@qodalis/cli 2.4.2 → 2.5.1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@qodalis/cli",
-  "version": "2.4.2",
+  "version": "2.5.1",
   "description": "Framework-agnostic CLI engine for @qodalis terminal applications.",
   "author": "Nicolae Lupei, Qodalis Solutions",
   "license": "MIT",
@@ -30,7 +30,7 @@
     "./assets/*": "./assets/*"
   },
   "dependencies": {
-    "@qodalis/cli-core": "2.4.2",
+    "@qodalis/cli-core": "2.5.1",
     "@xterm/xterm": "^6.0.0",
     "@xterm/addon-fit": "^0.11.0",
     "@xterm/addon-web-links": "^0.12.0",

package/public-api.d.mts

@@ -1,4 +1,4 @@
-import { ICliCommandProcessor, ICliCommandParameterDescriptor as ICliCommandParameterDescriptor$1, ICliCommandProcessorRegistry, ICliCommandChildProcessor, CliProcessorMetadata, CliStateConfiguration, ICliExecutionContext, CliProcessCommand, ICliCommandAuthor, ICliCommandControls, CliThemeInfo, ICliExecutionProcess, ICliUserSession, ICliSpinner, ICliPercentageProgressBar, ICliTextAnimator, ICliTerminalWriter, ICliCommandExecutorService, ICliClipboard, ICliStateStore, CliOptions, ICliLogger, ICliServiceProvider, ICliTranslationService, ICliInputReader, ICliBackgroundServiceRegistry, ICliHttpClient, ICliNotifier, ICliManagedInterval, ICliManagedTimer, ICliEventBus, ICliKeyValueStore, CliStateStoreOptions, ICliCompletionProvider, ICliFilePickerProvider, CliFullScreenOptions, ICliProcessRegistry, ICliBackgroundService, ICliServiceContext, ICliBackgroundServiceInfo, ICliServiceLogEntry, CliServiceEventHandler, ICliGlobalParameterHandler, CliForegroundColor, CliBackgroundColor, CliToken, CliProvider, CliTableOptions, CliLogLevel, CliPercentageProgressBarUpdateValueOptions, CliTextAnimatorOptions, ICliModule, CliModuleRegistry, Package, ICliPingServerService, CliLineOptions, CliSelectOption, CliSelectOptions, CliMultiSelectOption, CliMultiSelectOptions, CliNumberOptions, CliDateOptions, CliFilePickerOptions, CliFileResult, ICliProcessRegisterOptions, ICliProcessEntry, ICliDragDropService, CliHttpRequestOptions, CliNotification, ICliPermissionRegistry, CliPermissionDefinition, CliBranding, CliState, CliEngineSnapshot, CliEvent, CliEventType, CliEventMap, CliEmitOptions, CustomEventType, CliEventHandler, CliServerConfig, ICliServerAuthService, CliServerCommandDescriptor, CliServerCapabilities, CliServerResponse, CliServerOutput, CliPanelPosition, CliPanelConfig, CliPanelHideAlignment, ICliPanelRef, CliPanelThemeInput, CliPanelState } from '@qodalis/cli-core';
+import { ICliCommandProcessor, ICliCommandParameterDescriptor as ICliCommandParameterDescriptor$1, ICliCommandProcessorRegistry, ICliCommandChildProcessor, CliProcessorMetadata, CliStateConfiguration, ICliExecutionContext, CliProcessCommand, ICliCommandAuthor, ICliCommandControls, CliThemeInfo, ICliExecutionProcess, ICliUserSession, ICliSpinner, ICliPercentageProgressBar, ICliTextAnimator, ICliTerminalWriter, ICliCommandExecutorService, ICliClipboard, ICliStateStore, CliOptions, ICliLogger, ICliServiceProvider, ICliTranslationService, ICliInputReader, ICliBackgroundServiceRegistry, ICliHttpClient, ICliNotifier, ICliManagedInterval, ICliManagedTimer, ICliEventBus, ICliKeyValueStore, CliStateStoreOptions, ICliCompletionProvider, ICliFilePickerProvider, CliFullScreenOptions, ICliProcessRegistry, ICliBackgroundService, ICliServiceContext, ICliBackgroundServiceInfo, ICliServiceLogEntry, CliServiceEventHandler, ICliGlobalParameterHandler, CliForegroundColor, CliBackgroundColor, CliToken, CliProvider, CliTableOptions, CliLogLevel, CliPercentageProgressBarUpdateValueOptions, CliTextAnimatorOptions, ICliModule, CliModuleRegistry, Package, ICliPingServerService, CliLineOptions, CliSelectOption, CliSelectOptions, CliMultiSelectOption, CliMultiSelectOptions, CliNumberOptions, CliDateOptions, CliFilePickerOptions, CliFileResult, ICliProcessRegisterOptions, ICliProcessEntry, ICliDragDropService, CliHttpRequestOptions, CliNotification, ICliPermissionRegistry, CliPermissionDefinition, CliBranding, CliState, CliEngineSnapshot, CliEvent, CliEventType, CliEventMap, CliEmitOptions, CustomEventType, CliEventHandler, CliServerConfig, ICliServerAuthService, CliServerCommandDescriptor, CliServerCapabilities, CliServerResponse, CliServerOutput, ICliSecretStore, CliPanelPosition, CliPanelConfig, CliPanelHideAlignment, ICliPanelRef, CliPanelThemeInput, CliPanelState } from '@qodalis/cli-core';
 export { ICliUserSessionService_TOKEN, ICliUsersStoreService_TOKEN } from '@qodalis/cli-core';
 import { ITheme, Terminal, ITerminalAddon, ITerminalOptions, ITerminalInitOnlyOptions } from '@xterm/xterm';
 import * as rxjs from 'rxjs';
@@ -165,7 +165,7 @@ declare const CliKeyValueStore_TOKEN: any;
  */
 declare const SyntaxHighlighterRegistry_TOKEN: any;
 
-declare const LIBRARY_VERSION = "2.4.2";
+declare const LIBRARY_VERSION = "2.5.1";
 declare const API_VERSION = 2;
 
 declare class CliAliasCommandProcessor implements ICliCommandProcessor {
@@ -2889,6 +2889,14 @@ interface CliEngineOptions extends CliOptions {
      * @default true
      */
     autoFocus?: boolean;
+    /**
+     * Scroll the scrollback with a finger on touch screens (xterm.js has no
+     * touch scrolling, so a drag would scroll the page instead). Paused while
+     * a full-screen command runs. Turn it off when the host scrolls the
+     * terminal itself.
+     * @default true
+     */
+    touchScroll?: boolean;
 }
 declare class CliEngine {
     private readonly container;
@@ -2903,6 +2911,7 @@ declare class CliEngine {
     private resizeObserver?;
     private resizeListener?;
     private wheelListener?;
+    private disposeTouchScroll?;
     private resizeVersion;
     private resizeScheduled;
     private bootService?;
@@ -2953,7 +2962,10 @@ declare class CliEngine {
     private beginBootReport;
     /** 4. Environment variables, background services, server auth and manager. */
     private registerRuntimeServices;
-    /** 4. Connect to the configured servers, one boot step each. */
+    /**
+     * 4. Connect to the configured servers, one boot step each, then to the
+     * servers the user linked (`server add`).
+     */
     private connectServers;
     /**
      * 5. Built-in welcome and server modules, the app's modules, and the
@@ -3275,6 +3287,7 @@ declare class CliServerProxyProcessor implements ICliCommandProcessor {
     parameters?: ICliCommandParameterDescriptor$1[];
     processors?: ICliCommandProcessor[];
     acceptsRawInput?: boolean;
+    writeDescription?: (context: ICliExecutionContext) => void;
     /** Full command path from root to this processor (e.g. ["aws", "lambda", "list"]) */
     private readonly commandPath;
     constructor(connection: CliServerConnection, descriptor: CliServerCommandDescriptor, serverName: string, isNested?: boolean, parentPath?: string[]);
@@ -3299,7 +3312,9 @@ declare class CliServerMultiProxyProcessor implements ICliCommandProcessor {
     private readonly entries;
     private readonly provider;
     command: string;
+    aliases?: string[];
     description?: string;
+    writeDescription?: (context: ICliExecutionContext) => void;
     metadata?: CliProcessorMetadata;
     parameters?: ICliCommandParameterDescriptor$1[];
     processors?: ICliCommandProcessor[];
@@ -3332,16 +3347,42 @@ declare class CliServerManager implements DefaultServerProvider {
     private readonly _bareAliases;
     private _backgroundServices?;
     private _hidden;
+    /** Servers the user linked (`server add`), as opposed to the host's */
+    private readonly _linked;
     /** `server:command` pairs already warned about, so each warns once */
     private readonly _warnedHidden;
     constructor(registry: ICliCommandProcessorRegistry, authService?: ICliServerAuthService, events?: ICliEventBus);
+    /** Whether the user linked this server (`server add`): only those can be removed or edited. */
+    isLinked(name: string): boolean;
     get defaultServer(): string | null;
     preferredServer(): string | null;
     setDefaultServer(name: string | null): void;
+    /** Where connections report and run (set once at boot, before any server connects). */
+    configure(logger?: {
+        warn(msg: string): void;
+        info(msg: string): void;
+    }, backgroundServices?: ICliBackgroundServiceRegistry, cliLogger?: ICliLogger): void;
     connectAll(servers: CliServerConfig[], logger?: {
         warn(msg: string): void;
         info(msg: string): void;
     }, backgroundServices?: ICliBackgroundServiceRegistry, cliLogger?: ICliLogger): Promise<void>;
+    /**
+     * Connects one server and registers its commands (without the bare
+     * aliases: callers refresh them once every server is connected).
+     */
+    private connectServer;
+    /**
+     * Connects a server added while the terminal runs (`server add`): its
+     * commands are available at once. Throws when the name is taken.
+     */
+    addServer(config: CliServerConfig, options?: {
+        linked?: boolean;
+    }): Promise<CliServerConnection>;
+    /**
+     * Disconnects a server and forgets it (`server remove`): its commands go
+     * away. False when there is no such server.
+     */
+    removeServer(name: string): boolean;
     reconnect(name: string): Promise<{
         success: boolean;
         commandCount: number;
@@ -3358,6 +3399,11 @@ declare class CliServerManager implements DefaultServerProvider {
     private unregisterBareAliases;
     private registerProxyProcessors;
     private registerBareAliases;
+    /**
+     * The server's aliases of a command that no registered command answers
+     * to yet: a local command (or an earlier server alias) keeps its name.
+     */
+    private freeAliases;
     private recordHidden;
 }
 
@@ -3419,6 +3465,151 @@ declare function describeShellClose(event: {
     reason?: string;
 }, serverName: string): string | null;
 
+/** A server linked with `server add` (its token is kept apart, in the secret store). */
+interface CliLinkedServer {
+    name: string;
+    url: string;
+    /** Epoch milliseconds. */
+    addedAt: number;
+}
+/** Server names: a letter or digit, then letters, digits, `-` and `_` (at most 32). */
+declare const SERVER_NAME_PATTERN: RegExp;
+/** `https://` added when no scheme is given; trailing slashes dropped. Null for anything but http(s). */
+declare function normalizeServerUrl(input: string): string | null;
+/** Loopback, private (RFC 1918, link-local, ULA) or `.local` host names: http is allowed for them. */
+declare function isPrivateHost(hostname: string): boolean;
+/** What `server add` must check about a URL before using it. */
+interface CliServerUrlCheck {
+    url: string;
+    /** http to a private host: allowed after a confirmation. */
+    insecure: boolean;
+    /** An http server from an https page: the browser blocks the requests. */
+    mixedContent: boolean;
+}
+/**
+ * Normalises and checks a server URL: https anywhere, http only to private
+ * hosts. Returns the reason as a string when refused.
+ */
+declare function checkServerUrl(input: string, pageProtocol?: string): CliServerUrlCheck | string;
+/** Whether host options allow linking this URL (`userServers`). */
+declare function userServersAllow(options: CliOptions | undefined, url: string): boolean;
+/** Whether linking is switched on at all. */
+declare function userServersEnabled(options: CliOptions | undefined): boolean;
+/** A name from the URL's host: `api.example.com` → `api`, `localhost:8047` → `localhost-8047`. */
+declare function suggestServerName(url: string, taken: (name: string) => boolean): string;
+/** `qcli_pat_…abcd` → `••••abcd`. */
+declare function maskToken(token: string | undefined): string;
+/**
+ * The command as kept in the history: values of `--token` and `--password`
+ * replaced by `***`.
+ */
+declare function redactSecrets(command: string): string;
+/**
+ * The linked servers and their tokens: the list in the key-value store, each
+ * token in the secret store.
+ */
+declare class CliLinkedServers {
+    private readonly kv;
+    private readonly secrets;
+    constructor(kv: ICliKeyValueStore, secrets: ICliSecretStore);
+    list(): Promise<CliLinkedServer[]>;
+    get(name: string): Promise<CliLinkedServer | undefined>;
+    /** Saves a server (replacing one with the same name) and its token (none: deleted). */
+    save(server: CliLinkedServer, token: string | undefined): Promise<void>;
+    setToken(name: string, token: string): Promise<void>;
+    token(name: string): Promise<string | undefined>;
+    remove(name: string): Promise<boolean>;
+    /** Removes every linked server and every secret. */
+    clear(): Promise<void>;
+}
+/**
+ * The connection config of a linked server: the token (kept in memory once
+ * read) sent as a bearer header; sockets use the users plugin's tickets.
+ */
+declare function linkedServerConfig(server: CliLinkedServer, token: string | undefined): CliServerConfig;
+
+/**
+ * The default {@link ICliSecretStore}: each secret encrypted with AES-GCM (own
+ * random IV) by a 256-bit key that Web Crypto never exports, both kept in the
+ * key-value store (IndexedDB). Reading the database gives ciphertext only; the
+ * key cannot be read out, only used by this origin.
+ */
+declare class CliWebCryptoSecretStore implements ICliSecretStore {
+    private readonly kv;
+    /** Null: no Web Crypto (an insecure page). */
+    private readonly crypto;
+    private keyPromise;
+    constructor(kv: ICliKeyValueStore, 
+    /** Null: no Web Crypto (an insecure page). */
+    crypto?: Crypto | null);
+    isAvailable(): boolean;
+    get(key: string): Promise<string | undefined>;
+    set(key: string, value: string): Promise<void>;
+    delete(key: string): Promise<void>;
+    clear(): Promise<void>;
+    /** The saved key, or a new one (created once, even for parallel calls). */
+    private key;
+}
+
+type CliFetch = (input: string, init?: RequestInit) => Promise<Response>;
+/** What `server add` shows about a server before linking it. */
+interface CliServerProbe {
+    /** The server's version (capabilities), when it says. */
+    version?: string;
+    capabilities: CliServerCapabilities | null;
+    /** Whether the commands need a sign-in (401/403 without a token). */
+    needsSignIn: boolean;
+}
+/** A link request: the code to compare and the page where the user approves it. */
+interface CliLinkRequest {
+    linkId: string;
+    userCode: string;
+    /** Absolute (resolved against the server URL). */
+    verificationUrl: string;
+    expiresIn: number;
+    interval: number;
+}
+type CliLinkPoll = {
+    status: 'pending';
+} | {
+    status: 'denied';
+} | {
+    status: 'expired';
+} | {
+    status: 'approved';
+    token: string;
+    userName?: string;
+};
+/** Text from a server, safe to print: control characters (terminal escapes) dropped. */
+declare function plainText(value: unknown): string;
+/**
+ * Whether `url` is a Qodalis CLI server: `GET /api/qcli/versions` answers with
+ * its supported versions. Throws with the reason when not.
+ */
+declare function probeServer(fetchFn: CliFetch, url: string): Promise<CliServerProbe>;
+/** Starts a link request; null when the server has no link endpoint (older servers, no users plugin). */
+declare function requestLink(fetchFn: CliFetch, url: string, client: string): Promise<CliLinkRequest | null>;
+/** One poll of a link request. */
+declare function pollLink(fetchFn: CliFetch, url: string, linkId: string): Promise<CliLinkPoll>;
+/**
+ * Signs in with a password, creates an API token named `tokenName` with that
+ * session, then ends the session: only the token is kept.
+ */
+declare function createTokenWithPassword(fetchFn: CliFetch, url: string, username: string, password: string, tokenName: string): Promise<string>;
+/** "Qodalis CLI on <platform>" for link requests and token names (`[A-Za-z0-9._ -]` only). */
+declare function deviceName(appName?: string): string;
+
+/** The secret store: the host's ({@link ICliSecretStore_TOKEN}) or the Web Crypto one. */
+declare function secretStoreOf(context: Pick<ICliExecutionContext, 'services'>): ICliSecretStore;
+/** The linked servers of this terminal. */
+declare function linkedServersOf(context: Pick<ICliExecutionContext, 'services'>): CliLinkedServers;
+/**
+ * Connects the servers linked with `server add` (boot, after the host's
+ * servers). Host servers win a name clash; servers the host options no longer
+ * allow are skipped.
+ */
+declare function restoreLinkedServers(context: Pick<ICliExecutionContext, 'services' | 'options'>, manager: CliServerManager, warn: (message: string) => void): Promise<void>;
+
 /**
  * Result of executing a command through the test harness.
  */
@@ -3983,6 +4174,11 @@ declare class CliPanelController implements ICliPanelRef<CliEngine> {
     private readonly onSystemSchemeChange;
     /** A terminal in the panel changed theme: follow the first one. */
     private readonly onTerminalTheme;
+    /**
+     * A wheel over the panel chrome (header, icon strip, empty pane) would
+     * scroll the page behind it; the terminals already keep their own wheel.
+     */
+    private readonly onPanelWheel;
     /**
      * Phone browsers open the keyboard over the page and shrink only the visual
      * viewport; follow it so the panel stays above the keyboard.
@@ -4171,5 +4367,5 @@ interface PanelStatusDropdown {
 /** The open services or servers dropdown, or null when neither is open. */
 declare function openStatusDropdown(s: CliPanelSnapshot): PanelStatusDropdown | null;
 
-export { API_VERSION, CLI_ENV_GLOBAL_PERMISSION, CLI_FRAMEWORK_SERVICE, CLOSE_GLYPH, CLOSE_ICON, CapturingTerminalWriter, CliAliasCommandProcessor, CliArgsParser, CliBackgroundServiceRegistry_TOKEN, CliBoot, CliBootLog, CliBootLog_TOKEN, CliCalCommandProcessor, CliCaptureCommandProcessor, CliClearCommandProcessor, CliClipboard, CliClipboardCommandProcessor, CliColorCommandProcessor, CliCommandExecutionContext, CliCommandExecutor, CliCommandHistory, CliCommandHistory_TOKEN, CliCommandProcessorRegistry, CliConfigureCommandProcessor, CliConvertCommandProcessor, CliDebugCommandProcessor, CliDefaultPingServerService, CliDiffCommandProcessor, CliDragDropService, CliEchoCommandProcessor, CliEngine, CliEnvCommandProcessor, CliEnvironment, CliEvalCommandProcessor, CliEventsCommandProcessor, CliExecutionContext, CliExecutionProcess, CliExportCommandProcessor, CliFalseCommandProcessor, CliFeedbackCommandProcessor, CliFontSizeCommandProcessor, CliFullScreenManager, CliHelpCommandProcessor, CliHistoryCommandProcessor, CliHotKeysCommandProcessor, CliHtopCommandProcessor, CliHttpClient, CliInputReader, CliJsonCommandProcessor, CliKeyValueStore, CliKeyValueStore_TOKEN, CliKillCommandProcessor, CliLogger, CliLoremCommandProcessor, CliModuleRegistry_TOKEN, CliNanoCommandProcessor, CliNotifier, CliOpenCommandProcessor, CliPackageManagerService, CliPackageManagerService_TOKEN, CliPackagesCommandProcessor, CliPanelController, CliPanelStatusTracker, CliPermissionRegistry, CliPingCommandProcessor, CliProcessRegistry, CliProcessRegistry_TOKEN, CliProcessorsRegistry_TOKEN, CliPsCommandProcessor, CliRandomCommandProcessor, CliScreenCommandProcessor, CliScriptSyntaxError, CliSeqCommandProcessor, CliServerCommandProcessor, CliServerConnection, CliServerManager, CliServerManager_TOKEN, CliServerMultiProxyProcessor, CliServerProxyProcessor, CliServiceContainer, CliServicesCommandProcessor, CliSleepCommandProcessor, CliSnippetCommandProcessor, CliSshCommandProcessor, CliStateStore, CliStateStoreManager, CliStateStoreManager_TOKEN, CliTerminalProgressBar, CliTerminalSpinner, CliTerminalTextAnimator, CliTerminalWriter, CliTestCommandProcessor, CliTestHarness, CliThemeCommandProcessor, CliTimeCommandProcessor, CliTimerManager, CliTimestampCommandProcessor, CliTrueCommandProcessor, CliUnAliasCommandProcessor, CliUnameCommandProcessor, CliUnsetCommandProcessor, CliUptimeCommandProcessor, CliVersionCommandProcessor, CliYesCommandProcessor, CommandParser, DEFAULT_CLI_NAME, DEFAULT_GLOBAL_STATUS, DEFAULT_PANEL_HEIGHT, DEFAULT_PANEL_WIDTH, DEFAULT_TAB_STATUS, ERROR_ICON, EXEC_POLL_MS, GLOBAL_POLL_MS, HIDE_ICON, HIDE_TAB_TERMINAL_ICON, ICliEnvironment_TOKEN, ICliPingServerService_TOKEN, ICliScriptRunner_TOKEN, JsFallbackAccelerator, LIBRARY_VERSION, MAXIMIZE_ICON, MIN_PANEL_SIZE, MIN_PANE_WIDTH_PERCENT, OverlayAddon, PANEL_LABELS, PANEL_POSITIONS, ProcessExitedError, RESTORE_ICON, SERVICES_ICON, SUCCESS_ICON, SVG_COMMON_ATTRS, SVG_VIEW_BOX, ScriptLoaderService, SyntaxHighlighterRegistry_TOKEN, TERMINAL_ICON, UPTIME_ICON, appendOutputToFile, appendStderrToFile, applyEnvironmentChange, builtinProcessors, capitalize, clampPanelSize, cliScriptRunner, collapseChevronIcon, computeDiff, computeGlobalStatus, computeTabStatus, contextGlobalParameter, contextMenuItems, contextMenuStyle, createCliEngine, createServerModule, defaultFontSize, describeShellClose, distributePaneWidths, dropdownAnchorStyle, executeOnServer, expandBraces, expandEnvironmentVars, expandGlobs, formatDiff, formatUptime, getAccelerator, getCliNameArt, getGreetingBasedOnTime, getTerminalOptions, glowLineClass, greetingModule, groupBy, handleRenameKey, helpGlobalParameter, hideTabChevronIcon, hotkeysInfo, initWasmAccelerator, initializeServices, initializeTerminal, interruptCommand, isHorizontalPosition, isWasmAccelerated, joinClasses, killProcess, matchGlob, mergeCliOptions, miscProcessors, nextRowsCommand, normalizePaneWidths, openLink, openStatusDropdown, paneClass, paneStyle, panelBranding, panelTabClass, panelTabDotClass, panelWrapperClass, panelWrapperStyle, panesContainerClass, panesContainerWidth, parseAssignments, parseScript, positionDropdownItemClass, positionIcon, positionOptions, reconcileArgs, renderServerResponse, renderSingleOutput, resizePaneWidths, resizedPanelSize, resolveCliBranding, resolveCliHostConfig, runContextMenuAction, runScript, splitWords, statusIndicators, substituteCommands, substituteVars, svgAttrs, systemProcessors, tabDotClass, themeInfos, themes, tryExecuteScript, versionGlobalParameter, waitForLayout, welcomeModule, writeOutputToFile, writeStderrToFile };
-export type { AnchorRect, CdnSourceName, CliBootLogOptions, CliEngineOptions, CliEnvironmentChange, CliEnvironmentProfile, CliEnvironmentScope, CliEnvironmentSnapshot, CliEnvironmentSource, CliExecutionContextDeps, CliHiddenServerCommand, CliHostConfig, CliPanelCallbacks, CliPanelContextMenu, CliPanelControlledState, CliPanelControllerOptions, CliPanelExecutionState, CliPanelGlobalStatus, CliPanelPane, CliPanelServerDetail, CliPanelServerState, CliPanelServiceDetail, CliPanelSnapshot, CliPanelStatusTrackerListener, CliPanelTab, CliPanelTabStatus, CliPanelViewport, CliTestResult, CliWelcomeMessageConfig, CommandParserOutput, CommandPart, ConfigureState, CreateCliEngineConfig, DefaultServerProvider, DiffLine, DiffType, ICliEnvironment, ICliExecutionHost, ICliScriptRunOptions, ICliScriptRunner, ICliStateStoreManager, ICliWasmAccelerator, InitializeServicesOptions, InitializeServicesResult, MultiProxyEntry, PanelContextMenuAction, PanelContextMenuItem, PanelDropdownRow, PanelPositionOption, PanelStatusDropdown, PanelStatusIndicator, ParsedArg, ParsedToken, ResolvedCliBranding, SvgIcon, SvgShape, TerminalSetupResult, ThemeState };
+export { API_VERSION, CLI_ENV_GLOBAL_PERMISSION, CLI_FRAMEWORK_SERVICE, CLOSE_GLYPH, CLOSE_ICON, CapturingTerminalWriter, CliAliasCommandProcessor, CliArgsParser, CliBackgroundServiceRegistry_TOKEN, CliBoot, CliBootLog, CliBootLog_TOKEN, CliCalCommandProcessor, CliCaptureCommandProcessor, CliClearCommandProcessor, CliClipboard, CliClipboardCommandProcessor, CliColorCommandProcessor, CliCommandExecutionContext, CliCommandExecutor, CliCommandHistory, CliCommandHistory_TOKEN, CliCommandProcessorRegistry, CliConfigureCommandProcessor, CliConvertCommandProcessor, CliDebugCommandProcessor, CliDefaultPingServerService, CliDiffCommandProcessor, CliDragDropService, CliEchoCommandProcessor, CliEngine, CliEnvCommandProcessor, CliEnvironment, CliEvalCommandProcessor, CliEventsCommandProcessor, CliExecutionContext, CliExecutionProcess, CliExportCommandProcessor, CliFalseCommandProcessor, CliFeedbackCommandProcessor, CliFontSizeCommandProcessor, CliFullScreenManager, CliHelpCommandProcessor, CliHistoryCommandProcessor, CliHotKeysCommandProcessor, CliHtopCommandProcessor, CliHttpClient, CliInputReader, CliJsonCommandProcessor, CliKeyValueStore, CliKeyValueStore_TOKEN, CliKillCommandProcessor, CliLinkedServers, CliLogger, CliLoremCommandProcessor, CliModuleRegistry_TOKEN, CliNanoCommandProcessor, CliNotifier, CliOpenCommandProcessor, CliPackageManagerService, CliPackageManagerService_TOKEN, CliPackagesCommandProcessor, CliPanelController, CliPanelStatusTracker, CliPermissionRegistry, CliPingCommandProcessor, CliProcessRegistry, CliProcessRegistry_TOKEN, CliProcessorsRegistry_TOKEN, CliPsCommandProcessor, CliRandomCommandProcessor, CliScreenCommandProcessor, CliScriptSyntaxError, CliSeqCommandProcessor, CliServerCommandProcessor, CliServerConnection, CliServerManager, CliServerManager_TOKEN, CliServerMultiProxyProcessor, CliServerProxyProcessor, CliServiceContainer, CliServicesCommandProcessor, CliSleepCommandProcessor, CliSnippetCommandProcessor, CliSshCommandProcessor, CliStateStore, CliStateStoreManager, CliStateStoreManager_TOKEN, CliTerminalProgressBar, CliTerminalSpinner, CliTerminalTextAnimator, CliTerminalWriter, CliTestCommandProcessor, CliTestHarness, CliThemeCommandProcessor, CliTimeCommandProcessor, CliTimerManager, CliTimestampCommandProcessor, CliTrueCommandProcessor, CliUnAliasCommandProcessor, CliUnameCommandProcessor, CliUnsetCommandProcessor, CliUptimeCommandProcessor, CliVersionCommandProcessor, CliWebCryptoSecretStore, CliYesCommandProcessor, CommandParser, DEFAULT_CLI_NAME, DEFAULT_GLOBAL_STATUS, DEFAULT_PANEL_HEIGHT, DEFAULT_PANEL_WIDTH, DEFAULT_TAB_STATUS, ERROR_ICON, EXEC_POLL_MS, GLOBAL_POLL_MS, HIDE_ICON, HIDE_TAB_TERMINAL_ICON, ICliEnvironment_TOKEN, ICliPingServerService_TOKEN, ICliScriptRunner_TOKEN, JsFallbackAccelerator, LIBRARY_VERSION, MAXIMIZE_ICON, MIN_PANEL_SIZE, MIN_PANE_WIDTH_PERCENT, OverlayAddon, PANEL_LABELS, PANEL_POSITIONS, ProcessExitedError, RESTORE_ICON, SERVER_NAME_PATTERN, SERVICES_ICON, SUCCESS_ICON, SVG_COMMON_ATTRS, SVG_VIEW_BOX, ScriptLoaderService, SyntaxHighlighterRegistry_TOKEN, TERMINAL_ICON, UPTIME_ICON, appendOutputToFile, appendStderrToFile, applyEnvironmentChange, builtinProcessors, capitalize, checkServerUrl, clampPanelSize, cliScriptRunner, collapseChevronIcon, computeDiff, computeGlobalStatus, computeTabStatus, contextGlobalParameter, contextMenuItems, contextMenuStyle, createCliEngine, createServerModule, createTokenWithPassword, defaultFontSize, describeShellClose, deviceName, distributePaneWidths, dropdownAnchorStyle, executeOnServer, expandBraces, expandEnvironmentVars, expandGlobs, formatDiff, formatUptime, getAccelerator, getCliNameArt, getGreetingBasedOnTime, getTerminalOptions, glowLineClass, greetingModule, groupBy, handleRenameKey, helpGlobalParameter, hideTabChevronIcon, hotkeysInfo, initWasmAccelerator, initializeServices, initializeTerminal, interruptCommand, isHorizontalPosition, isPrivateHost, isWasmAccelerated, joinClasses, killProcess, linkedServerConfig, linkedServersOf, maskToken, matchGlob, mergeCliOptions, miscProcessors, nextRowsCommand, normalizePaneWidths, normalizeServerUrl, openLink, openStatusDropdown, paneClass, paneStyle, panelBranding, panelTabClass, panelTabDotClass, panelWrapperClass, panelWrapperStyle, panesContainerClass, panesContainerWidth, parseAssignments, parseScript, plainText, pollLink, positionDropdownItemClass, positionIcon, positionOptions, probeServer, reconcileArgs, redactSecrets, renderServerResponse, renderSingleOutput, requestLink, resizePaneWidths, resizedPanelSize, resolveCliBranding, resolveCliHostConfig, restoreLinkedServers, runContextMenuAction, runScript, secretStoreOf, splitWords, statusIndicators, substituteCommands, substituteVars, suggestServerName, svgAttrs, systemProcessors, tabDotClass, themeInfos, themes, tryExecuteScript, userServersAllow, userServersEnabled, versionGlobalParameter, waitForLayout, welcomeModule, writeOutputToFile, writeStderrToFile };
+export type { AnchorRect, CdnSourceName, CliBootLogOptions, CliEngineOptions, CliEnvironmentChange, CliEnvironmentProfile, CliEnvironmentScope, CliEnvironmentSnapshot, CliEnvironmentSource, CliExecutionContextDeps, CliFetch, CliHiddenServerCommand, CliHostConfig, CliLinkPoll, CliLinkRequest, CliLinkedServer, CliPanelCallbacks, CliPanelContextMenu, CliPanelControlledState, CliPanelControllerOptions, CliPanelExecutionState, CliPanelGlobalStatus, CliPanelPane, CliPanelServerDetail, CliPanelServerState, CliPanelServiceDetail, CliPanelSnapshot, CliPanelStatusTrackerListener, CliPanelTab, CliPanelTabStatus, CliPanelViewport, CliServerProbe, CliServerUrlCheck, CliTestResult, CliWelcomeMessageConfig, CommandParserOutput, CommandPart, ConfigureState, CreateCliEngineConfig, DefaultServerProvider, DiffLine, DiffType, ICliEnvironment, ICliExecutionHost, ICliScriptRunOptions, ICliScriptRunner, ICliStateStoreManager, ICliWasmAccelerator, InitializeServicesOptions, InitializeServicesResult, MultiProxyEntry, PanelContextMenuAction, PanelContextMenuItem, PanelDropdownRow, PanelPositionOption, PanelStatusDropdown, PanelStatusIndicator, ParsedArg, ParsedToken, ResolvedCliBranding, SvgIcon, SvgShape, TerminalSetupResult, ThemeState };

package/public-api.d.ts

@@ -1,4 +1,4 @@
-import { ICliCommandProcessor, ICliCommandParameterDescriptor as ICliCommandParameterDescriptor$1, ICliCommandProcessorRegistry, ICliCommandChildProcessor, CliProcessorMetadata, CliStateConfiguration, ICliExecutionContext, CliProcessCommand, ICliCommandAuthor, ICliCommandControls, CliThemeInfo, ICliExecutionProcess, ICliUserSession, ICliSpinner, ICliPercentageProgressBar, ICliTextAnimator, ICliTerminalWriter, ICliCommandExecutorService, ICliClipboard, ICliStateStore, CliOptions, ICliLogger, ICliServiceProvider, ICliTranslationService, ICliInputReader, ICliBackgroundServiceRegistry, ICliHttpClient, ICliNotifier, ICliManagedInterval, ICliManagedTimer, ICliEventBus, ICliKeyValueStore, CliStateStoreOptions, ICliCompletionProvider, ICliFilePickerProvider, CliFullScreenOptions, ICliProcessRegistry, ICliBackgroundService, ICliServiceContext, ICliBackgroundServiceInfo, ICliServiceLogEntry, CliServiceEventHandler, ICliGlobalParameterHandler, CliForegroundColor, CliBackgroundColor, CliToken, CliProvider, CliTableOptions, CliLogLevel, CliPercentageProgressBarUpdateValueOptions, CliTextAnimatorOptions, ICliModule, CliModuleRegistry, Package, ICliPingServerService, CliLineOptions, CliSelectOption, CliSelectOptions, CliMultiSelectOption, CliMultiSelectOptions, CliNumberOptions, CliDateOptions, CliFilePickerOptions, CliFileResult, ICliProcessRegisterOptions, ICliProcessEntry, ICliDragDropService, CliHttpRequestOptions, CliNotification, ICliPermissionRegistry, CliPermissionDefinition, CliBranding, CliState, CliEngineSnapshot, CliEvent, CliEventType, CliEventMap, CliEmitOptions, CustomEventType, CliEventHandler, CliServerConfig, ICliServerAuthService, CliServerCommandDescriptor, CliServerCapabilities, CliServerResponse, CliServerOutput, CliPanelPosition, CliPanelConfig, CliPanelHideAlignment, ICliPanelRef, CliPanelThemeInput, CliPanelState } from '@qodalis/cli-core';
+import { ICliCommandProcessor, ICliCommandParameterDescriptor as ICliCommandParameterDescriptor$1, ICliCommandProcessorRegistry, ICliCommandChildProcessor, CliProcessorMetadata, CliStateConfiguration, ICliExecutionContext, CliProcessCommand, ICliCommandAuthor, ICliCommandControls, CliThemeInfo, ICliExecutionProcess, ICliUserSession, ICliSpinner, ICliPercentageProgressBar, ICliTextAnimator, ICliTerminalWriter, ICliCommandExecutorService, ICliClipboard, ICliStateStore, CliOptions, ICliLogger, ICliServiceProvider, ICliTranslationService, ICliInputReader, ICliBackgroundServiceRegistry, ICliHttpClient, ICliNotifier, ICliManagedInterval, ICliManagedTimer, ICliEventBus, ICliKeyValueStore, CliStateStoreOptions, ICliCompletionProvider, ICliFilePickerProvider, CliFullScreenOptions, ICliProcessRegistry, ICliBackgroundService, ICliServiceContext, ICliBackgroundServiceInfo, ICliServiceLogEntry, CliServiceEventHandler, ICliGlobalParameterHandler, CliForegroundColor, CliBackgroundColor, CliToken, CliProvider, CliTableOptions, CliLogLevel, CliPercentageProgressBarUpdateValueOptions, CliTextAnimatorOptions, ICliModule, CliModuleRegistry, Package, ICliPingServerService, CliLineOptions, CliSelectOption, CliSelectOptions, CliMultiSelectOption, CliMultiSelectOptions, CliNumberOptions, CliDateOptions, CliFilePickerOptions, CliFileResult, ICliProcessRegisterOptions, ICliProcessEntry, ICliDragDropService, CliHttpRequestOptions, CliNotification, ICliPermissionRegistry, CliPermissionDefinition, CliBranding, CliState, CliEngineSnapshot, CliEvent, CliEventType, CliEventMap, CliEmitOptions, CustomEventType, CliEventHandler, CliServerConfig, ICliServerAuthService, CliServerCommandDescriptor, CliServerCapabilities, CliServerResponse, CliServerOutput, ICliSecretStore, CliPanelPosition, CliPanelConfig, CliPanelHideAlignment, ICliPanelRef, CliPanelThemeInput, CliPanelState } from '@qodalis/cli-core';
 export { ICliUserSessionService_TOKEN, ICliUsersStoreService_TOKEN } from '@qodalis/cli-core';
 import { ITheme, Terminal, ITerminalAddon, ITerminalOptions, ITerminalInitOnlyOptions } from '@xterm/xterm';
 import * as rxjs from 'rxjs';
@@ -165,7 +165,7 @@ declare const CliKeyValueStore_TOKEN: any;
  */
 declare const SyntaxHighlighterRegistry_TOKEN: any;
 
-declare const LIBRARY_VERSION = "2.4.2";
+declare const LIBRARY_VERSION = "2.5.1";
 declare const API_VERSION = 2;
 
 declare class CliAliasCommandProcessor implements ICliCommandProcessor {
@@ -2889,6 +2889,14 @@ interface CliEngineOptions extends CliOptions {
      * @default true
      */
     autoFocus?: boolean;
+    /**
+     * Scroll the scrollback with a finger on touch screens (xterm.js has no
+     * touch scrolling, so a drag would scroll the page instead). Paused while
+     * a full-screen command runs. Turn it off when the host scrolls the
+     * terminal itself.
+     * @default true
+     */
+    touchScroll?: boolean;
 }
 declare class CliEngine {
     private readonly container;
@@ -2903,6 +2911,7 @@ declare class CliEngine {
     private resizeObserver?;
     private resizeListener?;
     private wheelListener?;
+    private disposeTouchScroll?;
     private resizeVersion;
     private resizeScheduled;
     private bootService?;
@@ -2953,7 +2962,10 @@ declare class CliEngine {
     private beginBootReport;
     /** 4. Environment variables, background services, server auth and manager. */
     private registerRuntimeServices;
-    /** 4. Connect to the configured servers, one boot step each. */
+    /**
+     * 4. Connect to the configured servers, one boot step each, then to the
+     * servers the user linked (`server add`).
+     */
     private connectServers;
     /**
      * 5. Built-in welcome and server modules, the app's modules, and the
@@ -3275,6 +3287,7 @@ declare class CliServerProxyProcessor implements ICliCommandProcessor {
     parameters?: ICliCommandParameterDescriptor$1[];
     processors?: ICliCommandProcessor[];
     acceptsRawInput?: boolean;
+    writeDescription?: (context: ICliExecutionContext) => void;
     /** Full command path from root to this processor (e.g. ["aws", "lambda", "list"]) */
     private readonly commandPath;
     constructor(connection: CliServerConnection, descriptor: CliServerCommandDescriptor, serverName: string, isNested?: boolean, parentPath?: string[]);
@@ -3299,7 +3312,9 @@ declare class CliServerMultiProxyProcessor implements ICliCommandProcessor {
     private readonly entries;
     private readonly provider;
     command: string;
+    aliases?: string[];
     description?: string;
+    writeDescription?: (context: ICliExecutionContext) => void;
     metadata?: CliProcessorMetadata;
     parameters?: ICliCommandParameterDescriptor$1[];
     processors?: ICliCommandProcessor[];
@@ -3332,16 +3347,42 @@ declare class CliServerManager implements DefaultServerProvider {
     private readonly _bareAliases;
     private _backgroundServices?;
     private _hidden;
+    /** Servers the user linked (`server add`), as opposed to the host's */
+    private readonly _linked;
     /** `server:command` pairs already warned about, so each warns once */
     private readonly _warnedHidden;
     constructor(registry: ICliCommandProcessorRegistry, authService?: ICliServerAuthService, events?: ICliEventBus);
+    /** Whether the user linked this server (`server add`): only those can be removed or edited. */
+    isLinked(name: string): boolean;
     get defaultServer(): string | null;
     preferredServer(): string | null;
     setDefaultServer(name: string | null): void;
+    /** Where connections report and run (set once at boot, before any server connects). */
+    configure(logger?: {
+        warn(msg: string): void;
+        info(msg: string): void;
+    }, backgroundServices?: ICliBackgroundServiceRegistry, cliLogger?: ICliLogger): void;
     connectAll(servers: CliServerConfig[], logger?: {
         warn(msg: string): void;
         info(msg: string): void;
     }, backgroundServices?: ICliBackgroundServiceRegistry, cliLogger?: ICliLogger): Promise<void>;
+    /**
+     * Connects one server and registers its commands (without the bare
+     * aliases: callers refresh them once every server is connected).
+     */
+    private connectServer;
+    /**
+     * Connects a server added while the terminal runs (`server add`): its
+     * commands are available at once. Throws when the name is taken.
+     */
+    addServer(config: CliServerConfig, options?: {
+        linked?: boolean;
+    }): Promise<CliServerConnection>;
+    /**
+     * Disconnects a server and forgets it (`server remove`): its commands go
+     * away. False when there is no such server.
+     */
+    removeServer(name: string): boolean;
     reconnect(name: string): Promise<{
         success: boolean;
         commandCount: number;
@@ -3358,6 +3399,11 @@ declare class CliServerManager implements DefaultServerProvider {
     private unregisterBareAliases;
     private registerProxyProcessors;
     private registerBareAliases;
+    /**
+     * The server's aliases of a command that no registered command answers
+     * to yet: a local command (or an earlier server alias) keeps its name.
+     */
+    private freeAliases;
     private recordHidden;
 }
 
@@ -3419,6 +3465,151 @@ declare function describeShellClose(event: {
     reason?: string;
 }, serverName: string): string | null;
 
+/** A server linked with `server add` (its token is kept apart, in the secret store). */
+interface CliLinkedServer {
+    name: string;
+    url: string;
+    /** Epoch milliseconds. */
+    addedAt: number;
+}
+/** Server names: a letter or digit, then letters, digits, `-` and `_` (at most 32). */
+declare const SERVER_NAME_PATTERN: RegExp;
+/** `https://` added when no scheme is given; trailing slashes dropped. Null for anything but http(s). */
+declare function normalizeServerUrl(input: string): string | null;
+/** Loopback, private (RFC 1918, link-local, ULA) or `.local` host names: http is allowed for them. */
+declare function isPrivateHost(hostname: string): boolean;
+/** What `server add` must check about a URL before using it. */
+interface CliServerUrlCheck {
+    url: string;
+    /** http to a private host: allowed after a confirmation. */
+    insecure: boolean;
+    /** An http server from an https page: the browser blocks the requests. */
+    mixedContent: boolean;
+}
+/**
+ * Normalises and checks a server URL: https anywhere, http only to private
+ * hosts. Returns the reason as a string when refused.
+ */
+declare function checkServerUrl(input: string, pageProtocol?: string): CliServerUrlCheck | string;
+/** Whether host options allow linking this URL (`userServers`). */
+declare function userServersAllow(options: CliOptions | undefined, url: string): boolean;
+/** Whether linking is switched on at all. */
+declare function userServersEnabled(options: CliOptions | undefined): boolean;
+/** A name from the URL's host: `api.example.com` → `api`, `localhost:8047` → `localhost-8047`. */
+declare function suggestServerName(url: string, taken: (name: string) => boolean): string;
+/** `qcli_pat_…abcd` → `••••abcd`. */
+declare function maskToken(token: string | undefined): string;
+/**
+ * The command as kept in the history: values of `--token` and `--password`
+ * replaced by `***`.
+ */
+declare function redactSecrets(command: string): string;
+/**
+ * The linked servers and their tokens: the list in the key-value store, each
+ * token in the secret store.
+ */
+declare class CliLinkedServers {
+    private readonly kv;
+    private readonly secrets;
+    constructor(kv: ICliKeyValueStore, secrets: ICliSecretStore);
+    list(): Promise<CliLinkedServer[]>;
+    get(name: string): Promise<CliLinkedServer | undefined>;
+    /** Saves a server (replacing one with the same name) and its token (none: deleted). */
+    save(server: CliLinkedServer, token: string | undefined): Promise<void>;
+    setToken(name: string, token: string): Promise<void>;
+    token(name: string): Promise<string | undefined>;
+    remove(name: string): Promise<boolean>;
+    /** Removes every linked server and every secret. */
+    clear(): Promise<void>;
+}
+/**
+ * The connection config of a linked server: the token (kept in memory once
+ * read) sent as a bearer header; sockets use the users plugin's tickets.
+ */
+declare function linkedServerConfig(server: CliLinkedServer, token: string | undefined): CliServerConfig;
+
+/**
+ * The default {@link ICliSecretStore}: each secret encrypted with AES-GCM (own
+ * random IV) by a 256-bit key that Web Crypto never exports, both kept in the
+ * key-value store (IndexedDB). Reading the database gives ciphertext only; the
+ * key cannot be read out, only used by this origin.
+ */
+declare class CliWebCryptoSecretStore implements ICliSecretStore {
+    private readonly kv;
+    /** Null: no Web Crypto (an insecure page). */
+    private readonly crypto;
+    private keyPromise;
+    constructor(kv: ICliKeyValueStore, 
+    /** Null: no Web Crypto (an insecure page). */
+    crypto?: Crypto | null);
+    isAvailable(): boolean;
+    get(key: string): Promise<string | undefined>;
+    set(key: string, value: string): Promise<void>;
+    delete(key: string): Promise<void>;
+    clear(): Promise<void>;
+    /** The saved key, or a new one (created once, even for parallel calls). */
+    private key;
+}
+
+type CliFetch = (input: string, init?: RequestInit) => Promise<Response>;
+/** What `server add` shows about a server before linking it. */
+interface CliServerProbe {
+    /** The server's version (capabilities), when it says. */
+    version?: string;
+    capabilities: CliServerCapabilities | null;
+    /** Whether the commands need a sign-in (401/403 without a token). */
+    needsSignIn: boolean;
+}
+/** A link request: the code to compare and the page where the user approves it. */
+interface CliLinkRequest {
+    linkId: string;
+    userCode: string;
+    /** Absolute (resolved against the server URL). */
+    verificationUrl: string;
+    expiresIn: number;
+    interval: number;
+}
+type CliLinkPoll = {
+    status: 'pending';
+} | {
+    status: 'denied';
+} | {
+    status: 'expired';
+} | {
+    status: 'approved';
+    token: string;
+    userName?: string;
+};
+/** Text from a server, safe to print: control characters (terminal escapes) dropped. */
+declare function plainText(value: unknown): string;
+/**
+ * Whether `url` is a Qodalis CLI server: `GET /api/qcli/versions` answers with
+ * its supported versions. Throws with the reason when not.
+ */
+declare function probeServer(fetchFn: CliFetch, url: string): Promise<CliServerProbe>;
+/** Starts a link request; null when the server has no link endpoint (older servers, no users plugin). */
+declare function requestLink(fetchFn: CliFetch, url: string, client: string): Promise<CliLinkRequest | null>;
+/** One poll of a link request. */
+declare function pollLink(fetchFn: CliFetch, url: string, linkId: string): Promise<CliLinkPoll>;
+/**
+ * Signs in with a password, creates an API token named `tokenName` with that
+ * session, then ends the session: only the token is kept.
+ */
+declare function createTokenWithPassword(fetchFn: CliFetch, url: string, username: string, password: string, tokenName: string): Promise<string>;
+/** "Qodalis CLI on <platform>" for link requests and token names (`[A-Za-z0-9._ -]` only). */
+declare function deviceName(appName?: string): string;
+
+/** The secret store: the host's ({@link ICliSecretStore_TOKEN}) or the Web Crypto one. */
+declare function secretStoreOf(context: Pick<ICliExecutionContext, 'services'>): ICliSecretStore;
+/** The linked servers of this terminal. */
+declare function linkedServersOf(context: Pick<ICliExecutionContext, 'services'>): CliLinkedServers;
+/**
+ * Connects the servers linked with `server add` (boot, after the host's
+ * servers). Host servers win a name clash; servers the host options no longer
+ * allow are skipped.
+ */
+declare function restoreLinkedServers(context: Pick<ICliExecutionContext, 'services' | 'options'>, manager: CliServerManager, warn: (message: string) => void): Promise<void>;
+
 /**
  * Result of executing a command through the test harness.
  */
@@ -3983,6 +4174,11 @@ declare class CliPanelController implements ICliPanelRef<CliEngine> {
     private readonly onSystemSchemeChange;
     /** A terminal in the panel changed theme: follow the first one. */
     private readonly onTerminalTheme;
+    /**
+     * A wheel over the panel chrome (header, icon strip, empty pane) would
+     * scroll the page behind it; the terminals already keep their own wheel.
+     */
+    private readonly onPanelWheel;
     /**
      * Phone browsers open the keyboard over the page and shrink only the visual
      * viewport; follow it so the panel stays above the keyboard.
@@ -4171,5 +4367,5 @@ interface PanelStatusDropdown {
 /** The open services or servers dropdown, or null when neither is open. */
 declare function openStatusDropdown(s: CliPanelSnapshot): PanelStatusDropdown | null;
 
-export { API_VERSION, CLI_ENV_GLOBAL_PERMISSION, CLI_FRAMEWORK_SERVICE, CLOSE_GLYPH, CLOSE_ICON, CapturingTerminalWriter, CliAliasCommandProcessor, CliArgsParser, CliBackgroundServiceRegistry_TOKEN, CliBoot, CliBootLog, CliBootLog_TOKEN, CliCalCommandProcessor, CliCaptureCommandProcessor, CliClearCommandProcessor, CliClipboard, CliClipboardCommandProcessor, CliColorCommandProcessor, CliCommandExecutionContext, CliCommandExecutor, CliCommandHistory, CliCommandHistory_TOKEN, CliCommandProcessorRegistry, CliConfigureCommandProcessor, CliConvertCommandProcessor, CliDebugCommandProcessor, CliDefaultPingServerService, CliDiffCommandProcessor, CliDragDropService, CliEchoCommandProcessor, CliEngine, CliEnvCommandProcessor, CliEnvironment, CliEvalCommandProcessor, CliEventsCommandProcessor, CliExecutionContext, CliExecutionProcess, CliExportCommandProcessor, CliFalseCommandProcessor, CliFeedbackCommandProcessor, CliFontSizeCommandProcessor, CliFullScreenManager, CliHelpCommandProcessor, CliHistoryCommandProcessor, CliHotKeysCommandProcessor, CliHtopCommandProcessor, CliHttpClient, CliInputReader, CliJsonCommandProcessor, CliKeyValueStore, CliKeyValueStore_TOKEN, CliKillCommandProcessor, CliLogger, CliLoremCommandProcessor, CliModuleRegistry_TOKEN, CliNanoCommandProcessor, CliNotifier, CliOpenCommandProcessor, CliPackageManagerService, CliPackageManagerService_TOKEN, CliPackagesCommandProcessor, CliPanelController, CliPanelStatusTracker, CliPermissionRegistry, CliPingCommandProcessor, CliProcessRegistry, CliProcessRegistry_TOKEN, CliProcessorsRegistry_TOKEN, CliPsCommandProcessor, CliRandomCommandProcessor, CliScreenCommandProcessor, CliScriptSyntaxError, CliSeqCommandProcessor, CliServerCommandProcessor, CliServerConnection, CliServerManager, CliServerManager_TOKEN, CliServerMultiProxyProcessor, CliServerProxyProcessor, CliServiceContainer, CliServicesCommandProcessor, CliSleepCommandProcessor, CliSnippetCommandProcessor, CliSshCommandProcessor, CliStateStore, CliStateStoreManager, CliStateStoreManager_TOKEN, CliTerminalProgressBar, CliTerminalSpinner, CliTerminalTextAnimator, CliTerminalWriter, CliTestCommandProcessor, CliTestHarness, CliThemeCommandProcessor, CliTimeCommandProcessor, CliTimerManager, CliTimestampCommandProcessor, CliTrueCommandProcessor, CliUnAliasCommandProcessor, CliUnameCommandProcessor, CliUnsetCommandProcessor, CliUptimeCommandProcessor, CliVersionCommandProcessor, CliYesCommandProcessor, CommandParser, DEFAULT_CLI_NAME, DEFAULT_GLOBAL_STATUS, DEFAULT_PANEL_HEIGHT, DEFAULT_PANEL_WIDTH, DEFAULT_TAB_STATUS, ERROR_ICON, EXEC_POLL_MS, GLOBAL_POLL_MS, HIDE_ICON, HIDE_TAB_TERMINAL_ICON, ICliEnvironment_TOKEN, ICliPingServerService_TOKEN, ICliScriptRunner_TOKEN, JsFallbackAccelerator, LIBRARY_VERSION, MAXIMIZE_ICON, MIN_PANEL_SIZE, MIN_PANE_WIDTH_PERCENT, OverlayAddon, PANEL_LABELS, PANEL_POSITIONS, ProcessExitedError, RESTORE_ICON, SERVICES_ICON, SUCCESS_ICON, SVG_COMMON_ATTRS, SVG_VIEW_BOX, ScriptLoaderService, SyntaxHighlighterRegistry_TOKEN, TERMINAL_ICON, UPTIME_ICON, appendOutputToFile, appendStderrToFile, applyEnvironmentChange, builtinProcessors, capitalize, clampPanelSize, cliScriptRunner, collapseChevronIcon, computeDiff, computeGlobalStatus, computeTabStatus, contextGlobalParameter, contextMenuItems, contextMenuStyle, createCliEngine, createServerModule, defaultFontSize, describeShellClose, distributePaneWidths, dropdownAnchorStyle, executeOnServer, expandBraces, expandEnvironmentVars, expandGlobs, formatDiff, formatUptime, getAccelerator, getCliNameArt, getGreetingBasedOnTime, getTerminalOptions, glowLineClass, greetingModule, groupBy, handleRenameKey, helpGlobalParameter, hideTabChevronIcon, hotkeysInfo, initWasmAccelerator, initializeServices, initializeTerminal, interruptCommand, isHorizontalPosition, isWasmAccelerated, joinClasses, killProcess, matchGlob, mergeCliOptions, miscProcessors, nextRowsCommand, normalizePaneWidths, openLink, openStatusDropdown, paneClass, paneStyle, panelBranding, panelTabClass, panelTabDotClass, panelWrapperClass, panelWrapperStyle, panesContainerClass, panesContainerWidth, parseAssignments, parseScript, positionDropdownItemClass, positionIcon, positionOptions, reconcileArgs, renderServerResponse, renderSingleOutput, resizePaneWidths, resizedPanelSize, resolveCliBranding, resolveCliHostConfig, runContextMenuAction, runScript, splitWords, statusIndicators, substituteCommands, substituteVars, svgAttrs, systemProcessors, tabDotClass, themeInfos, themes, tryExecuteScript, versionGlobalParameter, waitForLayout, welcomeModule, writeOutputToFile, writeStderrToFile };
-export type { AnchorRect, CdnSourceName, CliBootLogOptions, CliEngineOptions, CliEnvironmentChange, CliEnvironmentProfile, CliEnvironmentScope, CliEnvironmentSnapshot, CliEnvironmentSource, CliExecutionContextDeps, CliHiddenServerCommand, CliHostConfig, CliPanelCallbacks, CliPanelContextMenu, CliPanelControlledState, CliPanelControllerOptions, CliPanelExecutionState, CliPanelGlobalStatus, CliPanelPane, CliPanelServerDetail, CliPanelServerState, CliPanelServiceDetail, CliPanelSnapshot, CliPanelStatusTrackerListener, CliPanelTab, CliPanelTabStatus, CliPanelViewport, CliTestResult, CliWelcomeMessageConfig, CommandParserOutput, CommandPart, ConfigureState, CreateCliEngineConfig, DefaultServerProvider, DiffLine, DiffType, ICliEnvironment, ICliExecutionHost, ICliScriptRunOptions, ICliScriptRunner, ICliStateStoreManager, ICliWasmAccelerator, InitializeServicesOptions, InitializeServicesResult, MultiProxyEntry, PanelContextMenuAction, PanelContextMenuItem, PanelDropdownRow, PanelPositionOption, PanelStatusDropdown, PanelStatusIndicator, ParsedArg, ParsedToken, ResolvedCliBranding, SvgIcon, SvgShape, TerminalSetupResult, ThemeState };
+export { API_VERSION, CLI_ENV_GLOBAL_PERMISSION, CLI_FRAMEWORK_SERVICE, CLOSE_GLYPH, CLOSE_ICON, CapturingTerminalWriter, CliAliasCommandProcessor, CliArgsParser, CliBackgroundServiceRegistry_TOKEN, CliBoot, CliBootLog, CliBootLog_TOKEN, CliCalCommandProcessor, CliCaptureCommandProcessor, CliClearCommandProcessor, CliClipboard, CliClipboardCommandProcessor, CliColorCommandProcessor, CliCommandExecutionContext, CliCommandExecutor, CliCommandHistory, CliCommandHistory_TOKEN, CliCommandProcessorRegistry, CliConfigureCommandProcessor, CliConvertCommandProcessor, CliDebugCommandProcessor, CliDefaultPingServerService, CliDiffCommandProcessor, CliDragDropService, CliEchoCommandProcessor, CliEngine, CliEnvCommandProcessor, CliEnvironment, CliEvalCommandProcessor, CliEventsCommandProcessor, CliExecutionContext, CliExecutionProcess, CliExportCommandProcessor, CliFalseCommandProcessor, CliFeedbackCommandProcessor, CliFontSizeCommandProcessor, CliFullScreenManager, CliHelpCommandProcessor, CliHistoryCommandProcessor, CliHotKeysCommandProcessor, CliHtopCommandProcessor, CliHttpClient, CliInputReader, CliJsonCommandProcessor, CliKeyValueStore, CliKeyValueStore_TOKEN, CliKillCommandProcessor, CliLinkedServers, CliLogger, CliLoremCommandProcessor, CliModuleRegistry_TOKEN, CliNanoCommandProcessor, CliNotifier, CliOpenCommandProcessor, CliPackageManagerService, CliPackageManagerService_TOKEN, CliPackagesCommandProcessor, CliPanelController, CliPanelStatusTracker, CliPermissionRegistry, CliPingCommandProcessor, CliProcessRegistry, CliProcessRegistry_TOKEN, CliProcessorsRegistry_TOKEN, CliPsCommandProcessor, CliRandomCommandProcessor, CliScreenCommandProcessor, CliScriptSyntaxError, CliSeqCommandProcessor, CliServerCommandProcessor, CliServerConnection, CliServerManager, CliServerManager_TOKEN, CliServerMultiProxyProcessor, CliServerProxyProcessor, CliServiceContainer, CliServicesCommandProcessor, CliSleepCommandProcessor, CliSnippetCommandProcessor, CliSshCommandProcessor, CliStateStore, CliStateStoreManager, CliStateStoreManager_TOKEN, CliTerminalProgressBar, CliTerminalSpinner, CliTerminalTextAnimator, CliTerminalWriter, CliTestCommandProcessor, CliTestHarness, CliThemeCommandProcessor, CliTimeCommandProcessor, CliTimerManager, CliTimestampCommandProcessor, CliTrueCommandProcessor, CliUnAliasCommandProcessor, CliUnameCommandProcessor, CliUnsetCommandProcessor, CliUptimeCommandProcessor, CliVersionCommandProcessor, CliWebCryptoSecretStore, CliYesCommandProcessor, CommandParser, DEFAULT_CLI_NAME, DEFAULT_GLOBAL_STATUS, DEFAULT_PANEL_HEIGHT, DEFAULT_PANEL_WIDTH, DEFAULT_TAB_STATUS, ERROR_ICON, EXEC_POLL_MS, GLOBAL_POLL_MS, HIDE_ICON, HIDE_TAB_TERMINAL_ICON, ICliEnvironment_TOKEN, ICliPingServerService_TOKEN, ICliScriptRunner_TOKEN, JsFallbackAccelerator, LIBRARY_VERSION, MAXIMIZE_ICON, MIN_PANEL_SIZE, MIN_PANE_WIDTH_PERCENT, OverlayAddon, PANEL_LABELS, PANEL_POSITIONS, ProcessExitedError, RESTORE_ICON, SERVER_NAME_PATTERN, SERVICES_ICON, SUCCESS_ICON, SVG_COMMON_ATTRS, SVG_VIEW_BOX, ScriptLoaderService, SyntaxHighlighterRegistry_TOKEN, TERMINAL_ICON, UPTIME_ICON, appendOutputToFile, appendStderrToFile, applyEnvironmentChange, builtinProcessors, capitalize, checkServerUrl, clampPanelSize, cliScriptRunner, collapseChevronIcon, computeDiff, computeGlobalStatus, computeTabStatus, contextGlobalParameter, contextMenuItems, contextMenuStyle, createCliEngine, createServerModule, createTokenWithPassword, defaultFontSize, describeShellClose, deviceName, distributePaneWidths, dropdownAnchorStyle, executeOnServer, expandBraces, expandEnvironmentVars, expandGlobs, formatDiff, formatUptime, getAccelerator, getCliNameArt, getGreetingBasedOnTime, getTerminalOptions, glowLineClass, greetingModule, groupBy, handleRenameKey, helpGlobalParameter, hideTabChevronIcon, hotkeysInfo, initWasmAccelerator, initializeServices, initializeTerminal, interruptCommand, isHorizontalPosition, isPrivateHost, isWasmAccelerated, joinClasses, killProcess, linkedServerConfig, linkedServersOf, maskToken, matchGlob, mergeCliOptions, miscProcessors, nextRowsCommand, normalizePaneWidths, normalizeServerUrl, openLink, openStatusDropdown, paneClass, paneStyle, panelBranding, panelTabClass, panelTabDotClass, panelWrapperClass, panelWrapperStyle, panesContainerClass, panesContainerWidth, parseAssignments, parseScript, plainText, pollLink, positionDropdownItemClass, positionIcon, positionOptions, probeServer, reconcileArgs, redactSecrets, renderServerResponse, renderSingleOutput, requestLink, resizePaneWidths, resizedPanelSize, resolveCliBranding, resolveCliHostConfig, restoreLinkedServers, runContextMenuAction, runScript, secretStoreOf, splitWords, statusIndicators, substituteCommands, substituteVars, suggestServerName, svgAttrs, systemProcessors, tabDotClass, themeInfos, themes, tryExecuteScript, userServersAllow, userServersEnabled, versionGlobalParameter, waitForLayout, welcomeModule, writeOutputToFile, writeStderrToFile };
+export type { AnchorRect, CdnSourceName, CliBootLogOptions, CliEngineOptions, CliEnvironmentChange, CliEnvironmentProfile, CliEnvironmentScope, CliEnvironmentSnapshot, CliEnvironmentSource, CliExecutionContextDeps, CliFetch, CliHiddenServerCommand, CliHostConfig, CliLinkPoll, CliLinkRequest, CliLinkedServer, CliPanelCallbacks, CliPanelContextMenu, CliPanelControlledState, CliPanelControllerOptions, CliPanelExecutionState, CliPanelGlobalStatus, CliPanelPane, CliPanelServerDetail, CliPanelServerState, CliPanelServiceDetail, CliPanelSnapshot, CliPanelStatusTrackerListener, CliPanelTab, CliPanelTabStatus, CliPanelViewport, CliServerProbe, CliServerUrlCheck, CliTestResult, CliWelcomeMessageConfig, CommandParserOutput, CommandPart, ConfigureState, CreateCliEngineConfig, DefaultServerProvider, DiffLine, DiffType, ICliEnvironment, ICliExecutionHost, ICliScriptRunOptions, ICliScriptRunner, ICliStateStoreManager, ICliWasmAccelerator, InitializeServicesOptions, InitializeServicesResult, MultiProxyEntry, PanelContextMenuAction, PanelContextMenuItem, PanelDropdownRow, PanelPositionOption, PanelStatusDropdown, PanelStatusIndicator, ParsedArg, ParsedToken, ResolvedCliBranding, SvgIcon, SvgShape, TerminalSetupResult, ThemeState };