@camstack/addon-terminal 0.1.29 → 0.1.31

package/dist/addon.js

@@ -20003,6 +20003,9 @@ method(_void(), ProviderInfoSchema), method(object({ config: record(string(), un
 	location: StorageLocationSchema,
 	relativePath: string()
 }), _void(), { kind: "mutation" }), method(object({ location: StorageLocationSchema }), number().nullable()), method(BeginUploadInputSchema, BeginUploadResultSchema, { kind: "mutation" }), method(WriteChunkInputSchema, _void(), { kind: "mutation" }), method(FinalizeUploadInputSchema, _void(), { kind: "mutation" }), method(AbortUploadInputSchema, _void(), { kind: "mutation" }), method(BeginDownloadInputSchema, BeginDownloadResultSchema, { kind: "mutation" }), method(ReadChunkInputSchema, _instanceof(Uint8Array)), method(EndDownloadInputSchema, _void(), { kind: "mutation" });
+/** Profile-exported FormBuilder schema. Shape is ConfigUISchema at the UI. */
+var ProfileSettingsSchemaBridge = unknown().nullable();
+var ProfileSettingsBagSchema = record(string(), unknown());
 /**
 * A live terminal session hosted by the provider addon. Output and input do
 * NOT flow through the capability — they use the addon data plane
@@ -20032,7 +20035,14 @@ var TerminalSessionInfoSchema = object({
 var TerminalProfileInfoSchema = object({
 	profileId: string(),
 	label: string(),
-	description: string().optional()
+	description: string().optional(),
+	/** Spawn defaults the instance form copies on create. */
+	executable: string().optional(),
+	args: array(string()).readonly().optional(),
+	cwd: string().optional(),
+	environment: array(string()).readonly().optional(),
+	/** ConfigUISchema for instance knobs, or null when the profile has none. */
+	settingsSchema: ProfileSettingsSchemaBridge.optional()
 });
 /**
 * A durable operator-created Terminal instance. Profiles are templates; only
@@ -20045,7 +20055,12 @@ var TerminalInstanceInfoSchema = object({
 	profileId: string(),
 	profileLabel: string(),
 	name: string(),
-	enabled: boolean()
+	enabled: boolean(),
+	executable: string(),
+	args: array(string()).readonly(),
+	cwd: string(),
+	environment: array(string()).readonly(),
+	profileSettings: ProfileSettingsBagSchema
 });
 var TerminalLegacyCameraSchema = object({
 	stableId: string(),
@@ -20091,7 +20106,24 @@ var terminalSessionCapability = {
 		createInstance: method(object({
 			targetNodeId: string().min(1),
 			profileId: string().min(1),
-			name: string().trim().min(1).max(160).optional()
+			name: string().trim().min(1).max(160).optional(),
+			executable: string().max(1024).optional(),
+			args: array(string().max(2048)).max(64).optional(),
+			cwd: string().max(1024).optional(),
+			environment: array(string().max(4096)).max(64).optional(),
+			profileSettings: ProfileSettingsBagSchema.optional()
+		}), TerminalInstanceInfoSchema, {
+			kind: "mutation",
+			auth: "admin"
+		}),
+		updateInstance: method(object({
+			instanceId: string().min(1),
+			name: string().trim().min(1).max(160).optional(),
+			executable: string().max(1024).optional(),
+			args: array(string().max(2048)).max(64).optional(),
+			cwd: string().max(1024).optional(),
+			environment: array(string().max(4096)).max(64).optional(),
+			profileSettings: ProfileSettingsBagSchema.optional()
 		}), TerminalInstanceInfoSchema, {
 			kind: "mutation",
 			auth: "admin"
@@ -20126,7 +20158,11 @@ var terminalSessionCapability = {
 		openSession: method(object({
 			profileId: string(),
 			cols: number().int().positive(),
-			rows: number().int().positive()
+			rows: number().int().positive(),
+			executable: string().max(1024).optional(),
+			args: array(string().max(2048)).max(64).optional(),
+			cwd: string().max(1024).optional(),
+			environment: array(string().max(4096)).max(64).optional()
 		}), TerminalSessionInfoSchema, {
 			kind: "mutation",
 			auth: "admin"
@@ -24015,10 +24051,10 @@ var lawnMowerControlCapability = {
 *
 *  • The SDK (mobile / web client) consumes `getConnectionEndpoints()`
 *    to receive an ordered list of candidate base URLs it should race
-*    on connect — LAN IPv4 first (lowest latency when on same network),
-*    then public hostname (if a tunnel is up), then IPv6. The SDK can
-*    race them with short timeouts and stick with the winner for the
-*    session.
+*    on connect — LAN IPv4 and stable LAN IPv6 first (lowest latency
+*    when on the same network), then public hostname (if a tunnel is
+*    up). The SDK can race them with short timeouts and stick with the
+*    winner for the session.
 *
 * Why hub-only: agents are not directly addressable by the operator's
 * clients — they reverse-connect to the hub. Exposing their interfaces
@@ -24181,6 +24217,20 @@ var AllowedAddressesSchema = object({
 * Network Addresses admin page and persisted by the addon.
 */
 addresses: array(string()).readonly() });
+var TlsStatusSchema = object({
+	mode: _enum([
+		"generated",
+		"uploaded",
+		"disabled"
+	]),
+	leafFingerprintSha256: string().nullable(),
+	caFingerprintSha256: string().nullable(),
+	validTo: string().nullable(),
+	sans: array(string()),
+	caCertPem: string().nullable(),
+	reissueError: string().nullable(),
+	restartRequired: boolean()
+});
 method(_void(), ListResultSchema), method(_void(), PreferredSchema), method(object({
 	/**
 	* LEGACY HINT — do not send from new code. Kept optional so clients
@@ -24200,7 +24250,20 @@ method(_void(), ListResultSchema), method(_void(), PreferredSchema), method(obje
 	*  to avoid mixed-content blocks in the browser. The public
 	*  tunnel always emits `https://` regardless. */
 	scheme: _enum(["http", "https"]).optional()
-}), GetConnectionEndpointsResultSchema), method(_void(), NotificationEndpointSchema), method(object({ baseUrl: string().nullable() }), NotificationEndpointSchema, { kind: "mutation" }), method(_void(), AllowedAddressesSchema), method(AllowedAddressesSchema, object({ success: literal(true) }), { kind: "mutation" }), method(_void(), AllowedAddressesSchema, { kind: "mutation" });
+}), GetConnectionEndpointsResultSchema), method(_void(), NotificationEndpointSchema), method(object({ baseUrl: string().nullable() }), NotificationEndpointSchema, { kind: "mutation" }), method(_void(), AllowedAddressesSchema), method(AllowedAddressesSchema, object({ success: literal(true) }), { kind: "mutation" }), method(_void(), AllowedAddressesSchema, { kind: "mutation" }), method(_void(), TlsStatusSchema), method(object({ reason: string().optional() }), TlsStatusSchema, {
+	kind: "mutation",
+	auth: "admin"
+}), method(object({
+	certPem: string().min(1),
+	keyPem: string().min(1),
+	caPem: string().optional()
+}), TlsStatusSchema, {
+	kind: "mutation",
+	auth: "admin"
+}), method(_void(), object({ pem: string() })), method(_void(), TlsStatusSchema, {
+	kind: "mutation",
+	auth: "admin"
+});
 var LockControlStatusSchema = object({
 	/** Lifecycle state of the lock. `jammed` means the motor reported
 	*  failure to reach the target — operator intervention required. */
@@ -32225,6 +32288,12 @@ Object.freeze({
 		addonId: null,
 		access: "create"
 	},
+	"localNetwork.downloadCa": {
+		capName: "local-network",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
 	"localNetwork.getAllowedAddresses": {
 		capName: "local-network",
 		capScope: "system",
@@ -32249,18 +32318,36 @@ Object.freeze({
 		addonId: null,
 		access: "view"
 	},
+	"localNetwork.getTlsStatus": {
+		capName: "local-network",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
 	"localNetwork.list": {
 		capName: "local-network",
 		capScope: "system",
 		addonId: null,
 		access: "view"
 	},
+	"localNetwork.regenerateCertificate": {
+		capName: "local-network",
+		capScope: "system",
+		addonId: null,
+		access: "create"
+	},
 	"localNetwork.resetAllowlistToBestMatch": {
 		capName: "local-network",
 		capScope: "system",
 		addonId: null,
 		access: "delete"
 	},
+	"localNetwork.revertToGeneratedCertificate": {
+		capName: "local-network",
+		capScope: "system",
+		addonId: null,
+		access: "create"
+	},
 	"localNetwork.setAllowedAddresses": {
 		capName: "local-network",
 		capScope: "system",
@@ -32273,6 +32360,12 @@ Object.freeze({
 		addonId: null,
 		access: "create"
 	},
+	"localNetwork.uploadCertificate": {
+		capName: "local-network",
+		capScope: "system",
+		addonId: null,
+		access: "create"
+	},
 	"lockControl.lock": {
 		capName: "lock-control",
 		capScope: "device",
@@ -35153,6 +35246,12 @@ Object.freeze({
 		addonId: null,
 		access: "create"
 	},
+	"terminalSession.updateInstance": {
+		capName: "terminal-session",
+		capScope: "system",
+		addonId: null,
+		access: "create"
+	},
 	"terminalSession.writeInput": {
 		capName: "terminal-session",
 		capScope: "system",
@@ -37640,6 +37739,35 @@ Object.freeze(Object.fromEntries([{
 	}]
 }].map((s) => [s.stepId, s.defaultModelId])));
 string().min(1);
+var CLUSTER_STEP_SETTING_FIELDS = [{
+	stepId: "face-embedding",
+	key: "minLandmarkFaceSize",
+	label: "Min face size for recognition (detection px)",
+	description: "Refuse to embed a face smaller than this IN THE DETECTION FRAME. Applies to every node — the enrolled gallery is one index, and two admission floors would fill it from two policies. 0 disables the gate.",
+	type: "slider",
+	min: 0,
+	max: 64,
+	step: 2,
+	default: 24
+}];
+function clusterStepSettingKey(stepId, fieldKey) {
+	return `clusterStepSetting:${stepId}:${fieldKey}`;
+}
+var ClusterSettingNumberSchema = number().finite();
+function readClusterStepSettings(config) {
+	const out = {};
+	for (const field of CLUSTER_STEP_SETTING_FIELDS) {
+		const parsed = ClusterSettingNumberSchema.safeParse(config[clusterStepSettingKey(field.stepId, field.key)]);
+		const value = parsed.success ? parsed.data : field.default;
+		const existing = out[field.stepId] ?? {};
+		out[field.stepId] = {
+			...existing,
+			[field.key]: value
+		};
+	}
+	return out;
+}
+readClusterStepSettings({});
 object({
 	/**
 	* Fraction of the box's own size added on EACH side before cutting.
@@ -43172,7 +43300,7 @@ var require_xterm_headless = /* @__PURE__ */ __commonJSMin(((exports) => {
 var import_addon_serialize = require_addon_serialize();
 var import_xterm_headless = require_xterm_headless();
 var SCROLLBACK_LINES = 2e3;
-function createXtermScreen(cols, rows) {
+function createXtermScreen$1(cols, rows) {
 	const term = new import_xterm_headless.Terminal({
 		cols,
 		rows,
@@ -43316,7 +43444,7 @@ var TerminalCameraRelay = class {
 			instanceId,
 			nodeId,
 			profileId,
-			screen: createXtermScreen(120, 40),
+			screen: createXtermScreen$1(120, 40),
 			sessionId: null,
 			cursor: 0,
 			clients: 0,
@@ -43347,7 +43475,8 @@ var TerminalCameraRelay = class {
 		const opening = this.api.openSession(state.nodeId, {
 			profileId: state.profileId,
 			cols: 120,
-			rows: 40
+			rows: 40,
+			instanceId: state.instanceId
 		});
 		state.openPromise = opening;
 		try {
@@ -43372,7 +43501,7 @@ var TerminalCameraRelay = class {
 	applyBatch(state, batch) {
 		if (batch.reset) {
 			state.screen.dispose();
-			state.screen = createXtermScreen(120, 40);
+			state.screen = createXtermScreen$1(120, 40);
 			if (batch.snapshot) state.screen.write(batch.snapshot);
 		}
 		let exited = false;
@@ -43734,8 +43863,26 @@ var TerminalInstanceSchema = object({
 	profileId: string().min(1).max(64),
 	profileLabel: string().min(1).max(120),
 	name: string().min(1).max(160),
-	enabled: boolean()
+	enabled: boolean(),
+	executable: string().max(1024).default(""),
+	args: array(string().max(2048)).max(64).default([]),
+	cwd: string().max(1024).default(""),
+	environment: array(string().max(4096)).max(64).default([]),
+	profileSettings: record(string(), unknown()).default({})
 });
+function environmentEntriesToRecord(entries) {
+	const out = {};
+	for (const entry of entries) {
+		const eq = entry.indexOf("=");
+		if (eq <= 0) continue;
+		out[entry.slice(0, eq)] = entry.slice(eq + 1);
+	}
+	return out;
+}
+function environmentRecordToEntries(env) {
+	if (env === void 0) return [];
+	return Object.entries(env).map(([name, value]) => `${name}=${value}`);
+}
 /**
 * Config is operator-writable, so malformed or duplicate rows are ignored
 * rather than allowed to make declaration reconciliation destructive.
@@ -43935,6 +44082,108 @@ function findProfile(profiles, profileId) {
 	return profiles.find((p) => p.profileId === profileId);
 }
 //#endregion
+//#region src/profile-settings.ts
+var GLANCES_PLUGINS = [
+	{
+		key: "showCpu",
+		plugin: "cpu",
+		label: "CPU"
+	},
+	{
+		key: "showMem",
+		plugin: "mem",
+		label: "Memory"
+	},
+	{
+		key: "showLoad",
+		plugin: "load",
+		label: "Load"
+	},
+	{
+		key: "showNetwork",
+		plugin: "network",
+		label: "Network"
+	},
+	{
+		key: "showDiskIo",
+		plugin: "diskio",
+		label: "Disk I/O"
+	},
+	{
+		key: "showFs",
+		plugin: "fs",
+		label: "Filesystems"
+	},
+	{
+		key: "showProcessList",
+		plugin: "processlist",
+		label: "Process list"
+	},
+	{
+		key: "showContainers",
+		plugin: "containers",
+		label: "Containers"
+	},
+	{
+		key: "showSensors",
+		plugin: "sensors",
+		label: "Sensors"
+	}
+];
+function glancesBooleanField(key, label) {
+	return {
+		type: "boolean",
+		key,
+		label,
+		default: true,
+		style: "switch"
+	};
+}
+function glancesSettingsSchema() {
+	return { sections: [{
+		id: "glances-panels",
+		title: "Glances panels",
+		description: "Turn off a panel to pass --disable-plugin to this Terminal only. All on is the measured default (~1% of one core at the camera grid).",
+		columns: 2,
+		fields: GLANCES_PLUGINS.map((plugin) => glancesBooleanField(plugin.key, plugin.label))
+	}] };
+}
+function settingsSchemaForProfile(profileId) {
+	if (profileId === "glances") return glancesSettingsSchema();
+	return null;
+}
+function glancesSettingsToArgs(settings) {
+	const disabled = GLANCES_PLUGINS.filter((plugin) => settings[plugin.key] === false).map((plugin) => plugin.plugin);
+	if (disabled.length === 0) return [];
+	return ["--disable-plugin", disabled.join(",")];
+}
+function sanitizeProfileSettings(profileId, raw) {
+	if (profileId !== "glances") return {};
+	const bag = raw && typeof raw === "object" && !Array.isArray(raw) ? raw : {};
+	const out = {
+		showCpu: true,
+		showMem: true,
+		showLoad: true,
+		showNetwork: true,
+		showDiskIo: true,
+		showFs: true,
+		showProcessList: true,
+		showContainers: true,
+		showSensors: true
+	};
+	for (const plugin of GLANCES_PLUGINS) if (typeof bag[plugin.key] === "boolean") out[plugin.key] = bag[plugin.key];
+	return out;
+}
+function profileSettingsToArgs(profileId, settings) {
+	if (profileId !== "glances") return [];
+	return glancesSettingsToArgs(sanitizeProfileSettings(profileId, settings));
+}
+function spawnArgsForInstance(input) {
+	const extra = profileSettingsToArgs(input.profileId, input.profileSettings);
+	if (input.instanceArgs.length > 0) return [...input.instanceArgs, ...extra];
+	if (extra.length > 0) return [...input.profileArgs, ...extra];
+}
+//#endregion
 //#region src/terminal-session-manager.ts
 var MIN_GRID = 1;
 var MAX_COLS = 1e3;
@@ -43999,7 +44248,12 @@ var TerminalSessionManager = class {
 		return this.profiles.map((p) => ({
 			profileId: p.profileId,
 			label: p.label,
-			...p.description !== void 0 ? { description: p.description } : {}
+			...p.description !== void 0 ? { description: p.description } : {},
+			executable: p.file,
+			args: [...p.args],
+			cwd: p.cwd ?? "",
+			environment: environmentRecordToEntries(p.env),
+			settingsSchema: settingsSchemaForProfile(p.profileId)
 		}));
 	}
 	setInstanceControl(control) {
@@ -44011,6 +44265,9 @@ var TerminalSessionManager = class {
 	async createInstance(input) {
 		return this.requireInstanceControl().createInstance(input);
 	}
+	async updateInstance(input) {
+		return this.requireInstanceControl().updateInstance(input);
+	}
 	async deleteInstance(input) {
 		await this.requireInstanceControl().deleteInstance(input);
 	}
@@ -44033,24 +44290,29 @@ var TerminalSessionManager = class {
 		const cols = clampDimension(input.cols, MAX_COLS);
 		const rows = clampDimension(input.rows, MAX_ROWS);
 		const sessionId = this.mintId();
+		const file = input.executable?.trim() || profile.file;
+		const args = input.args !== void 0 ? [...input.args] : [...profile.args];
+		const cwd = input.cwd?.trim() || profile.cwd || this.opts.cwd;
+		const env = {
+			...this.opts.env,
+			...profile.env,
+			...environmentEntriesToRecord(input.environment ?? [])
+		};
 		const executable = [{
-			file: profile.file,
-			args: profile.args
-		}, ...profile.fallbacks ?? []].map((candidate) => ({
+			file,
+			args
+		}, ...input.executable?.trim() ? [] : profile.fallbacks ?? []].map((candidate) => ({
 			...candidate,
 			resolvedFile: this.resolveBinary(candidate.file)
 		})).find((candidate) => candidate.resolvedFile !== null);
-		if (executable === void 0) throw new Error(`Terminal profile '${profile.profileId}' cannot start: executable '${profile.file}' was not found on PATH. Install it in the server image or set its path in Terminal settings.`);
+		if (executable === void 0) throw new Error(`Terminal profile '${profile.profileId}' cannot start: executable '${file}' was not found on PATH. Install it in the server image or set its path in Terminal settings.`);
 		const pty = this.opts.spawn({
 			file: executable.resolvedFile,
 			args: executable.args,
 			cols,
 			rows,
-			...profile.cwd !== void 0 || this.opts.cwd !== void 0 ? { cwd: profile.cwd ?? this.opts.cwd } : {},
-			...profile.env !== void 0 || this.opts.env !== void 0 ? { env: {
-				...this.opts.env,
-				...profile.env
-			} } : {}
+			...cwd !== void 0 && cwd !== "" ? { cwd } : {},
+			...Object.keys(env).length > 0 ? { env } : {}
 		});
 		const screen = this.opts.screenFactory(cols, rows);
 		const info = {
@@ -44148,7 +44410,7 @@ var TerminalSessionManager = class {
 		const oldestSeq = session.output[0]?.seq ?? session.nextSeq;
 		if (input.afterSeq === 0 || input.afterSeq < oldestSeq - 1 || input.afterSeq > cursor) {
 			await session.screen.flush();
-			const exit = [...session.output].reverse().find((event) => event.kind === "exit");
+			const exit = session.output.toReversed().find((event) => event.kind === "exit");
 			return {
 				cursor,
 				reset: true,
@@ -44392,7 +44654,28 @@ var TerminalAddon = class extends BaseAddon {
 			const localNodeId = declarationOwnerNodeId(this.ctx.kernel.localNodeId);
 			const cameraRelay = new TerminalCameraRelay({
 				listProfiles: (nodeId) => nodeId === localNodeId ? manager.listProfiles() : this.ctx.api.terminalSession.listProfiles.query(void 0, nodePin(nodeId)),
-				openSession: (nodeId, input) => nodeId === localNodeId ? manager.openSession(input) : this.ctx.api.terminalSession.openSession.mutate(input, nodePin(nodeId)),
+				openSession: async (nodeId, input) => {
+					const instance = input.instanceId ? this.terminalInstances().find((row) => row.id === input.instanceId) : void 0;
+					const profile = (nodeId === localNodeId ? await manager.listProfiles() : await this.ctx.api.terminalSession.listProfiles.query(void 0, nodePin(nodeId))).find((candidate) => candidate.profileId === (instance?.profileId ?? input.profileId));
+					const args = instance ? spawnArgsForInstance({
+						profileId: instance.profileId,
+						instanceArgs: instance.args,
+						profileArgs: profile?.args ?? [],
+						profileSettings: instance.profileSettings
+					}) : void 0;
+					const payload = {
+						profileId: input.profileId,
+						cols: input.cols,
+						rows: input.rows,
+						...instance ? {
+							...instance.executable ? { executable: instance.executable } : {},
+							...args !== void 0 ? { args: [...args] } : {},
+							...instance.cwd ? { cwd: instance.cwd } : {},
+							...instance.environment.length > 0 ? { environment: [...instance.environment] } : {}
+						} : {}
+					};
+					return nodeId === localNodeId ? manager.openSession(payload) : this.ctx.api.terminalSession.openSession.mutate(payload, nodePin(nodeId));
+				},
 				pullOutput: (nodeId, input) => nodeId === localNodeId ? manager.pullOutput(input) : this.ctx.api.terminalSession.pullOutput.mutate(input, nodePin(nodeId)),
 				closeSession: async (nodeId, sessionId) => {
 					if (nodeId === localNodeId) await manager.close({ sessionId });
@@ -44597,6 +44880,7 @@ var TerminalAddon = class extends BaseAddon {
 		return {
 			listInstances: async () => this.terminalInstances().map((instance) => this.instanceInfo(instance)),
 			createInstance: async (input) => this.createTerminalInstance(input),
+			updateInstance: async (input) => this.updateTerminalInstance(input),
 			deleteInstance: async ({ instanceId }) => this.deleteTerminalInstance(instanceId),
 			setInstanceEnabled: async ({ instanceId, enabled }) => this.setTerminalInstanceEnabled(instanceId, enabled),
 			listLegacyCameras: async () => this.listLegacyTerminalCameras(),
@@ -44616,7 +44900,12 @@ var TerminalAddon = class extends BaseAddon {
 			profileId: instance.profileId,
 			profileLabel: instance.profileLabel,
 			name: instance.name,
-			enabled: instance.enabled
+			enabled: instance.enabled,
+			executable: instance.executable,
+			args: instance.args,
+			cwd: instance.cwd,
+			environment: instance.environment,
+			profileSettings: instance.profileSettings
 		};
 	}
 	replaceTerminalCameraTombstones(stableIds) {
@@ -44644,11 +44933,37 @@ var TerminalAddon = class extends BaseAddon {
 			profileId: profile.profileId,
 			profileLabel: profile.label,
 			name,
-			enabled: true
+			enabled: true,
+			executable: input.executable?.trim() || profile.executable || "",
+			args: input.args ? [...input.args] : [...profile.args ?? []],
+			cwd: input.cwd?.trim() || profile.cwd || "",
+			environment: input.environment ? [...input.environment] : [...profile.environment ?? []],
+			profileSettings: sanitizeProfileSettings(profile.profileId, input.profileSettings)
 		};
 		await this.updateGlobalSettings({ terminalInstances: [...this.config.terminalInstances, instance] });
 		return this.instanceInfo(instance);
 	}
+	async updateTerminalInstance(input) {
+		const updated = await this.instanceMutationQueue.run(() => this.updateTerminalInstanceUnlocked(input));
+		await this.cameraRelay?.closeInstance(updated.instanceId);
+		await this.reconcileTerminalCameras();
+		return updated;
+	}
+	async updateTerminalInstanceUnlocked(input) {
+		const instance = this.terminalInstances().find((candidate) => candidate.id === input.instanceId);
+		if (!instance) throw new Error(`No such Terminal instance: ${input.instanceId}`);
+		const updated = {
+			...instance,
+			...input.name !== void 0 ? { name: input.name.trim() } : {},
+			...input.executable !== void 0 ? { executable: input.executable.trim() } : {},
+			...input.args !== void 0 ? { args: [...input.args] } : {},
+			...input.cwd !== void 0 ? { cwd: input.cwd.trim() } : {},
+			...input.environment !== void 0 ? { environment: [...input.environment] } : {},
+			...input.profileSettings !== void 0 ? { profileSettings: sanitizeProfileSettings(instance.profileId, input.profileSettings) } : {}
+		};
+		await this.updateGlobalSettings({ terminalInstances: this.config.terminalInstances.map((candidate) => candidate.id === input.instanceId ? updated : candidate) });
+		return this.instanceInfo(updated);
+	}
 	async deleteTerminalInstance(instanceId) {
 		await this.instanceMutationQueue.run(() => this.deleteTerminalInstanceUnlocked(instanceId));
 		await this.reconcileTerminalCameras();
@@ -44708,7 +45023,12 @@ var TerminalAddon = class extends BaseAddon {
 			profileId: "monitor",
 			profileLabel: legacy.profileLabel,
 			name: requestedName?.trim() || legacy.name,
-			enabled: true
+			enabled: true,
+			executable: "",
+			args: [],
+			cwd: "",
+			environment: [],
+			profileSettings: {}
 		};
 		await this.updateGlobalSettings({ terminalInstances: [...this.config.terminalInstances, instance] });
 		return this.instanceInfo(instance);
@@ -44947,7 +45267,7 @@ exports.buildCellRuns = buildCellRuns;
 exports.buildProfiles = buildProfiles;
 exports.createNodePtySpawner = createNodePtySpawner;
 exports.createTerminalDataPlaneHandler = createTerminalDataPlaneHandler;
-exports.createXtermScreen = createXtermScreen;
+exports.createXtermScreen = createXtermScreen$1;
 exports.findProfile = findProfile;
 exports.resolveCellStyle = resolveCellStyle;
 exports.terminalPaletteColor = terminalPaletteColor;

package/dist/addon.mjs

@@ -19980,6 +19980,9 @@ method(_void(), ProviderInfoSchema), method(object({ config: record(string(), un
 	location: StorageLocationSchema,
 	relativePath: string()
 }), _void(), { kind: "mutation" }), method(object({ location: StorageLocationSchema }), number().nullable()), method(BeginUploadInputSchema, BeginUploadResultSchema, { kind: "mutation" }), method(WriteChunkInputSchema, _void(), { kind: "mutation" }), method(FinalizeUploadInputSchema, _void(), { kind: "mutation" }), method(AbortUploadInputSchema, _void(), { kind: "mutation" }), method(BeginDownloadInputSchema, BeginDownloadResultSchema, { kind: "mutation" }), method(ReadChunkInputSchema, _instanceof(Uint8Array)), method(EndDownloadInputSchema, _void(), { kind: "mutation" });
+/** Profile-exported FormBuilder schema. Shape is ConfigUISchema at the UI. */
+var ProfileSettingsSchemaBridge = unknown().nullable();
+var ProfileSettingsBagSchema = record(string(), unknown());
 /**
 * A live terminal session hosted by the provider addon. Output and input do
 * NOT flow through the capability — they use the addon data plane
@@ -20009,7 +20012,14 @@ var TerminalSessionInfoSchema = object({
 var TerminalProfileInfoSchema = object({
 	profileId: string(),
 	label: string(),
-	description: string().optional()
+	description: string().optional(),
+	/** Spawn defaults the instance form copies on create. */
+	executable: string().optional(),
+	args: array(string()).readonly().optional(),
+	cwd: string().optional(),
+	environment: array(string()).readonly().optional(),
+	/** ConfigUISchema for instance knobs, or null when the profile has none. */
+	settingsSchema: ProfileSettingsSchemaBridge.optional()
 });
 /**
 * A durable operator-created Terminal instance. Profiles are templates; only
@@ -20022,7 +20032,12 @@ var TerminalInstanceInfoSchema = object({
 	profileId: string(),
 	profileLabel: string(),
 	name: string(),
-	enabled: boolean()
+	enabled: boolean(),
+	executable: string(),
+	args: array(string()).readonly(),
+	cwd: string(),
+	environment: array(string()).readonly(),
+	profileSettings: ProfileSettingsBagSchema
 });
 var TerminalLegacyCameraSchema = object({
 	stableId: string(),
@@ -20068,7 +20083,24 @@ var terminalSessionCapability = {
 		createInstance: method(object({
 			targetNodeId: string().min(1),
 			profileId: string().min(1),
-			name: string().trim().min(1).max(160).optional()
+			name: string().trim().min(1).max(160).optional(),
+			executable: string().max(1024).optional(),
+			args: array(string().max(2048)).max(64).optional(),
+			cwd: string().max(1024).optional(),
+			environment: array(string().max(4096)).max(64).optional(),
+			profileSettings: ProfileSettingsBagSchema.optional()
+		}), TerminalInstanceInfoSchema, {
+			kind: "mutation",
+			auth: "admin"
+		}),
+		updateInstance: method(object({
+			instanceId: string().min(1),
+			name: string().trim().min(1).max(160).optional(),
+			executable: string().max(1024).optional(),
+			args: array(string().max(2048)).max(64).optional(),
+			cwd: string().max(1024).optional(),
+			environment: array(string().max(4096)).max(64).optional(),
+			profileSettings: ProfileSettingsBagSchema.optional()
 		}), TerminalInstanceInfoSchema, {
 			kind: "mutation",
 			auth: "admin"
@@ -20103,7 +20135,11 @@ var terminalSessionCapability = {
 		openSession: method(object({
 			profileId: string(),
 			cols: number().int().positive(),
-			rows: number().int().positive()
+			rows: number().int().positive(),
+			executable: string().max(1024).optional(),
+			args: array(string().max(2048)).max(64).optional(),
+			cwd: string().max(1024).optional(),
+			environment: array(string().max(4096)).max(64).optional()
 		}), TerminalSessionInfoSchema, {
 			kind: "mutation",
 			auth: "admin"
@@ -23992,10 +24028,10 @@ var lawnMowerControlCapability = {
 *
 *  • The SDK (mobile / web client) consumes `getConnectionEndpoints()`
 *    to receive an ordered list of candidate base URLs it should race
-*    on connect — LAN IPv4 first (lowest latency when on same network),
-*    then public hostname (if a tunnel is up), then IPv6. The SDK can
-*    race them with short timeouts and stick with the winner for the
-*    session.
+*    on connect — LAN IPv4 and stable LAN IPv6 first (lowest latency
+*    when on the same network), then public hostname (if a tunnel is
+*    up). The SDK can race them with short timeouts and stick with the
+*    winner for the session.
 *
 * Why hub-only: agents are not directly addressable by the operator's
 * clients — they reverse-connect to the hub. Exposing their interfaces
@@ -24158,6 +24194,20 @@ var AllowedAddressesSchema = object({
 * Network Addresses admin page and persisted by the addon.
 */
 addresses: array(string()).readonly() });
+var TlsStatusSchema = object({
+	mode: _enum([
+		"generated",
+		"uploaded",
+		"disabled"
+	]),
+	leafFingerprintSha256: string().nullable(),
+	caFingerprintSha256: string().nullable(),
+	validTo: string().nullable(),
+	sans: array(string()),
+	caCertPem: string().nullable(),
+	reissueError: string().nullable(),
+	restartRequired: boolean()
+});
 method(_void(), ListResultSchema), method(_void(), PreferredSchema), method(object({
 	/**
 	* LEGACY HINT — do not send from new code. Kept optional so clients
@@ -24177,7 +24227,20 @@ method(_void(), ListResultSchema), method(_void(), PreferredSchema), method(obje
 	*  to avoid mixed-content blocks in the browser. The public
 	*  tunnel always emits `https://` regardless. */
 	scheme: _enum(["http", "https"]).optional()
-}), GetConnectionEndpointsResultSchema), method(_void(), NotificationEndpointSchema), method(object({ baseUrl: string().nullable() }), NotificationEndpointSchema, { kind: "mutation" }), method(_void(), AllowedAddressesSchema), method(AllowedAddressesSchema, object({ success: literal(true) }), { kind: "mutation" }), method(_void(), AllowedAddressesSchema, { kind: "mutation" });
+}), GetConnectionEndpointsResultSchema), method(_void(), NotificationEndpointSchema), method(object({ baseUrl: string().nullable() }), NotificationEndpointSchema, { kind: "mutation" }), method(_void(), AllowedAddressesSchema), method(AllowedAddressesSchema, object({ success: literal(true) }), { kind: "mutation" }), method(_void(), AllowedAddressesSchema, { kind: "mutation" }), method(_void(), TlsStatusSchema), method(object({ reason: string().optional() }), TlsStatusSchema, {
+	kind: "mutation",
+	auth: "admin"
+}), method(object({
+	certPem: string().min(1),
+	keyPem: string().min(1),
+	caPem: string().optional()
+}), TlsStatusSchema, {
+	kind: "mutation",
+	auth: "admin"
+}), method(_void(), object({ pem: string() })), method(_void(), TlsStatusSchema, {
+	kind: "mutation",
+	auth: "admin"
+});
 var LockControlStatusSchema = object({
 	/** Lifecycle state of the lock. `jammed` means the motor reported
 	*  failure to reach the target — operator intervention required. */
@@ -32202,6 +32265,12 @@ Object.freeze({
 		addonId: null,
 		access: "create"
 	},
+	"localNetwork.downloadCa": {
+		capName: "local-network",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
 	"localNetwork.getAllowedAddresses": {
 		capName: "local-network",
 		capScope: "system",
@@ -32226,18 +32295,36 @@ Object.freeze({
 		addonId: null,
 		access: "view"
 	},
+	"localNetwork.getTlsStatus": {
+		capName: "local-network",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
 	"localNetwork.list": {
 		capName: "local-network",
 		capScope: "system",
 		addonId: null,
 		access: "view"
 	},
+	"localNetwork.regenerateCertificate": {
+		capName: "local-network",
+		capScope: "system",
+		addonId: null,
+		access: "create"
+	},
 	"localNetwork.resetAllowlistToBestMatch": {
 		capName: "local-network",
 		capScope: "system",
 		addonId: null,
 		access: "delete"
 	},
+	"localNetwork.revertToGeneratedCertificate": {
+		capName: "local-network",
+		capScope: "system",
+		addonId: null,
+		access: "create"
+	},
 	"localNetwork.setAllowedAddresses": {
 		capName: "local-network",
 		capScope: "system",
@@ -32250,6 +32337,12 @@ Object.freeze({
 		addonId: null,
 		access: "create"
 	},
+	"localNetwork.uploadCertificate": {
+		capName: "local-network",
+		capScope: "system",
+		addonId: null,
+		access: "create"
+	},
 	"lockControl.lock": {
 		capName: "lock-control",
 		capScope: "device",
@@ -35130,6 +35223,12 @@ Object.freeze({
 		addonId: null,
 		access: "create"
 	},
+	"terminalSession.updateInstance": {
+		capName: "terminal-session",
+		capScope: "system",
+		addonId: null,
+		access: "create"
+	},
 	"terminalSession.writeInput": {
 		capName: "terminal-session",
 		capScope: "system",
@@ -37617,6 +37716,35 @@ Object.freeze(Object.fromEntries([{
 	}]
 }].map((s) => [s.stepId, s.defaultModelId])));
 string().min(1);
+var CLUSTER_STEP_SETTING_FIELDS = [{
+	stepId: "face-embedding",
+	key: "minLandmarkFaceSize",
+	label: "Min face size for recognition (detection px)",
+	description: "Refuse to embed a face smaller than this IN THE DETECTION FRAME. Applies to every node — the enrolled gallery is one index, and two admission floors would fill it from two policies. 0 disables the gate.",
+	type: "slider",
+	min: 0,
+	max: 64,
+	step: 2,
+	default: 24
+}];
+function clusterStepSettingKey(stepId, fieldKey) {
+	return `clusterStepSetting:${stepId}:${fieldKey}`;
+}
+var ClusterSettingNumberSchema = number().finite();
+function readClusterStepSettings(config) {
+	const out = {};
+	for (const field of CLUSTER_STEP_SETTING_FIELDS) {
+		const parsed = ClusterSettingNumberSchema.safeParse(config[clusterStepSettingKey(field.stepId, field.key)]);
+		const value = parsed.success ? parsed.data : field.default;
+		const existing = out[field.stepId] ?? {};
+		out[field.stepId] = {
+			...existing,
+			[field.key]: value
+		};
+	}
+	return out;
+}
+readClusterStepSettings({});
 object({
 	/**
 	* Fraction of the box's own size added on EACH side before cutting.
@@ -43149,7 +43277,7 @@ var require_xterm_headless = /* @__PURE__ */ __commonJSMin(((exports) => {
 var import_addon_serialize = require_addon_serialize();
 var import_xterm_headless = require_xterm_headless();
 var SCROLLBACK_LINES = 2e3;
-function createXtermScreen(cols, rows) {
+function createXtermScreen$1(cols, rows) {
 	const term = new import_xterm_headless.Terminal({
 		cols,
 		rows,
@@ -43293,7 +43421,7 @@ var TerminalCameraRelay = class {
 			instanceId,
 			nodeId,
 			profileId,
-			screen: createXtermScreen(120, 40),
+			screen: createXtermScreen$1(120, 40),
 			sessionId: null,
 			cursor: 0,
 			clients: 0,
@@ -43324,7 +43452,8 @@ var TerminalCameraRelay = class {
 		const opening = this.api.openSession(state.nodeId, {
 			profileId: state.profileId,
 			cols: 120,
-			rows: 40
+			rows: 40,
+			instanceId: state.instanceId
 		});
 		state.openPromise = opening;
 		try {
@@ -43349,7 +43478,7 @@ var TerminalCameraRelay = class {
 	applyBatch(state, batch) {
 		if (batch.reset) {
 			state.screen.dispose();
-			state.screen = createXtermScreen(120, 40);
+			state.screen = createXtermScreen$1(120, 40);
 			if (batch.snapshot) state.screen.write(batch.snapshot);
 		}
 		let exited = false;
@@ -43711,8 +43840,26 @@ var TerminalInstanceSchema = object({
 	profileId: string().min(1).max(64),
 	profileLabel: string().min(1).max(120),
 	name: string().min(1).max(160),
-	enabled: boolean()
+	enabled: boolean(),
+	executable: string().max(1024).default(""),
+	args: array(string().max(2048)).max(64).default([]),
+	cwd: string().max(1024).default(""),
+	environment: array(string().max(4096)).max(64).default([]),
+	profileSettings: record(string(), unknown()).default({})
 });
+function environmentEntriesToRecord(entries) {
+	const out = {};
+	for (const entry of entries) {
+		const eq = entry.indexOf("=");
+		if (eq <= 0) continue;
+		out[entry.slice(0, eq)] = entry.slice(eq + 1);
+	}
+	return out;
+}
+function environmentRecordToEntries(env) {
+	if (env === void 0) return [];
+	return Object.entries(env).map(([name, value]) => `${name}=${value}`);
+}
 /**
 * Config is operator-writable, so malformed or duplicate rows are ignored
 * rather than allowed to make declaration reconciliation destructive.
@@ -43912,6 +44059,108 @@ function findProfile(profiles, profileId) {
 	return profiles.find((p) => p.profileId === profileId);
 }
 //#endregion
+//#region src/profile-settings.ts
+var GLANCES_PLUGINS = [
+	{
+		key: "showCpu",
+		plugin: "cpu",
+		label: "CPU"
+	},
+	{
+		key: "showMem",
+		plugin: "mem",
+		label: "Memory"
+	},
+	{
+		key: "showLoad",
+		plugin: "load",
+		label: "Load"
+	},
+	{
+		key: "showNetwork",
+		plugin: "network",
+		label: "Network"
+	},
+	{
+		key: "showDiskIo",
+		plugin: "diskio",
+		label: "Disk I/O"
+	},
+	{
+		key: "showFs",
+		plugin: "fs",
+		label: "Filesystems"
+	},
+	{
+		key: "showProcessList",
+		plugin: "processlist",
+		label: "Process list"
+	},
+	{
+		key: "showContainers",
+		plugin: "containers",
+		label: "Containers"
+	},
+	{
+		key: "showSensors",
+		plugin: "sensors",
+		label: "Sensors"
+	}
+];
+function glancesBooleanField(key, label) {
+	return {
+		type: "boolean",
+		key,
+		label,
+		default: true,
+		style: "switch"
+	};
+}
+function glancesSettingsSchema() {
+	return { sections: [{
+		id: "glances-panels",
+		title: "Glances panels",
+		description: "Turn off a panel to pass --disable-plugin to this Terminal only. All on is the measured default (~1% of one core at the camera grid).",
+		columns: 2,
+		fields: GLANCES_PLUGINS.map((plugin) => glancesBooleanField(plugin.key, plugin.label))
+	}] };
+}
+function settingsSchemaForProfile(profileId) {
+	if (profileId === "glances") return glancesSettingsSchema();
+	return null;
+}
+function glancesSettingsToArgs(settings) {
+	const disabled = GLANCES_PLUGINS.filter((plugin) => settings[plugin.key] === false).map((plugin) => plugin.plugin);
+	if (disabled.length === 0) return [];
+	return ["--disable-plugin", disabled.join(",")];
+}
+function sanitizeProfileSettings(profileId, raw) {
+	if (profileId !== "glances") return {};
+	const bag = raw && typeof raw === "object" && !Array.isArray(raw) ? raw : {};
+	const out = {
+		showCpu: true,
+		showMem: true,
+		showLoad: true,
+		showNetwork: true,
+		showDiskIo: true,
+		showFs: true,
+		showProcessList: true,
+		showContainers: true,
+		showSensors: true
+	};
+	for (const plugin of GLANCES_PLUGINS) if (typeof bag[plugin.key] === "boolean") out[plugin.key] = bag[plugin.key];
+	return out;
+}
+function profileSettingsToArgs(profileId, settings) {
+	if (profileId !== "glances") return [];
+	return glancesSettingsToArgs(sanitizeProfileSettings(profileId, settings));
+}
+function spawnArgsForInstance(input) {
+	const extra = profileSettingsToArgs(input.profileId, input.profileSettings);
+	if (input.instanceArgs.length > 0) return [...input.instanceArgs, ...extra];
+	if (extra.length > 0) return [...input.profileArgs, ...extra];
+}
+//#endregion
 //#region src/terminal-session-manager.ts
 var MIN_GRID = 1;
 var MAX_COLS = 1e3;
@@ -43976,7 +44225,12 @@ var TerminalSessionManager = class {
 		return this.profiles.map((p) => ({
 			profileId: p.profileId,
 			label: p.label,
-			...p.description !== void 0 ? { description: p.description } : {}
+			...p.description !== void 0 ? { description: p.description } : {},
+			executable: p.file,
+			args: [...p.args],
+			cwd: p.cwd ?? "",
+			environment: environmentRecordToEntries(p.env),
+			settingsSchema: settingsSchemaForProfile(p.profileId)
 		}));
 	}
 	setInstanceControl(control) {
@@ -43988,6 +44242,9 @@ var TerminalSessionManager = class {
 	async createInstance(input) {
 		return this.requireInstanceControl().createInstance(input);
 	}
+	async updateInstance(input) {
+		return this.requireInstanceControl().updateInstance(input);
+	}
 	async deleteInstance(input) {
 		await this.requireInstanceControl().deleteInstance(input);
 	}
@@ -44010,24 +44267,29 @@ var TerminalSessionManager = class {
 		const cols = clampDimension(input.cols, MAX_COLS);
 		const rows = clampDimension(input.rows, MAX_ROWS);
 		const sessionId = this.mintId();
+		const file = input.executable?.trim() || profile.file;
+		const args = input.args !== void 0 ? [...input.args] : [...profile.args];
+		const cwd = input.cwd?.trim() || profile.cwd || this.opts.cwd;
+		const env = {
+			...this.opts.env,
+			...profile.env,
+			...environmentEntriesToRecord(input.environment ?? [])
+		};
 		const executable = [{
-			file: profile.file,
-			args: profile.args
-		}, ...profile.fallbacks ?? []].map((candidate) => ({
+			file,
+			args
+		}, ...input.executable?.trim() ? [] : profile.fallbacks ?? []].map((candidate) => ({
 			...candidate,
 			resolvedFile: this.resolveBinary(candidate.file)
 		})).find((candidate) => candidate.resolvedFile !== null);
-		if (executable === void 0) throw new Error(`Terminal profile '${profile.profileId}' cannot start: executable '${profile.file}' was not found on PATH. Install it in the server image or set its path in Terminal settings.`);
+		if (executable === void 0) throw new Error(`Terminal profile '${profile.profileId}' cannot start: executable '${file}' was not found on PATH. Install it in the server image or set its path in Terminal settings.`);
 		const pty = this.opts.spawn({
 			file: executable.resolvedFile,
 			args: executable.args,
 			cols,
 			rows,
-			...profile.cwd !== void 0 || this.opts.cwd !== void 0 ? { cwd: profile.cwd ?? this.opts.cwd } : {},
-			...profile.env !== void 0 || this.opts.env !== void 0 ? { env: {
-				...this.opts.env,
-				...profile.env
-			} } : {}
+			...cwd !== void 0 && cwd !== "" ? { cwd } : {},
+			...Object.keys(env).length > 0 ? { env } : {}
 		});
 		const screen = this.opts.screenFactory(cols, rows);
 		const info = {
@@ -44125,7 +44387,7 @@ var TerminalSessionManager = class {
 		const oldestSeq = session.output[0]?.seq ?? session.nextSeq;
 		if (input.afterSeq === 0 || input.afterSeq < oldestSeq - 1 || input.afterSeq > cursor) {
 			await session.screen.flush();
-			const exit = [...session.output].reverse().find((event) => event.kind === "exit");
+			const exit = session.output.toReversed().find((event) => event.kind === "exit");
 			return {
 				cursor,
 				reset: true,
@@ -44369,7 +44631,28 @@ var TerminalAddon = class extends BaseAddon {
 			const localNodeId = declarationOwnerNodeId(this.ctx.kernel.localNodeId);
 			const cameraRelay = new TerminalCameraRelay({
 				listProfiles: (nodeId) => nodeId === localNodeId ? manager.listProfiles() : this.ctx.api.terminalSession.listProfiles.query(void 0, nodePin(nodeId)),
-				openSession: (nodeId, input) => nodeId === localNodeId ? manager.openSession(input) : this.ctx.api.terminalSession.openSession.mutate(input, nodePin(nodeId)),
+				openSession: async (nodeId, input) => {
+					const instance = input.instanceId ? this.terminalInstances().find((row) => row.id === input.instanceId) : void 0;
+					const profile = (nodeId === localNodeId ? await manager.listProfiles() : await this.ctx.api.terminalSession.listProfiles.query(void 0, nodePin(nodeId))).find((candidate) => candidate.profileId === (instance?.profileId ?? input.profileId));
+					const args = instance ? spawnArgsForInstance({
+						profileId: instance.profileId,
+						instanceArgs: instance.args,
+						profileArgs: profile?.args ?? [],
+						profileSettings: instance.profileSettings
+					}) : void 0;
+					const payload = {
+						profileId: input.profileId,
+						cols: input.cols,
+						rows: input.rows,
+						...instance ? {
+							...instance.executable ? { executable: instance.executable } : {},
+							...args !== void 0 ? { args: [...args] } : {},
+							...instance.cwd ? { cwd: instance.cwd } : {},
+							...instance.environment.length > 0 ? { environment: [...instance.environment] } : {}
+						} : {}
+					};
+					return nodeId === localNodeId ? manager.openSession(payload) : this.ctx.api.terminalSession.openSession.mutate(payload, nodePin(nodeId));
+				},
 				pullOutput: (nodeId, input) => nodeId === localNodeId ? manager.pullOutput(input) : this.ctx.api.terminalSession.pullOutput.mutate(input, nodePin(nodeId)),
 				closeSession: async (nodeId, sessionId) => {
 					if (nodeId === localNodeId) await manager.close({ sessionId });
@@ -44574,6 +44857,7 @@ var TerminalAddon = class extends BaseAddon {
 		return {
 			listInstances: async () => this.terminalInstances().map((instance) => this.instanceInfo(instance)),
 			createInstance: async (input) => this.createTerminalInstance(input),
+			updateInstance: async (input) => this.updateTerminalInstance(input),
 			deleteInstance: async ({ instanceId }) => this.deleteTerminalInstance(instanceId),
 			setInstanceEnabled: async ({ instanceId, enabled }) => this.setTerminalInstanceEnabled(instanceId, enabled),
 			listLegacyCameras: async () => this.listLegacyTerminalCameras(),
@@ -44593,7 +44877,12 @@ var TerminalAddon = class extends BaseAddon {
 			profileId: instance.profileId,
 			profileLabel: instance.profileLabel,
 			name: instance.name,
-			enabled: instance.enabled
+			enabled: instance.enabled,
+			executable: instance.executable,
+			args: instance.args,
+			cwd: instance.cwd,
+			environment: instance.environment,
+			profileSettings: instance.profileSettings
 		};
 	}
 	replaceTerminalCameraTombstones(stableIds) {
@@ -44621,11 +44910,37 @@ var TerminalAddon = class extends BaseAddon {
 			profileId: profile.profileId,
 			profileLabel: profile.label,
 			name,
-			enabled: true
+			enabled: true,
+			executable: input.executable?.trim() || profile.executable || "",
+			args: input.args ? [...input.args] : [...profile.args ?? []],
+			cwd: input.cwd?.trim() || profile.cwd || "",
+			environment: input.environment ? [...input.environment] : [...profile.environment ?? []],
+			profileSettings: sanitizeProfileSettings(profile.profileId, input.profileSettings)
 		};
 		await this.updateGlobalSettings({ terminalInstances: [...this.config.terminalInstances, instance] });
 		return this.instanceInfo(instance);
 	}
+	async updateTerminalInstance(input) {
+		const updated = await this.instanceMutationQueue.run(() => this.updateTerminalInstanceUnlocked(input));
+		await this.cameraRelay?.closeInstance(updated.instanceId);
+		await this.reconcileTerminalCameras();
+		return updated;
+	}
+	async updateTerminalInstanceUnlocked(input) {
+		const instance = this.terminalInstances().find((candidate) => candidate.id === input.instanceId);
+		if (!instance) throw new Error(`No such Terminal instance: ${input.instanceId}`);
+		const updated = {
+			...instance,
+			...input.name !== void 0 ? { name: input.name.trim() } : {},
+			...input.executable !== void 0 ? { executable: input.executable.trim() } : {},
+			...input.args !== void 0 ? { args: [...input.args] } : {},
+			...input.cwd !== void 0 ? { cwd: input.cwd.trim() } : {},
+			...input.environment !== void 0 ? { environment: [...input.environment] } : {},
+			...input.profileSettings !== void 0 ? { profileSettings: sanitizeProfileSettings(instance.profileId, input.profileSettings) } : {}
+		};
+		await this.updateGlobalSettings({ terminalInstances: this.config.terminalInstances.map((candidate) => candidate.id === input.instanceId ? updated : candidate) });
+		return this.instanceInfo(updated);
+	}
 	async deleteTerminalInstance(instanceId) {
 		await this.instanceMutationQueue.run(() => this.deleteTerminalInstanceUnlocked(instanceId));
 		await this.reconcileTerminalCameras();
@@ -44685,7 +45000,12 @@ var TerminalAddon = class extends BaseAddon {
 			profileId: "monitor",
 			profileLabel: legacy.profileLabel,
 			name: requestedName?.trim() || legacy.name,
-			enabled: true
+			enabled: true,
+			executable: "",
+			args: [],
+			cwd: "",
+			environment: [],
+			profileSettings: {}
 		};
 		await this.updateGlobalSettings({ terminalInstances: [...this.config.terminalInstances, instance] });
 		return this.instanceInfo(instance);
@@ -44916,4 +45236,4 @@ var TerminalAddon = class extends BaseAddon {
 	}
 };
 //#endregion
-export { TerminalAddon, createXtermScreen as a, buildCellRuns as c, terminalRgbColor as d, createNodePtySpawner as f, createTerminalDataPlaneHandler as i, resolveCellStyle as l, buildProfiles as n, TERMINAL_DEFAULT_BG as o, warmNodePty as p, findProfile as r, TERMINAL_DEFAULT_FG as s, TerminalSessionManager as t, terminalPaletteColor as u };
+export { TerminalAddon, createXtermScreen$1 as a, buildCellRuns as c, terminalRgbColor as d, createNodePtySpawner as f, createTerminalDataPlaneHandler as i, resolveCellStyle as l, buildProfiles as n, TERMINAL_DEFAULT_BG as o, warmNodePty as p, findProfile as r, TERMINAL_DEFAULT_FG as s, TerminalSessionManager as t, terminalPaletteColor as u };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@camstack/addon-terminal",
-  "version": "0.1.29",
+  "version": "0.1.31",
   "description": "Interactive terminal sessions (pty + xterm) as a CamStack addon",
   "keywords": [
     "camstack",