agy-powerline 1.6.0 → 1.8.0

package/CHANGELOG.md

@@ -5,6 +5,33 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [1.8.0] - 2026-10-25
+
+### Added
+
+- Each GitHub release has its signed SLSA provenance attached as `agy-powerline-<version>.intoto.jsonl`, next to the `.sigstore.json` attestations
+- GOVERNANCE.md (roles, how decisions are made, continuity), ROADMAP.md (plans to October 2027) and SECURITY-REVIEW.md (the first security review and its findings); SECURITY.md says how vulnerability reports are handled and credited and gives the project's assurance case
+
+### Changed
+
+- The README screenshots and agy-powerline.com's images are smaller files, and the home page fetches its hero artwork first
+
+### Fixed
+
+- agy-powerline.com's sitemap lists the screenshots at the addresses the site serves them from
+
+## [1.7.0] - 2026-10-24
+
+### Added
+
+- `"language"` setting for the bar's own words (labels, `rem`, units), set with `init --language` or tried with `render --language`; a code without messages shows English (#102)
+- The bar in French with `"language": "fr"`, and agy-powerline.com/fr/ shows its bars in French (#148)
+- agy-powerline.com/.well-known/security.txt sends security reports to GitHub's private vulnerability reporting
+
+### Changed
+
+- agy-powerline.com loads smaller images: each screenshot comes in smaller copies the browser picks from by the width it shows, the feature icons have a 56 px version, and the WebP images carry no color profile
+
 ## [1.6.0] - 2026-10-24
 
 ### Added

package/README.fr.md

@@ -135,6 +135,16 @@ Prévisualisez tous les thèmes avec `npx agy-powerline theme --gallery`.
 
 </details>
 
+### Langue de la barre
+
+Les mots de la barre elle-même (`Réinit`, `rest.`, les unités de `2h 47m`) peuvent s’afficher en français :
+
+```sh
+npx agy-powerline init --language fr
+```
+
+ou `"language": "fr"` dans `statusline.config.json` (touche `u` dans `configure`). Le nom du modèle, la branche et tout ce qu’envoie agy restent tels quels ; les commandes et `configure` restent en anglais. Détails dans la [documentation de configuration](docs/configuration.md#language).
+
 ## Widgets
 
 | Widget                                                        | Informations affichées                                                                                               |

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agy-powerline",
-  "version": "1.6.0",
+  "version": "1.8.0",
   "description": "agy statusline for Google Antigravity CLI: live Gemini, Claude/GPT and Argon quota pacing, git, themes and an interactive TUI configurator",
   "bin": {
     "agy-powerline": "src/index.js"

package/src/cli/bundle.js

@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: MIT
+// Copyright (c) 2026 agy-powerline contributors
+
 "use strict";
 
 // Builds the installed statusline.js: the runtime script and the library

package/src/cli/caps.js

@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: MIT
+// Copyright (c) 2026 agy-powerline contributors
+
 "use strict";
 
 const {

package/src/cli/config-guard.js

@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: MIT
+// Copyright (c) 2026 agy-powerline contributors
+
 "use strict";
 
 const { readConfigFile, getConfigPath } = require("../lib/shared");

package/src/cli/configure.js

@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: MIT
+// Copyright (c) 2026 agy-powerline contributors
+
 "use strict";
 
 const readline = require("readline");
@@ -24,6 +27,7 @@ const {
 } = require("../lib/shared");
 const { resolveInstallDir } = require("../lib/paths");
 const { WIDGET_TAGS } = require("../lib/widget-style");
+const { SUPPORTED_LANGUAGES, resolveLanguage } = require("../lib/i18n");
 const { editFields: getEditFields, stepNumberField } = require("../lib/widget-options");
 const { loadEditableConfig } = require("./config-guard");
 const {
@@ -427,6 +431,10 @@ function previewParts(width) {
   if (preview.layout === "pills") {
     chips.unshift(ui.chip("joins", preview.powerline.enabled, key("j")));
   }
+  // Only worth a chip once there is a language to switch to.
+  if (SUPPORTED_LANGUAGES.length > 1) {
+    chips.push(ui.chip(`lang ${resolveLanguage(preview.language)}`, true, key("u")));
+  }
 
   return { title, bar: String(rendered).split("\n"), chips: chips.join("   ") };
 }
@@ -1629,6 +1637,15 @@ function onMain(key) {
     if (persist()) {
       flashMessage = `Pace marker: ${config.pacing ? "on" : "off"}`;
     }
+    return;
+  }
+
+  if (key.name === "u" && SUPPORTED_LANGUAGES.length > 1) {
+    const next = SUPPORTED_LANGUAGES.indexOf(resolveLanguage(config.language)) + 1;
+    config.language = SUPPORTED_LANGUAGES[next % SUPPORTED_LANGUAGES.length];
+    if (persist()) {
+      flashMessage = `Bar language: ${config.language}`;
+    }
   }
 }
 

package/src/cli/doctor.js

@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: MIT
+// Copyright (c) 2026 agy-powerline contributors
+
 "use strict";
 
 const fs = require("fs");
@@ -28,6 +31,7 @@ const { runStatuslineCommand } = require("../lib/run");
 const { detectColorDepth } = require("../lib/colors");
 const { readLog, getLogPath } = require("../lib/log");
 const { USAGE_PERIODS, usageAvailable } = require("../lib/usage");
+const { matchLanguage, SUPPORTED_LANGUAGES } = require("../lib/i18n");
 const { version } = require("../../package.json");
 
 const DIM = "\x1b[2m";
@@ -78,7 +82,7 @@ function stripAnsi(text) {
 function renderOverridesInCommand(command) {
   const names = [];
   const pattern =
-    /(?:^|\s)--(preset|layout|theme|caps|gradient)(?:(?:\s*=\s*|\s+)(?:"([^"]*)"|'([^']*)'|([^\s-][^\s]*)))?/g;
+    /(?:^|\s)--(preset|layout|theme|caps|gradient|language)(?:(?:\s*=\s*|\s+)(?:"([^"]*)"|'([^']*)'|([^\s-][^\s]*)))?/g;
 
   for (const match of String(command).matchAll(pattern)) {
     const value = match[2] ?? match[3] ?? match[4] ?? "(missing)";
@@ -193,6 +197,17 @@ async function doctorCommand(options = {}) {
     console.log("  tokensToday and tokensWeek stay hidden until Node is updated.");
   }
 
+  // Not a failure either: the bar shows English.
+  const language = configState.raw?.language;
+  if (language !== undefined && !matchLanguage(language)) {
+    const shown = String(language)
+      .replace(/[^A-Za-z0-9_-]/g, "?")
+      .slice(0, 32);
+    console.log();
+    console.log(`${YELLOW} language "${shown}" isn't available${RESET}, so the bar shows English.`);
+    console.log(`  Available: ${SUPPORTED_LANGUAGES.join(", ")}`);
+  }
+
   const breaking = cmdBreakingChars(installDir);
   if (breaking.length) {
     failed += 1;

package/src/cli/export.js

@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: MIT
+// Copyright (c) 2026 agy-powerline contributors
+
 "use strict";
 
 const fs = require("fs");

package/src/cli/gradient.js

@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: MIT
+// Copyright (c) 2026 agy-powerline contributors
+
 "use strict";
 
 const {

package/src/cli/import.js

@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: MIT
+// Copyright (c) 2026 agy-powerline contributors
+
 "use strict";
 
 const fs = require("fs");

package/src/cli/init.js

@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: MIT
+// Copyright (c) 2026 agy-powerline contributors
+
 "use strict";
 
 const fs = require("fs");
@@ -19,6 +22,7 @@ const {
   THEME_ORDER,
   canonicalThemeId,
 } = require("../lib/shared");
+const { matchLanguage, SUPPORTED_LANGUAGES } = require("../lib/i18n");
 const {
   AGY_SETTINGS,
   RUNTIME_FILES,
@@ -89,7 +93,7 @@ function unknownChoice(kind, value, ids) {
   return null;
 }
 
-// --preset, --layout and --theme, checked before anything is written. Returns
+// --preset, --layout, --theme and --language, checked before anything is written. Returns
 // the ids given ({} for none), or null after printing what's wrong.
 function readChoiceFlags(options) {
   const choices = {};
@@ -113,6 +117,16 @@ function readChoiceFlags(options) {
     }
     choices.theme = theme;
   }
+  if (options.language !== undefined) {
+    const language = matchLanguage(options.language);
+    if (!language) {
+      console.error(`${RED}error${RESET} Unknown language "${options.language}".`);
+      console.error(` Available languages: ${SUPPORTED_LANGUAGES.join(", ")}`);
+      process.exitCode = 1;
+      return null;
+    }
+    choices.language = language;
+  }
   return choices;
 }
 
@@ -124,6 +138,9 @@ function applyChoices(config, choices) {
   if (choices.theme) {
     next.theme = choices.theme;
   }
+  if (choices.language) {
+    next.language = choices.language;
+  }
   return next;
 }
 

package/src/cli/layout.js

@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: MIT
+// Copyright (c) 2026 agy-powerline contributors
+
 "use strict";
 
 const {

package/src/cli/preset.js

@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: MIT
+// Copyright (c) 2026 agy-powerline contributors
+
 "use strict";
 
 const {

package/src/cli/repo-url.js

@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: MIT
+// Copyright (c) 2026 agy-powerline contributors
+
 "use strict";
 
 const { repository } = require("../../package.json");

package/src/cli/report.js

@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: MIT
+// Copyright (c) 2026 agy-powerline contributors
+
 "use strict";
 
 const fs = require("fs");

package/src/cli/theme.js

@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: MIT
+// Copyright (c) 2026 agy-powerline contributors
+
 "use strict";
 
 const {

package/src/cli/tui-style.js

@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: MIT
+// Copyright (c) 2026 agy-powerline contributors
+
 "use strict";
 
 // Building blocks for the configure TUI: wordmark, tabs, panels, keycaps and

package/src/cli/uninstall.js

@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: MIT
+// Copyright (c) 2026 agy-powerline contributors
+
 "use strict";
 
 const fs = require("fs");

package/src/index.js

@@ -1,4 +1,7 @@
 #!/usr/bin/env node
+// SPDX-License-Identifier: MIT
+// Copyright (c) 2026 agy-powerline contributors
+
 "use strict";
 
 const fs = require("fs");
@@ -28,6 +31,7 @@ const {
 } = require("./lib/shared");
 const { STYLE_ORDER } = require("./lib/powerline");
 const { GRADIENT_ORDER } = require("./lib/themes");
+const { SUPPORTED_LANGUAGES } = require("./lib/i18n");
 const { stripControl } = require("./lib/formatters");
 const { resolveInstallDir, isTrustedInstallDir } = require("./lib/paths");
 const { isLogEnabled, setLogDir, logError, jsonErrorMessage } = require("./lib/log");
@@ -75,6 +79,11 @@ const COMMANDS = [
         value: "<id>",
         help: "use this theme, or dark, light, colorblind (skips the question)",
       },
+      language: {
+        type: "string",
+        value: "<code>",
+        help: `show the bar in this language (${SUPPORTED_LANGUAGES.join(", ")})`,
+      },
     },
     run: (_arg, opts) =>
       initCommand({
@@ -232,6 +241,11 @@ const COMMANDS = [
         value: "<name|colors>",
         help: "use a gradient preset, hex stops, or off",
       },
+      language: {
+        type: "string",
+        value: "<code>",
+        help: `use a language for this render (${SUPPORTED_LANGUAGES.join(", ")})`,
+      },
       "dump-payload": {
         type: "string",
         value: "<path>",
@@ -384,6 +398,7 @@ function renderOverrideError(name, value) {
     preset: ["preset", `Available presets: ${PRESET_ORDER.join(", ")}`],
     caps: ["cap style", `Available styles: ${STYLE_ORDER.join(", ")}`],
     gradient: ["gradient", `Available gradients: ${GRADIENT_ORDER.join(", ")}, off`],
+    language: ["language", `Available languages: ${SUPPORTED_LANGUAGES.join(", ")}`],
   }[name];
   console.error(`${RED}error${RESET} Unknown ${what} "${stripControl(String(value))}".`);
   console.error(` ${list}`);

package/src/lib/catalog.js

@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: MIT
+// Copyright (c) 2026 agy-powerline contributors
+
 "use strict";
 
 // description: one sentence, shown in the configure details panel.

package/src/lib/colors.js

@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: MIT
+// Copyright (c) 2026 agy-powerline contributors
+
 "use strict";
 
 const CSI = "\x1b[";

package/src/lib/config-check.js

@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: MIT
+// Copyright (c) 2026 agy-powerline contributors
+
 "use strict";
 
 const { defaultConfig, canonicalThemeId, LAYOUTS } = require("./shared");

package/src/lib/config.js

@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: MIT
+// Copyright (c) 2026 agy-powerline contributors
+
 "use strict";
 
 const fs = require("fs");
@@ -8,6 +11,7 @@ const { stripControl, normalizeClock } = require("./formatters");
 const { normalizePowerline, applyStyle, STYLES } = require("./powerline");
 const { writeFileAtomic, PRIVATE_FILE_MODE } = require("./paths");
 const { isMeterStyle } = require("./widget-style");
+const { resolveLanguage, matchLanguage } = require("./i18n");
 
 // Display text in widget configs is printed as-is, so strip terminal control
 // from it. cmd/command are left alone: they are executed, not printed.
@@ -126,6 +130,7 @@ function defaultConfig() {
     ascii: false,
     color: "auto",
     layout: "pills",
+    language: "en",
     pacing: true,
     minimalist: false,
     rowGap: false,
@@ -185,6 +190,8 @@ function mergeConfig(raw) {
     ascii: raw?.ascii === true,
     color: resolveColorModeId(raw?.color ?? fallback.color),
     layout: resolveLayoutId(raw?.layout ?? fallback.layout),
+    // A language without messages shows English (fr-FR uses fr when there is one).
+    language: resolveLanguage(raw?.language),
     pacing: raw?.pacing !== false,
     minimalist: raw?.minimalist === true,
     rowGap: raw?.rowGap === true,
@@ -237,7 +244,7 @@ function readConfigFile() {
     if (!raw || typeof raw !== "object" || Array.isArray(raw)) {
       return { exists: true, config: defaultConfig(), error: "top-level value is not an object" };
     }
-    return { exists: true, config: mergeConfig(raw) };
+    return { exists: true, config: mergeConfig(raw), raw };
   } catch (err) {
     // Newer Node quotes part of the file in the message; it may hold anything.
     return { exists: true, config: defaultConfig(), error: stripControl(err.message) };
@@ -475,6 +482,15 @@ function applyRenderOverrides(baseConfig, overrides = {}) {
     }
   }
 
+  if (overrides.language !== undefined) {
+    const language = matchLanguage(overrides.language);
+    if (language) {
+      config = mergeConfig({ ...config, language });
+    } else {
+      invalid.push("language");
+    }
+  }
+
   return { config, invalid };
 }
 

package/src/lib/exec.js

@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: MIT
+// Copyright (c) 2026 agy-powerline contributors
+
 "use strict";
 
 const fs = require("fs");
@@ -8,6 +11,7 @@ const { execSync } = require("child_process");
 const { stripControl, sanitizeDeep } = require("./formatters");
 const { RESET, getActiveDepth } = require("./colors");
 const { logWarning } = require("./log");
+const { t } = require("./i18n");
 const { PRIVATE_FILE_MODE } = require("./paths");
 
 const DEFAULT_TIMEOUT_MS = 500;
@@ -15,10 +19,6 @@ const DEFAULT_INTERVAL_SEC = 10;
 const MAX_CACHE_AGE_SEC = 3600;
 const MAX_OUTPUT_CHARS = 80;
 
-// Placeholders shown instead of running the command.
-const EXEC_PREVIEW_TEXT = "[cmd]";
-const EXEC_BLOCKED_TEXT = "[blocked]";
-
 const memoryCache = new Map();
 
 function getCacheFilePath() {
@@ -31,7 +31,9 @@ function getCacheFilePath() {
   } catch {
     // Fallback
   }
-  // Per-user name so other accounts on a shared machine cannot pre-create it.
+  // Per-user name so accounts don't share one cache. Another account could
+  // still guess and pre-create it in a shared /tmp, so the runtime never comes
+  // here: exec widgets only run from a config file in the install dir above.
   let user = "user";
   try {
     user = os.userInfo().username.replace(/[^A-Za-z0-9_.-]/g, "_") || user;
@@ -233,7 +235,8 @@ function execWidgetOutput(widget, session = {}) {
     return output;
   }
 
-  return session.execMode === "blocked" ? EXEC_BLOCKED_TEXT : EXEC_PREVIEW_TEXT;
+  // Placeholders shown instead of running the command.
+  return t(session.execMode === "blocked" ? "cmd_blocked" : "cmd_preview", session.lang);
 }
 
 function runExecWidget(widget, session = {}) {
@@ -349,6 +352,4 @@ module.exports = {
   saveDiskCache,
   DEFAULT_TIMEOUT_MS,
   DEFAULT_INTERVAL_SEC,
-  EXEC_PREVIEW_TEXT,
-  EXEC_BLOCKED_TEXT,
 };

package/src/lib/fit.js

@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: MIT
+// Copyright (c) 2026 agy-powerline contributors
+
 "use strict";
 
 const { charWidth, visibleWidth } = require("./formatters");

package/src/lib/formatters.js

@@ -1,14 +1,18 @@
+// SPDX-License-Identifier: MIT
+// Copyright (c) 2026 agy-powerline contributors
+
 "use strict";
 
 const os = require("os");
 const path = require("path");
 const { rgb } = require("./colors");
+const { t } = require("./i18n");
 
-function formatReset(seconds) {
+function formatReset(seconds, lang) {
   seconds = Number(seconds);
 
   if (!Number.isFinite(seconds) || seconds <= 0) {
-    return "now";
+    return t("now", lang);
   }
 
   const totalMinutes = Math.floor(seconds / 60);
@@ -17,23 +21,23 @@ function formatReset(seconds) {
   const minutes = totalMinutes % 60;
 
   if (days > 0) {
-    return `${days}d ${hours}h`;
+    return `${days}${t("unit_d", lang)} ${hours}${t("unit_h", lang)}`;
   }
 
   if (hours > 0) {
-    return `${hours}hr ${minutes}m`;
+    return `${hours}${t("unit_hr", lang)} ${minutes}${t("unit_m", lang)}`;
   }
 
-  return `${Math.max(1, minutes)}m`;
+  return `${Math.max(1, minutes)}${t("unit_m", lang)}`;
 }
 
-function formatSessionTime(startMs, nowMs = Date.now()) {
+function formatSessionTime(startMs, nowMs = Date.now(), lang) {
   const start = Number(startMs);
   const now = Number(nowMs);
   if (!Number.isFinite(start) || start <= 0 || !Number.isFinite(now) || now - start < 60000) {
     return "";
   }
-  return formatReset((now - start) / 1000);
+  return formatReset((now - start) / 1000, lang);
 }
 
 const MONTHS_SHORT = [
@@ -274,22 +278,22 @@ function shortModelName(name, ascii = false) {
 }
 
 // Session input and output tokens: "88.2K↑ 61.1K↓", or "88.2K in 61.1K out".
-function formatTokenSplit(input, output, ascii = false) {
+function formatTokenSplit(input, output, ascii = false, lang) {
   return ascii
-    ? `${formatTokens(input)} in ${formatTokens(output)} out`
+    ? `${formatTokens(input)} ${t("tokens_in", lang)} ${formatTokens(output)} ${t("tokens_out", lang)}`
     : `${formatTokens(input)}↑ ${formatTokens(output)}↓`;
 }
 
 // The usage widgets' text: "1.2M", or "1.0M↑ 245.3K↓" with "split", plus the
 // share of a "budget" when one is set ("1.2M (60%)"). null with no tokens.
-function formatUsage(tokens, widget = {}, ascii = false) {
+function formatUsage(tokens, widget = {}, ascii = false, lang) {
   const input = Number(tokens?.input) || 0;
   const output = Number(tokens?.output) || 0;
   const total = input + output;
   if (!(total > 0)) {
     return null;
   }
-  const value = widget?.split ? formatTokenSplit(input, output, ascii) : formatTokens(total);
+  const value = widget?.split ? formatTokenSplit(input, output, ascii, lang) : formatTokens(total);
   const budget = widget?.budget;
   const pct =
     typeof budget === "number" && Number.isFinite(budget) && budget > 0
@@ -620,9 +624,11 @@ function formatGitOperation(op) {
 }
 
 // "2 subagents, 1 task", or "" when nothing runs.
-function formatTasks(subagents, tasks) {
-  const part = (n, word) => (n > 0 ? `${n} ${word}${n === 1 ? "" : "s"}` : "");
-  return [part(subagents, "subagent"), part(tasks, "task")].filter(Boolean).join(", ");
+function formatTasks(subagents, tasks, lang) {
+  const part = (n, one, many) => (n > 0 ? `${n} ${t(n === 1 ? one : many, lang)}` : "");
+  return [part(subagents, "subagent", "subagents"), part(tasks, "task", "tasks")]
+    .filter(Boolean)
+    .join(", ");
 }
 
 // "accept-edits, NORMAL", or "" in the default mode with Vim editing off.

package/src/lib/git.js

@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: MIT
+// Copyright (c) 2026 agy-powerline contributors
+
 "use strict";
 
 const fs = require("fs");