splits an ANSI string into runs of text carrying the truecolor in force. */
+export declare function ansiSegments(input: string): Segment[];
+export declare function stripAnsi(input: string): string;
+/**
+ * Reads Po's footer status line.
+ *
+ * The line is the only place the session publishes its selection, so this
+ * parses the shape `*profile*:[major-mode]:domains` structurally and uses the
+ * colour of the mode segment solely to tell a pending switch from a settled one.
+ */
+export declare function parseSelection(statusText: string): Selection;
+//#endregion
+//# sourceMappingURL=statusLine.d.mts.map

package/dist/web/lib/statusLine.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"statusLine.d.mts","names":[],"sources":["../../../src/web/lib/statusLine.ts"],"mappings":";iBAAiB;;EAEf;EACA;EACA;;EAEA;;qBAGW,gBAAgB;UAEnB;EACR;EACA;;;wBASc,aAAa,gBAAgB;wBAmB7B,UAAU;;;;;;;;wBAqBV,eAAe,qBAAqB"}

package/dist/web/lib/statusLine.mjs

@@ -0,0 +1,79 @@
+//#region src/web/lib/statusLine.ts
+const emptySelection = {
+	profile: "",
+	majorMode: "",
+	domains: [],
+	pending: false
+};
+const SGR = /\u001B\[([0-9;]*)m/gu;
+/** Splits an ANSI string into runs of text carrying the truecolor in force. */
+function ansiSegments(input) {
+	const segments = [];
+	let current = null;
+	let index = 0;
+	SGR.lastIndex = 0;
+	for (let match = SGR.exec(input); match !== null; match = SGR.exec(input)) {
+		const text = input.slice(index, match.index);
+		if (text) segments.push({
+			text,
+			rgb: current
+		});
+		const codes = match[1].split(";").map((code) => Number.parseInt(code, 10));
+		if (codes[0] === 38 && codes[1] === 2) current = [
+			codes[2],
+			codes[3],
+			codes[4]
+		];
+		else if (codes[0] === 39 || codes[0] === 0 || Number.isNaN(codes[0])) current = null;
+		index = match.index + match[0].length;
+	}
+	const tail = input.slice(index);
+	if (tail) segments.push({
+		text: tail,
+		rgb: current
+	});
+	return segments;
+}
+function stripAnsi(input) {
+	return input.replace(SGR, "");
+}
+const WARNING = [
+	236,
+	190,
+	123
+];
+const ACCENT = [
+	81,
+	175,
+	239
+];
+function distance(a, b) {
+	return (a[0] - b[0]) ** 2 + (a[1] - b[1]) ** 2 + (a[2] - b[2]) ** 2;
+}
+/**
+* Reads Po's footer status line.
+*
+* The line is the only place the session publishes its selection, so this
+* parses the shape `*profile*:[major-mode]:domains` structurally and uses the
+* colour of the mode segment solely to tell a pending switch from a settled one.
+*/
+function parseSelection(statusText) {
+	const segments = ansiSegments(statusText);
+	const plain = stripAnsi(statusText).trim();
+	if (!plain) return emptySelection;
+	const profileMatch = /\*([^*]+)\*/u.exec(plain);
+	const modeMatch = /\[([^\]]+)\]/u.exec(plain);
+	const domains = (modeMatch ? plain.slice(plain.indexOf(modeMatch[0]) + modeMatch[0].length) : "").replace(/^:/u, "").split(",").map((entry) => entry.trim()).filter(Boolean);
+	const modeSegment = segments.find((segment) => segment.text.includes("["));
+	const pending = modeSegment?.rgb !== void 0 && modeSegment?.rgb !== null ? distance(modeSegment.rgb, WARNING) < distance(modeSegment.rgb, ACCENT) : false;
+	return {
+		profile: profileMatch ? profileMatch[1] : "",
+		majorMode: modeMatch ? modeMatch[1] : "",
+		domains,
+		pending
+	};
+}
+//#endregion
+export { ansiSegments, emptySelection, parseSelection, stripAnsi };
+
+//# sourceMappingURL=statusLine.mjs.map

package/dist/web/lib/statusLine.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"statusLine.mjs","names":[],"sources":["../../../src/web/lib/statusLine.ts"],"sourcesContent":["export interface Selection {\n  /** Empty when the session runs without a profile, which is a valid choice. */\n  profile: string;\n  majorMode: string;\n  domains: string[];\n  /** True while a mode switch is journaled but not yet applied. */\n  pending: boolean;\n}\n\nexport const emptySelection: Selection = { profile: '', majorMode: '', domains: [], pending: false };\n\ninterface Segment {\n  text: string;\n  rgb: [number, number, number] | null;\n}\n\n// The escape is the point of this parser, so the control character is\n// deliberate; spelled as a Unicode escape to keep it readable.\n// oxlint-disable-next-line no-control-regex\nconst SGR = /\\u001B\\[([0-9;]*)m/gu;\n\n/** Splits an ANSI string into runs of text carrying the truecolor in force. */\nexport function ansiSegments(input: string): Segment[] {\n  const segments: Segment[] = [];\n  let current: [number, number, number] | null = null;\n  let index = 0;\n\n  SGR.lastIndex = 0;\n  for (let match = SGR.exec(input); match !== null; match = SGR.exec(input)) {\n    const text = input.slice(index, match.index);\n    if (text) segments.push({ text, rgb: current });\n    const codes = match[1].split(';').map((code) => Number.parseInt(code, 10));\n    if (codes[0] === 38 && codes[1] === 2) current = [codes[2], codes[3], codes[4]];\n    else if (codes[0] === 39 || codes[0] === 0 || Number.isNaN(codes[0])) current = null;\n    index = match.index + match[0].length;\n  }\n  const tail = input.slice(index);\n  if (tail) segments.push({ text: tail, rgb: current });\n  return segments;\n}\n\nexport function stripAnsi(input: string): string {\n  return input.replace(SGR, '');\n}\n\n// The values po-dark.json binds to `warning` and `accent`. Po ships one\n// theme, so comparing against both and taking the nearer one reports pending\n// accurately, and falls back to \"not pending\" when it cannot tell.\nconst WARNING: [number, number, number] = [236, 190, 123];\nconst ACCENT: [number, number, number] = [81, 175, 239];\n\nfunction distance(a: [number, number, number], b: [number, number, number]): number {\n  return (a[0] - b[0]) ** 2 + (a[1] - b[1]) ** 2 + (a[2] - b[2]) ** 2;\n}\n\n/**\n * Reads Po's footer status line.\n *\n * The line is the only place the session publishes its selection, so this\n * parses the shape `*profile*:[major-mode]:domains` structurally and uses the\n * colour of the mode segment solely to tell a pending switch from a settled one.\n */\nexport function parseSelection(statusText: string): Selection {\n  const segments = ansiSegments(statusText);\n  const plain = stripAnsi(statusText).trim();\n  if (!plain) return emptySelection;\n\n  const profileMatch = /\\*([^*]+)\\*/u.exec(plain);\n  const modeMatch = /\\[([^\\]]+)\\]/u.exec(plain);\n\n  const afterMode = modeMatch ? plain.slice(plain.indexOf(modeMatch[0]) + modeMatch[0].length) : '';\n  const domains = afterMode\n    .replace(/^:/u, '')\n    .split(',')\n    .map((entry) => entry.trim())\n    .filter(Boolean);\n\n  const modeSegment = segments.find((segment) => segment.text.includes('['));\n  const pending =\n    modeSegment?.rgb !== undefined && modeSegment?.rgb !== null\n      ? distance(modeSegment.rgb, WARNING) < distance(modeSegment.rgb, ACCENT)\n      : false;\n\n  return {\n    profile: profileMatch ? profileMatch[1] : '',\n    majorMode: modeMatch ? modeMatch[1] : '',\n    domains,\n    pending,\n  };\n}\n"],"mappings":";AASA,MAAa,iBAA4B;CAAE,SAAS;CAAI,WAAW;CAAI,SAAS,CAAC;CAAG,SAAS;AAAM;AAUnG,MAAM,MAAM;;AAGZ,SAAgB,aAAa,OAA0B;CACrD,MAAM,WAAsB,CAAC;CAC7B,IAAI,UAA2C;CAC/C,IAAI,QAAQ;CAEZ,IAAI,YAAY;CAChB,KAAK,IAAI,QAAQ,IAAI,KAAK,KAAK,GAAG,UAAU,MAAM,QAAQ,IAAI,KAAK,KAAK,GAAG;EACzE,MAAM,OAAO,MAAM,MAAM,OAAO,MAAM,KAAK;EAC3C,IAAI,MAAM,SAAS,KAAK;GAAE;GAAM,KAAK;EAAQ,CAAC;EAC9C,MAAM,QAAQ,MAAM,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,KAAK,SAAS,OAAO,SAAS,MAAM,EAAE,CAAC;EACzE,IAAI,MAAM,OAAO,MAAM,MAAM,OAAO,GAAG,UAAU;GAAC,MAAM;GAAI,MAAM;GAAI,MAAM;EAAE;OACzE,IAAI,MAAM,OAAO,MAAM,MAAM,OAAO,KAAK,OAAO,MAAM,MAAM,EAAE,GAAG,UAAU;EAChF,QAAQ,MAAM,QAAQ,MAAM,EAAE,CAAC;CACjC;CACA,MAAM,OAAO,MAAM,MAAM,KAAK;CAC9B,IAAI,MAAM,SAAS,KAAK;EAAE,MAAM;EAAM,KAAK;CAAQ,CAAC;CACpD,OAAO;AACT;AAEA,SAAgB,UAAU,OAAuB;CAC/C,OAAO,MAAM,QAAQ,KAAK,EAAE;AAC9B;AAKA,MAAM,UAAoC;CAAC;CAAK;CAAK;AAAG;AACxD,MAAM,SAAmC;CAAC;CAAI;CAAK;AAAG;AAEtD,SAAS,SAAS,GAA6B,GAAqC;CAClF,QAAQ,EAAE,KAAK,EAAE,OAAO,KAAK,EAAE,KAAK,EAAE,OAAO,KAAK,EAAE,KAAK,EAAE,OAAO;AACpE;;;;;;;;AASA,SAAgB,eAAe,YAA+B;CAC5D,MAAM,WAAW,aAAa,UAAU;CACxC,MAAM,QAAQ,UAAU,UAAU,CAAC,CAAC,KAAK;CACzC,IAAI,CAAC,OAAO,OAAO;CAEnB,MAAM,eAAe,eAAe,KAAK,KAAK;CAC9C,MAAM,YAAY,gBAAgB,KAAK,KAAK;CAG5C,MAAM,WADY,YAAY,MAAM,MAAM,MAAM,QAAQ,UAAU,EAAE,IAAI,UAAU,EAAE,CAAC,MAAM,IAAI,GAAA,CAE5F,QAAQ,OAAO,EAAE,CAAC,CAClB,MAAM,GAAG,CAAC,CACV,KAAK,UAAU,MAAM,KAAK,CAAC,CAAC,CAC5B,OAAO,OAAO;CAEjB,MAAM,cAAc,SAAS,MAAM,YAAY,QAAQ,KAAK,SAAS,GAAG,CAAC;CACzE,MAAM,UACJ,aAAa,QAAQ,KAAA,KAAa,aAAa,QAAQ,OACnD,SAAS,YAAY,KAAK,OAAO,IAAI,SAAS,YAAY,KAAK,MAAM,IACrE;CAEN,OAAO;EACL,SAAS,eAAe,aAAa,KAAK;EAC1C,WAAW,YAAY,UAAU,KAAK;EACtC;EACA;CACF;AACF"}

package/dist/web/lib/stepUp.cjs

@@ -0,0 +1,41 @@
+const require_remoteAccess = require("../../types/remoteAccess.cjs");
+const require_sealedSession = require("./sealedSession.cjs");
+const require_webauthnClient = require("./webauthnClient.cjs");
+//#region src/web/lib/stepUp.ts
+const UNAUTHORIZED = 401;
+/**
+* Fetch that answers a step-up challenge once and retries.
+*
+* The server decides which actions need a gesture, not the client: it answers
+* 401 naming the action, and this replays the identical request with an
+* assertion attached. Keeping the decision server-side means a client that
+* forgets to ask still cannot skip the gate, and it means adding a gated action
+* needs no client change at all.
+*
+* Exactly one retry. A second 401 after a fresh gesture is a real refusal, and
+* looping would turn a denied action into a biometric prompt that will not stop.
+*/
+async function fetchWithStepUp(input, init, requestAssertion = require_webauthnClient.assertionFor) {
+	const first = await require_sealedSession.sealedHttpSession.fetch(input, init);
+	if (first.status !== UNAUTHORIZED) return first;
+	let action;
+	try {
+		action = (await first.clone().json()).action;
+	} catch {
+		return first;
+	}
+	if (typeof action !== "string") return first;
+	const assertion = await requestAssertion(action);
+	if (assertion === void 0) return first;
+	return await require_sealedSession.sealedHttpSession.fetch(input, {
+		...init,
+		headers: {
+			...init?.headers,
+			[require_remoteAccess.STEP_UP_HEADER]: assertion
+		}
+	});
+}
+//#endregion
+exports.fetchWithStepUp = fetchWithStepUp;
+
+//# sourceMappingURL=stepUp.cjs.map

package/dist/web/lib/stepUp.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"stepUp.cjs","names":["assertionFor","sealedHttpSession","STEP_UP_HEADER"],"sources":["../../../src/web/lib/stepUp.ts"],"sourcesContent":["import { STEP_UP_HEADER } from '../../types/remoteAccess';\nimport { sealedHttpSession } from './sealedSession';\nimport { assertionFor } from './webauthnClient';\n\nconst UNAUTHORIZED = 401;\n\n/**\n * Fetch that answers a step-up challenge once and retries.\n *\n * The server decides which actions need a gesture, not the client: it answers\n * 401 naming the action, and this replays the identical request with an\n * assertion attached. Keeping the decision server-side means a client that\n * forgets to ask still cannot skip the gate, and it means adding a gated action\n * needs no client change at all.\n *\n * Exactly one retry. A second 401 after a fresh gesture is a real refusal, and\n * looping would turn a denied action into a biometric prompt that will not stop.\n */\nexport async function fetchWithStepUp(\n  input: string,\n  init?: RequestInit,\n  /** Test seam, in the house style: the real one runs a WebAuthn ceremony. */\n  requestAssertion: (action: string) => Promise<string | undefined> = assertionFor,\n): Promise<Response> {\n  const first = await sealedHttpSession.fetch(input, init);\n  if (first.status !== UNAUTHORIZED) return first;\n\n  let action: unknown;\n  try {\n    action = ((await first.clone().json()) as { action?: unknown }).action;\n  } catch {\n    return first; // A 401 with no action is an ordinary refusal.\n  }\n  if (typeof action !== 'string') return first;\n\n  const assertion = await requestAssertion(action);\n  if (assertion === undefined) return first;\n\n  return await sealedHttpSession.fetch(input, {\n    ...init,\n    headers: { ...(init?.headers as Record<string, string> | undefined), [STEP_UP_HEADER]: assertion },\n  });\n}\n"],"mappings":";;;;AAIA,MAAM,eAAe;;;;;;;;;;;;;AAcrB,eAAsB,gBACpB,OACA,MAEA,mBAAoEA,uBAAAA,cACjD;CACnB,MAAM,QAAQ,MAAMC,sBAAAA,kBAAkB,MAAM,OAAO,IAAI;CACvD,IAAI,MAAM,WAAW,cAAc,OAAO;CAE1C,IAAI;CACJ,IAAI;EACF,UAAW,MAAM,MAAM,MAAM,CAAC,CAAC,KAAK,EAAA,CAA4B;CAClE,QAAQ;EACN,OAAO;CACT;CACA,IAAI,OAAO,WAAW,UAAU,OAAO;CAEvC,MAAM,YAAY,MAAM,iBAAiB,MAAM;CAC/C,IAAI,cAAc,KAAA,GAAW,OAAO;CAEpC,OAAO,MAAMA,sBAAAA,kBAAkB,MAAM,OAAO;EAC1C,GAAG;EACH,SAAS;GAAE,GAAI,MAAM;IAAiDC,qBAAAA,iBAAiB;EAAU;CACnG,CAAC;AACH"}

package/dist/web/lib/stepUp.d.mts

@@ -0,0 +1,18 @@
+//#region src/web/lib/stepUp.d.ts
+/**
+ * Fetch that answers a step-up challenge once and retries.
+ *
+ * The server decides which actions need a gesture, not the client: it answers
+ * 401 naming the action, and this replays the identical request with an
+ * assertion attached. Keeping the decision server-side means a client that
+ * forgets to ask still cannot skip the gate, and it means adding a gated action
+ * needs no client change at all.
+ *
+ * Exactly one retry. A second 401 after a fresh gesture is a real refusal, and
+ * looping would turn a denied action into a biometric prompt that will not stop.
+ */
+export declare function fetchWithStepUp(input: string, init?: RequestInit,
+/** Test seam, in the house style: the real one runs a WebAuthn ceremony. */
+requestAssertion?: (action: string) => Promise<string | undefined>): Promise<Response>;
+//#endregion
+//# sourceMappingURL=stepUp.d.mts.map

package/dist/web/lib/stepUp.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"stepUp.d.mts","names":[],"sources":["../../../src/web/lib/stepUp.ts"],"mappings":";;;;;;;;;;;;;wBAkBsB,gBACpB,eACA,OAAO,aAEP;;AAAA,oBAAmB,mBAAmB,8BACrC,QAAQ"}