@monster-orange/den 0.4.0 → 0.4.2

package/src/ui/server/public/header.js

@@ -90,10 +90,13 @@ export function envReady() {
   if (_envReady) return _envReady;
   _envReady = (async () => {
     const sel = document.getElementById("env-sel");
-    const envs = await fetch("/api/environments")
-      .then((r) => r.json())
-      .then((v) => (Array.isArray(v) ? v : ["local"]))
-      .catch(() => ["local"]);
+    // A refusal page (SEC-1b, shell.js apiOff): /api answers the refusal.
+    const envs = apiOff()
+      ? ["local"]
+      : await fetch("/api/environments")
+          .then((r) => r.json())
+          .then((v) => (Array.isArray(v) ? v : ["local"]))
+          .catch(() => ["local"]);
     if (!sel) return envs;
     const esc = (s) =>
       String(s).replace(/[&<>"]/g, (c) => `&#${c.charCodeAt(0)};`);
@@ -632,6 +635,7 @@ window.closeChangelog = function () {
  * Call once per page from each page's init function.
  */
 export async function initChangelog() {
+  if (apiOff()) return;
   _injectChangelogStyles();
   try {
     _changelogEntries = await fetch("/api/changelog").then((r) => r.json());
@@ -668,8 +672,25 @@ export async function initChangelog() {
 
 let ___DEN_CLI__Config = null;
 
+/**
+ * 0.4.1: true once the shell knows the config fails validation (shell.js
+ * configInvalid): the polls and streams below that read it don't start.
+ */
+function configInvalid() {
+  return window.denShell?.configInvalid?.() === true;
+}
+
+/**
+ * SEC-1b: a refusal page (421, signed out; shell.js apiOff): every /api
+ * call would answer the same refusal, so none is made.
+ */
+function apiOff() {
+  return window.denShell?.apiOff?.() === true;
+}
+
 async function getDenConfig() {
   if (___DEN_CLI__Config) return ___DEN_CLI__Config;
+  if (configInvalid()) return { environments: ["local"] };
   try {
     ___DEN_CLI__Config = await fetch("/api/__DEN_CLI__/config").then((r) =>
       r.json(),
@@ -731,6 +752,7 @@ let _apps = null;
 let _appsAt = 0;
 async function _loadApps() {
   if (_apps && Date.now() - _appsAt < 30_000) return _apps;
+  if (configInvalid()) return _apps ?? [];
   try {
     const r = await fetch("/api/applications", {
       signal: AbortSignal.timeout(5_000),
@@ -790,7 +812,7 @@ export async function refreshWorkspacePill() {
 
 async function _renderScopeMenu() {
   const sh = window.denShell;
-  if (!sh?.setWorkspaces) return;
+  if (!sh?.setWorkspaces || configInvalid()) return;
   try {
     const [data, scope] = await Promise.all([
       fetch("/api/workspaces").then((r) => r.json()),
@@ -808,15 +830,19 @@ async function _renderScopeMenu() {
   }
 }
 
+/** The pages whose ?ws= wins over the stored view (Graph, Agents). */
+const WS_URL_PAGES = new Set(["/graph", "/agents"]);
+
 /**
  * The Graph page draws what its ?ws= names (it wins over the stored view,
  * 0.3.0-dev.33), so its pill shows that workspace too: the pill, the URL,
  * the header's line and the graph agree (0.3.0-dev.34, a consumer's
- * finding). Elsewhere, and for a ?ws= that names no active workspace,
- * the stored view.
+ * finding). The Agents page's ?ws= (the Workspaces page's "Open in
+ * Agents") is the same. Elsewhere, and for a ?ws= that names no active
+ * workspace, the stored view.
  */
 function pageScope(scope, data) {
-  if (location.pathname !== "/graph") return scope;
+  if (!WS_URL_PAGES.has(location.pathname)) return scope;
   const ws = new URLSearchParams(location.search).get("ws");
   const active = Array.isArray(data?.active)
     ? data.active
@@ -833,7 +859,7 @@ function pageScope(scope, data) {
  * pushed: Back does not return to a view the picker has left.
  */
 function followScopeInUrl(value) {
-  if (location.pathname !== "/graph") return;
+  if (!WS_URL_PAGES.has(location.pathname)) return;
   const u = new URL(location.href);
   if (value === "all") u.searchParams.delete("ws");
   else u.searchParams.set("ws", value);
@@ -885,6 +911,7 @@ async function _setFocus(name) {
 /** Call once on page load. Does NOT manage env changes — caller handles that. */
 export async function initHealth() {
   await envReady();
+  if (configInvalid()) return;
   const env = healthEnv();
   const gen = ++pollGen;
   await renderHealth(env, gen);
@@ -895,6 +922,7 @@ export async function initHealth() {
 export async function refreshHealth(env, { force = false } = {}) {
   const gen = ++pollGen;
   clearTimeout(pollTimer);
+  if (configInvalid()) return;
   // The chip goes neutral while the new env is checked: never red from
   // the old env's answers, never a partial count.
   if (env !== _healthEnvPainted) paintChecking();
@@ -913,6 +941,7 @@ document.addEventListener("visibilitychange", () => {
 
 function schedulePoll(env, gen) {
   if (gen !== pollGen) return; // superseded by an env switch/re-init
+  if (configInvalid()) return; // a reload once fixed starts it again
   clearTimeout(pollTimer);
   pollTimer = setTimeout(async () => {
     try {
@@ -1040,9 +1069,13 @@ function _streamHealth(env, force, onResult) {
  * ones never do.
  */
 function _paintHealth(env, results) {
-  const repos = [...new Set(results.map((r) => r.repo))];
+  // WS-6.4: the server checks every active workspace; the chip and the
+  // drawer count only what the view scope shows (`inView`). The pages get
+  // every row, so the Workspaces page knows any workspace's health.
+  const shown = results.filter((r) => r.inView !== false);
+  const repos = [...new Set(shown.map((r) => r.repo))];
   const groups = groupReposByApplication(repos, _apps);
-  const row = buildRow(results, groups);
+  const row = buildRow(shown, groups);
   window.denShell?.setState(shellHealth(row));
   _healthEnvPainted = env;
   paintStatus({ row, groups, env });
@@ -1203,6 +1236,7 @@ async function _fetchServerInfo() {
 }
 
 async function _staleTick() {
+  if (apiOff()) return;
   const info = await _fetchServerInfo();
   if (info && info.pid != null)
     _lastServerInfo = { pid: info.pid, startedAt: info.startedAt };

package/src/ui/server/public/i18n/es.js

@@ -144,7 +144,8 @@
     "dock.resize": "Arrastra para cambiar el tamaño",
     "lock.locked": "Bloqueado",
     "lock.unlocked": "Desbloqueado",
-    "lock.title": "Desbloquea para iniciar, detener y reiniciar servicios",
+    "lock.title":
+      "Desbloquea para iniciar, detener y reiniciar servicios y agentes",
     "lock.nopw":
       "sudo sin contraseña (NOPASSWD): no hace falta la contraseña de administrador",
     "lock.session": "Desbloqueado durante esta sesión",
@@ -241,6 +242,24 @@
     "err.500.time": "Hora",
     "err.500.id": "Id de solicitud",
     "err.500.version": "Versión",
+    "err.421.title": "Dirección incorrecta",
+    "err.421.lead":
+      "Este servidor solo responde en sus propias direcciones, así que una página con otro nombre no puede alcanzarlo.",
+    "err.421.open": "Abrir en localhost",
+    "err.refused.title": "Solicitud rechazada",
+    "err.signin.title": "Inicia sesión para usar {name}",
+    "err.signin.terminal": "Inicia sesión para usar la terminal",
+    "err.signin.agents": "Inicia sesión para iniciar agentes",
+    "err.signin.sub": "Este navegador no ha iniciado sesión",
+    "err.signin.lead": "Ejecuta {cmd} y abre el enlace.",
+    "err.signin.expiredTitle": "El enlace de inicio de sesión caducó",
+    "err.signin.expired":
+      "Ese enlace de inicio de sesión caducó o ya se usó. Ejecuta {cmd} para obtener uno nuevo.",
+    "err.signin.local":
+      "Un inicio de sesión pertenece a una sola dirección. Esta página está en {host}: abre la misma página en localhost, donde este navegador tiene la sesión iniciada.",
+    "err.signin.why":
+      "No hay contraseña: el enlace sale de un archivo que solo tu cuenta de usuario puede leer.",
+    "err.signin.copy": "Copiar comando",
     "err.422.title": "La configuración no es válida",
     "err.422.sub": "La configuración de la distribución no pasa la validación",
     "err.422.lead":
@@ -274,6 +293,7 @@
     "set.cli.cli_tabs": "Pestañas de terminal",
     "set.cli.log_window_lines": "Líneas del panel de registros",
     "set.cli.web_port": "Tu puerto web",
+    "set.cli.signin": "Inicio de sesión del navegador",
     "set.distribution.brand": "Nombre del producto",
     "set.distribution.github_org": "Org de GitHub",
     "set.distribution.orgs": "Etiquetas de org",
@@ -283,5 +303,74 @@
     "err.retry": "Reintentar",
     "err.copy": "Copiar detalles",
     "err.copied": "Copiado",
+    "ag.title": "Agentes",
+    "ag.caption": "Agentes en {ws}",
+    "ag.count": "{n} agentes",
+    "ag.count.one": "{n} agente",
+    "ag.col.agent": "Agente",
+    "ag.col.runtime": "Runtime",
+    "ag.col.state": "Estado",
+    "ag.col.cwd": "Directorio",
+    "ag.col.started": "Inicio",
+    "ag.col.actions": "Acciones",
+    "ag.loading": "Cargando agentes…",
+    "ag.none": "Aún no hay agentes en este workspace",
+    "ag.personaOf": "persona {persona}",
+    "ag.state.running": "en marcha",
+    "ag.state.stopping": "deteniéndose…",
+    "ag.state.stopped": "detenido",
+    "ag.state.ended": "terminado",
+    "ag.state.exited": "salió",
+    "ag.state.exitedCode": "salió ({code})",
+    "ag.stop": "Detener",
+    "ag.resume": "Reanudar",
+    "ag.stopName": "Detener {id}",
+    "ag.resumeName": "Reanudar {id}",
+    "ag.start": "+ Iniciar agente",
+    "ag.persona": "Persona",
+    "ag.runtime": "Runtime",
+    "ag.runtime.auto": "La de la persona",
+    "ag.unavailable": "no disponible",
+    "ag.go": "Iniciar",
+    "ag.starting": "Iniciando…",
+    "ag.cancel": "Cancelar",
+    "ag.started": "Agente {id} iniciado",
+    "ag.stopped": "Agente {id} detenido",
+    "ag.resumed": "Agente {id} reanudado",
+    // The Agents tab (AG-4a-term, agents-page.js).
+    "n.agents": "Agentes",
+    "kind.agent": "Agente",
+    "ag.sub": "{n} sesiones · {w} en espera · {scope}",
+    "ag.sub.one": "{n} sesión · {w} en espera · {scope}",
+    "ag.all": "todos los espacios",
+    "ag.waiting": "en espera",
+    "ag.session": "sesión",
+    "ag.empty":
+      "Elige una sesión a la izquierda para abrir su terminal. Abre más para verlas en mosaico (hasta 4).",
+    "ag.none.scope": "Aún no hay sesiones ni agentes en {scope}",
+    "ag.detach": "Cerrar panel",
+    "ag.detachName": "Cerrar el panel de {id} (sigue en marcha)",
+    "ag.detached": "Panel de {id} cerrado: sigue en marcha",
+    "ag.open": "Abrir",
+    "ag.openName": "Abrir {id} en Agentes",
+    "ws.openAgents": "Abrir en Agentes →",
+    "ag.signin": "Inicia sesión para abrir terminales: ejecuta {cli} web login",
+    "ag.revoked": "token revocado",
+    "ag.revokedTip":
+      "Su token fue revocado (web logout --all): detenlo y reanúdalo, o inícialo de nuevo, para darle uno nuevo",
+    "ag.ended":
+      "Esta sesión ha terminado. Su registro se queda hasta que se reanude o se elimine.",
+    "ag.exitedLine": "[la sesión terminó{code}]",
+    "ag.lost": "[desconectado: {why}]",
+    "ag.reconnect": "Reconectar",
+    "ag.noBackend":
+      "Los terminales necesitan el módulo PTY opcional (den-pty no está disponible): {cli} doctor explica por qué",
+    "ag.noHost":
+      "No hay ningún host de sesiones en marcha: aún no se ha iniciado nada",
+    "ag.ws": "Espacio de trabajo",
+    "ag.pal": "Agentes › {ws} / {name}",
+    "ag.palStart": "Iniciar agente…",
+    "ag.cap":
+      "Hasta 4 paneles: se cerró el de {id} para hacer sitio (sigue en marcha)",
   };
 })((window.denMessages = window.denMessages || {}));

package/src/ui/server/public/i18n/ja.js

@@ -133,7 +133,8 @@
     "dock.resize": "ドラッグしてサイズを変更",
     "lock.locked": "ロック中",
     "lock.unlocked": "ロック解除",
-    "lock.title": "ロックを解除するとサービスの起動・停止・再起動ができます",
+    "lock.title":
+      "ロックを解除するとサービスとエージェントの起動・停止・再起動ができます",
     "lock.nopw":
       "パスワード不要の sudo (NOPASSWD): 管理者パスワードは必要ありません",
     "lock.session": "このセッションの間ロックを解除しました",
@@ -230,6 +231,24 @@
     "err.500.time": "時刻",
     "err.500.id": "リクエスト ID",
     "err.500.version": "バージョン",
+    "err.421.title": "アドレスが違います",
+    "err.421.lead":
+      "このサーバーは自身のアドレスでのみ応答するため、別の名前のページからは届きません。",
+    "err.421.open": "localhost で開く",
+    "err.refused.title": "リクエストが拒否されました",
+    "err.signin.title": "{name} を使うにはサインインしてください",
+    "err.signin.terminal": "ターミナルを使うにはサインインしてください",
+    "err.signin.agents": "エージェントを起動するにはサインインしてください",
+    "err.signin.sub": "このブラウザはサインインしていません",
+    "err.signin.lead": "{cmd} を実行し、表示されたリンクを開いてください。",
+    "err.signin.expiredTitle": "サインインリンクの期限切れ",
+    "err.signin.expired":
+      "このサインインリンクは期限切れか、使用済みです。{cmd} を実行して新しいリンクを取得してください。",
+    "err.signin.local":
+      "サインインはアドレスごとです。このページは {host} にあります。サインイン済みの localhost で同じページを開いてください。",
+    "err.signin.why":
+      "パスワードはありません。リンクは、あなたのユーザーアカウントだけが読めるファイルから作られます。",
+    "err.signin.copy": "コマンドをコピー",
     "err.422.title": "設定が無効です",
     "err.422.sub": "ディストリビューションの設定が検証に失敗しました",
     "err.422.lead":
@@ -263,6 +282,7 @@
     "set.cli.cli_tabs": "ターミナルのタブ",
     "set.cli.log_window_lines": "ログ欄の行数",
     "set.cli.web_port": "あなたの web ポート",
+    "set.cli.signin": "ブラウザのサインイン",
     "set.distribution.brand": "製品名",
     "set.distribution.github_org": "GitHub の組織",
     "set.distribution.orgs": "組織のラベル",
@@ -272,5 +292,70 @@
     "err.retry": "再試行",
     "err.copy": "詳細をコピー",
     "err.copied": "コピーしました",
+    "ag.title": "エージェント",
+    "ag.caption": "{ws} のエージェント",
+    "ag.count": "エージェント {n} 件",
+    "ag.col.agent": "エージェント",
+    "ag.col.runtime": "ランタイム",
+    "ag.col.state": "状態",
+    "ag.col.cwd": "ディレクトリ",
+    "ag.col.started": "開始",
+    "ag.col.actions": "操作",
+    "ag.loading": "エージェントを読み込み中…",
+    "ag.none": "このワークスペースにはまだエージェントがありません",
+    "ag.personaOf": "ペルソナ {persona}",
+    "ag.state.running": "実行中",
+    "ag.state.stopping": "停止中…",
+    "ag.state.stopped": "停止済み",
+    "ag.state.ended": "終了",
+    "ag.state.exited": "終了済み",
+    "ag.state.exitedCode": "終了済み ({code})",
+    "ag.stop": "停止",
+    "ag.resume": "再開",
+    "ag.stopName": "{id} を停止",
+    "ag.resumeName": "{id} を再開",
+    "ag.start": "+ エージェントを開始",
+    "ag.persona": "ペルソナ",
+    "ag.runtime": "ランタイム",
+    "ag.runtime.auto": "ペルソナの既定",
+    "ag.unavailable": "利用不可",
+    "ag.go": "開始",
+    "ag.starting": "開始中…",
+    "ag.cancel": "キャンセル",
+    "ag.started": "エージェント {id} を開始しました",
+    "ag.stopped": "エージェント {id} を停止しました",
+    "ag.resumed": "エージェント {id} を再開しました",
+    // The Agents tab (AG-4a-term, agents-page.js).
+    "n.agents": "エージェント",
+    "kind.agent": "エージェント",
+    "ag.sub": "{n} セッション · 承認待ち {w} · {scope}",
+    "ag.all": "すべてのワークスペース",
+    "ag.waiting": "承認待ち",
+    "ag.session": "セッション",
+    "ag.empty":
+      "左のセッションを選ぶとターミナルが開きます。複数開くと並べて表示します（最大 4）。",
+    "ag.none.scope": "{scope} にはまだセッションもエージェントもありません",
+    "ag.detach": "ペインを閉じる",
+    "ag.detachName": "{id} のペインを閉じる（実行は続きます）",
+    "ag.detached": "{id} のペインを閉じました。実行は続いています",
+    "ag.open": "開く",
+    "ag.openName": "{id} をエージェントで開く",
+    "ws.openAgents": "エージェントで開く →",
+    "ag.signin": "ターミナルを開くにはサインイン: {cli} web login を実行",
+    "ag.revoked": "トークン失効",
+    "ag.revokedTip":
+      "トークンが失効しました（web logout --all）。新しいトークンを渡すには停止して再開するか、もう一度開始してください",
+    "ag.ended": "このセッションは終了しました。記録は再開か削除まで残ります。",
+    "ag.exitedLine": "[セッションが終了しました{code}]",
+    "ag.lost": "[切断: {why}]",
+    "ag.reconnect": "再接続",
+    "ag.noBackend":
+      "ターミナルにはオプションの PTY モジュールが必要です（den-pty は使えません）。理由は {cli} doctor で確認できます",
+    "ag.noHost": "セッションホストは動いていません。まだ何も開始されていません",
+    "ag.ws": "ワークスペース",
+    "ag.pal": "エージェント › {ws} / {name}",
+    "ag.palStart": "エージェントを開始…",
+    "ag.cap":
+      "ペインは最大 4 つです。{id} のペインを閉じました（実行は続きます）",
   };
 })((window.denMessages = window.denMessages || {}));

package/src/ui/server/public/local-dev.html

@@ -1336,6 +1336,50 @@
         align-items: center;
         gap: 10px;
       }
+      /* ── Workspaces: the Agents section (AG-4a, §5c) ─────────────────────
+         The repo table's look (table.svc, .tbl-*) under the shell's section
+         heading (.den-sec); the start form sits in the table's foot. */
+      .agents .tbl-foot {
+        margin-top: 10px;
+        flex-wrap: wrap;
+      }
+      .agents .ag-head {
+        display: flex;
+        align-items: baseline;
+        justify-content: space-between;
+        gap: 12px;
+        flex-wrap: wrap;
+      }
+      .agents .ag-head a {
+        font-size: 12.5px;
+      }
+      .agent-form {
+        display: flex;
+        align-items: center;
+        gap: 10px;
+        flex-wrap: wrap;
+      }
+      .agent-form[hidden] {
+        display: none;
+      }
+      .agent-form label {
+        display: inline-flex;
+        align-items: center;
+        gap: 6px;
+        color: var(--muted);
+        font-size: 12px;
+      }
+      .agent-form select {
+        max-width: 320px;
+      }
+      .agent-cwd {
+        max-width: 280px;
+        overflow: hidden;
+        text-overflow: ellipsis;
+      }
+      .ws-empty-state + .ws-agents-only {
+        flex: none;
+      }
       .validate-details > summary {
         cursor: pointer;
         color: var(--muted);
@@ -1423,6 +1467,7 @@
           buildRow,
         } from "/header.js";
         import { checkLine } from "/topbar.js";
+        import { agentsSectionHtml, mountAgents } from "/agents-section.js";
         import { mountGraph, graphHealth, graphMaximized } from "/graph.js";
         import {
           mergeWorkspaceViews,
@@ -1956,6 +2001,7 @@
                <button class="switch-btn" data-action="switch-ws">activate + focus</button>`
           }
           ${stackNsChip}
+          <span class="badge ws-agents" id="ws-agents-count" hidden></span>
           <a class="ws-head-link" id="ws-open-graph" href="/graph?ws=${enc}">Open in Graph →</a>
           <div class="action-menu-wrap ws-more">
             <button type="button" class="switch-btn" data-action="toggle-svc-menu" data-menu-id="ws-more-menu" aria-haspopup="menu" aria-expanded="false" aria-label="More for ${escHtml(wsName)}" title="More for this workspace">⋯</button>
@@ -1986,6 +2032,9 @@
           <button class="add-svc-open-btn ws-empty-add-btn" onclick="openAddSvcModal('${escHtml(wsName)}')">+ Add Service</button>
           <span class="form-msg" id="add-msg"></span>
         </div>
+        <div class="content-body ws-agents-only">
+          ${agentsSectionHtml(wsName)}
+        </div>
         `
             : `
         <div class="content-body">
@@ -2023,6 +2072,9 @@
             <span class="form-msg" id="add-msg"></span>
           </div>
 
+          <!-- Agents (AG-4a, §5c): the workspace's agents, under its repos. -->
+          ${agentsSectionHtml(wsName)}
+
           <!-- Validate a manifest (by path, or pasted) -->
           <details class="validate-details">
             <summary>Validate a manifest</summary>
@@ -2041,6 +2093,7 @@
 `;
           _tbl = { wsName, ws, svcList, depsMap, repoRank, appTree };
           renderTable();
+          mountAgents(wsName);
 
           // Pre-fetch GitHub org repos so the Add Service modal loads instantly
           fetch("/api/github/repos")

package/src/ui/server/public/logs.html

@@ -681,6 +681,9 @@
         const toolbar = document.getElementById("logs-toolbar");
         let services;
         try {
+          // An invalid config (the shell knows): not asked, it lists nothing.
+          if (window.denShell?.configInvalid?.() === true)
+            throw new Error("config invalid");
           services = await fetch(`/api/services?env=${env}`).then((r) =>
             r.json(),
           );

package/src/ui/server/public/panel.js

@@ -793,7 +793,7 @@ function activityList(x) {
     .then(({ entries = [] }) => {
       if (!live) return;
       el.innerHTML = entries.length
-        ? `<ol class="act">${entries.map((a) => `<li><time datetime="${esc(a.ts)}">${esc(hhmm(a.ts))}</time><span class="dg-who ${a.actor === "agent" ? "agent" : ""}">${esc(a.actor === "agent" ? (a.agent ? "[" + a.agent + "]" : "[agent]") + (a.client ? " " + a.client : "") : "you")}</span><span>${esc(a.verb)} ${esc(a.detail)}${a.outcome === "refused" ? ` <em class="refused">refused: ${esc(a.reason || "")}</em>` : ""}</span></li>`).join("")}</ol>`
+        ? `<ol class="act">${entries.map((a) => `<li><time datetime="${esc(a.ts)}">${esc(hhmm(a.ts))}</time><span class="dg-who ${a.actor === "agent" ? "agent" : ""}">${esc(a.actor === "agent" ? (a.agent ? "[" + a.agent + "]" : "[agent]") + (a.client ? " " + a.client : "") : "you" + (a.claimed && a.claimed.client ? " · " + a.claimed.client + " (unverified)" : ""))}</span><span>${esc(a.verb)} ${esc(a.detail)}${a.outcome === "refused" ? ` <em class="refused">refused: ${esc(a.reason || "")}</em>` : ""}</span></li>`).join("")}</ol>`
         : none(
             "No actions yet. Starts, restarts and syncs, yours and agents', show here.",
           );

package/src/ui/server/public/release.html

@@ -895,6 +895,14 @@
 
       // ── Load status ─────────────────────────────────────────────────────────────
       async function loadStatus(refresh = false) {
+        // No deploy environment (environments: [local] only): nothing to ask.
+        if (!state.env) {
+          state.rows = [];
+          state.loading = null;
+          setStatus("no deploy environment configured");
+          renderTable();
+          return;
+        }
         state.loading = refresh ? "refresh" : "initial";
         setStatus(refresh ? "refreshing…" : "checking deployed state…");
         renderTable(); // shows the loading row; see renderTable

package/src/ui/server/public/settings-page.js

@@ -172,6 +172,11 @@ export async function mountSettings(deps) {
     return true;
   }
   async function loadWorkspaceSettings() {
+    // 0.4.1: under an invalid config it answers 422; the rows show none.
+    if (window.denShell?.configInvalid?.() === true) {
+      ctx.wsSettings = null;
+      return;
+    }
     ctx.wsSettings = ctx.workspace
       ? await getJson(
           `/api/workspaces/settings?workspace=${encodeURIComponent(ctx.workspace)}`,

package/src/ui/server/public/settings-registry.js

@@ -465,6 +465,39 @@ export const DEN_SETTINGS = [
         ? String(ctx.data.user_web_port)
         : "Not set: the distribution's applies",
   },
+  {
+    // SEC-1b: whether this browser is signed in, and Sign out. Signing in
+    // is the CLI's (`web login` prints a one-time link): no form here.
+    id: "cli.signin",
+    category: "cli",
+    label: "Browser sign-in",
+    description:
+      "Signing in is needed only when this server is reached beyond this machine (the edge, or a LAN address); on localhost nothing asks for it. __DEN_CLI__ web login prints a sign-in link; __DEN_CLI__ web sessions lists signed-in browsers.",
+    keywords: ["sign in", "sign out", "login", "logout", "session", "browser"],
+    scope: "user",
+    control: {
+      type: "custom",
+      render(host, ctx) {
+        const draw = (signedIn) => {
+          host.innerHTML = signedIn
+            ? '<output class="set-ro">Signed in</output> ' +
+              '<button type="button" class="btn" id="set-signout">Sign out</button>'
+            : '<output class="set-ro">Not signed in: run <code>__DEN_CLI__ web login</code></output>';
+          host.querySelector("#set-signout")?.addEventListener("click", () =>
+            ctx.shell
+              .api("POST", "/api/session/logout", {})
+              .then(() => draw(false))
+              .catch(() => {}),
+          );
+        };
+        fetch("/api/session", { cache: "no-store" })
+          .then((r) => (r.ok ? r.json() : null))
+          .then((b) => draw(b?.signedIn === true))
+          .catch(() => draw(false));
+      },
+    },
+    read: () => null,
+  },
 
   // ── Distribution (read-only) ───────────────────────────────────────────
   distRow(