dsh-over-ssh 0.1.0 → 0.1.1

package/lib/types/src/client/session/session-panel-view.d.ts

@@ -1,336 +0,0 @@
-/**
- * The session panel's React container.
- *
- * Deliberately thin: it renders what [`session-panel.ts`](./session-panel.ts) computed and owns only the
- * interaction state (selection, the in-flight flag, the last outcome, the confirmation dialog). All the
- * parsing, validation and HTTP work lives in the model module, which is why this file has almost no logic to
- * test — and why the logic that matters is tested without a browser.
- *
- * **Nothing destructive happens on render.** Deleting requires a click; an irreversible delete or a purge
- * additionally requires the confirmation **dialog** (a modal card, portalled to the page body), and the model only
- * sends `confirm: true` after that.
- *
- * @module dsh-over-ssh/client/session-panel-view
- */
-import { type ReactNode } from 'react';
-import type { MessageKey } from '../core/message.ts';
-import { type BinRowView, type SessionGroup, type SessionPanelIo, type SessionPanelSnapshot, type SessionRowView } from './session-panel.ts';
-/** Text the component shows; the caller supplies the locale's dictionary. */
-export interface SessionPanelCopy {
-    readonly title: string;
-    readonly description: string;
-    readonly unavailable: string;
-    /**
-     * "Still reading the inventory."
-     *
-     * A read in flight used to render as the red {@link SessionPanelCopy.unavailable} error: `emptySnapshot()` is
-     * the initial state **and** the failure, and its `available` is `false`. The panel therefore has three statuses
-     * where it had two — reading, failed (with the reason), and the host's own "no session channel" answer
-     * (audit 2026-11-01b ui P1-3).
-     */
-    readonly loading: string;
-    /** The read failed; the reason comes from `readSessionPanel`, which keeps it. */
-    readonly loadFailed: (reason: string) => string;
-    /** The inventory holds no session at all (an **answer**, not a read in flight). */
-    readonly sessionsEmpty: string;
-    readonly sessionsHeading: string;
-    readonly binHeading: string;
-    readonly binEmpty: string;
-    readonly selectAll: string;
-    readonly clearSelection: string;
-    readonly deleteRecycle: string;
-    readonly deletePermanent: string;
-    readonly restore: string;
-    readonly purge: string;
-    readonly sweep: string;
-    readonly refresh: string;
-    readonly close: string;
-    /** Badge of a session that is actually running (the green one). */
-    readonly liveBadge: string;
-    /** Badge of a session the host merely has loaded (opened) — neutral, never green. */
-    readonly openBadge: string;
-    readonly subsessionBadge: string;
-    readonly unreadableBadge: string;
-    readonly confirmTitle: string;
-    /**
-     * The confirmation sentence for an irreversible session delete.
-     *
-     * A function of the id list for the same reason as {@link SessionPanelCopy.confirmWorkspaceBody}: the
-     * sentence has to **name** what is about to be destroyed, and only the dictionary knows the language. It was a
-     * plain string here while the sentence itself was spelled in Chinese inside this file, so the English UI read
-     * 「永久删除会话 …，不可恢复。」 (audit 2026-10-31 client.md §2.3).
-     */
-    readonly confirmBody: (targets: string) => string;
-    /** The same, for one recycle-bin entry — `purge` speaks of bin entries, not of sessions. */
-    readonly confirmPurgeBody: (targets: string) => string;
-    readonly confirmCancel: string;
-    readonly confirmAccept: string;
-    /**
-     * The extra sentence the permanent-delete confirmation adds when the selection contains sessions the host
-     * still has loaded: they are deletable, but a later write recreates their log directory.
-     */
-    readonly runningWarning: (count: number) => string;
-    /** Delete every session of one workspace; the label on the per-workspace button. */
-    readonly deleteWorkspace: string;
-    /** Confirmation sentence for an irreversible workspace delete; names the directory. */
-    readonly confirmWorkspaceBody: (cwd: string) => string;
-    /** How many sub-sessions the list is hiding, and why they are not listed. */
-    readonly subsessionsHidden: (count: number) => string;
-    /**
-     * The label of the platform's no-workspace bucket.
-     *
-     * `groupByWorkspace` leaves the label empty for it (`session-panel.ts` no longer spells a sentence), so the
-     * substitution happens here, where the dictionary is.
-     */
-    readonly workspaceUnknown: string;
-    /** Resolve one deferred message: the model's action results come out as keys, not as sentences. */
-    readonly resolve: (message: MessageKey) => string;
-    readonly totals: (snapshot: SessionPanelSnapshot) => string;
-}
-export interface SessionPanelProps {
-    readonly copy: SessionPanelCopy;
-    readonly io: SessionPanelIo;
-    readonly close: () => void;
-}
-/**
- * The badge text for one row, plus the tone it should read in.
- *
- * Three states, and the first two must not be merged: **running** is the green 「运行中」, **loaded but idle**
- * is the neutral 「已打开」. Rendering the second as the first is the bug the user reported with a screenshot
- * (every session claimed to be running). Sub-sessions and unreadable rows keep their own neutral badges.
- *
- * Exported so the badge choice is a unit-testable decision instead of a line inside the render tree.
- *
- * @param row - the row to describe.
- * @param copy - the dictionary.
- * @returns the badge, or `undefined` for a plain idle row (no badge at all).
- */
-export declare function badgeFor(row: SessionRowView, copy: SessionPanelCopy): {
-    readonly text: string;
-    readonly success: boolean;
-} | undefined;
-/** What one session row needs. */
-export interface SessionRowProps {
-    readonly row: SessionRowView;
-    readonly copy: SessionPanelCopy;
-    /**
-     * Whether **this** row's checkbox is checked.
-     *
-     * A boolean, not the selection: that is the whole point of the memo boundary below. Passing the selection (a new
-     * array, or a new `Set`, on every toggle) made every row's props change on every click, so `memo` could never
-     * bail out — the whole list re-rendered while the user was selecting 88 sessions one at a time.
-     */
-    readonly checked: boolean;
-    readonly onToggle: (id: string) => void;
-    /**
-     * Per-mount prefix for this row's checkbox `id` / `<label for>`.
-     *
-     * The row used to hard-code `session-pick-${row.id}`. The session ids are unique inside one mount, but the
-     * platform re-registers this section on every inject-face change (a locale switch does it), and for one commit
-     * the old and the new mount share the DOM — with one module-level prefix, two inputs carry the same `id` and
-     * every `<label for>` in that overlap points at whichever the browser found first (audit 2026-11-01b ui P3-6,
-     * the same defect the roots panel and the directory flow fixed with `useId()`).
-     */
-    readonly pickIdPrefix: string;
-}
-/**
- * One session row inside a workspace group — the pure template.
- *
- * Exported so the row's markup (and its cost) can be asserted by a test: the component below is a `memo` boundary,
- * and this repository's offline renderer deliberately does not call components (it would run their hooks), so a
- * test reaches the markup through this function instead.
- *
- * @param props - the row, the dictionary, its checked state, and the container's toggle.
- * @returns the list item.
- */
-export declare function sessionRowTemplate(props: SessionRowProps): ReactNode;
-/**
- * One row, behind a `memo` boundary.
- *
- * Why: a checkbox click used to re-render **every** row of the list. `selected` is a new array on each toggle, so
- * every row's props changed and React re-ran all of them; with 88 sessions (the inventory the user reported) that
- * is 88 rows of `createElement` per click, and "select all" then toggling one row repeats it. Behind this
- * boundary a click re-renders **one** row: `row` and `copy` keep their identity, `onToggle` is `useCallback`-fixed
- * in {@link SessionPanel}, and `checked` is a boolean that changes only for the row that was clicked.
- *
- * Measured on the reference machine (2026-10-31, `node`, no DOM; `client-session-panel-view.test.ts` pins the
- * element counts). One row is **11** elements and the group's own chrome is 7, so the list is 975 elements at 88
- * rows and 5507 at 500. What that costs, per checkbox click:
- *
- * | rows | elements | build with the boundary | row templates it skips |
- * | ---- | -------- | ----------------------- | ---------------------- |
- * | 88   | 975      | 0.16 ms                 | 0.86 ms                |
- * | 500  | 5507     | 0.79 ms                 | 4.52 ms                |
- *
- * "build with the boundary" is what `SessionPanel` still does on every click (the groups re-create one element
- * per row and `memo` compares props); "row templates it skips" is the work React no longer runs, because only the
- * clicked row's `checked` changed. At the inventory the user reported (88 sessions) that is 5× less work per
- * click, and the click is the interaction that happens 88 times in a row.
- *
- * **No virtualisation**, and that is a decision rather than an omission. The remaining cost at 500 rows is a full
- * re-render's, and a full re-render now happens only on a snapshot refresh or a language switch — not on a click.
- * A window would trade two behaviours this list depends on for that: the action bar is `position: sticky` inside
- * the panel's own scroll box, and the checkboxes are Tab/arrow traversable, which a windowed list defeats as soon
- * as a row scrolls out (its DOM node, and with it its place in the focus order, disappears). The scroll-position
- * bookkeeping a window needs cannot be verified in this repository — there is no renderer here, only an offline
- * `createElement` walker — so the trade would ship an unverifiable change to the two things users rely on.
- */
-export declare const SessionRow: import("react").NamedExoticComponent<SessionRowProps>;
-/** What one recycle-bin row needs from the container. */
-export interface BinRowProps {
-    readonly row: BinRowView;
-    readonly copy: SessionPanelCopy;
-    readonly busy: boolean;
-    readonly onRestore: (entryId: string) => void;
-    readonly onPurge: (entryId: string) => void;
-}
-/**
- * One recycle-bin row.
- *
- * The confirmation it raises is **not** rendered here any more: a modal card is drawn once by the container, so
- * the row only reports the click. Placement stopped being a per-site question the moment the question became a
- * dialog — there is exactly one card, in one place, whatever was clicked.
- *
- * @param props - the row, the dictionary, and the container's callbacks.
- * @returns the list item.
- */
-export declare function renderBinRow(props: BinRowProps): ReactNode;
-/** What one workspace group needs from the container. */
-export interface WorkspaceGroupProps {
-    readonly group: SessionGroup;
-    readonly copy: SessionPanelCopy;
-    readonly selected: readonly string[];
-    readonly busy: boolean;
-    readonly onToggle: (id: string) => void;
-    readonly onRemove: (action: WorkspaceDeleteAction) => void;
-    /** Per-mount checkbox-id prefix, forwarded to every row (see {@link SessionRowProps.pickIdPrefix}). */
-    readonly pickIdPrefix: string;
-}
-/**
- * One workspace section: heading, its delete button, and its rows.
- *
- * The delete button reports the click; the confirmation itself is the container's single modal card.
- *
- * @param props - the group, the dictionary, and the container's callbacks.
- * @returns the section element.
- */
-export declare function renderWorkspaceGroup(props: WorkspaceGroupProps): ReactNode;
-/**
- * What the panel knows right now.
- *
- * Three states, not two. The component used to hold a `SessionPanelSnapshot` whose `available` flag doubled as
- * "nothing has loaded yet" (it starts `false`) and as "the host has no session channel" — so the first paint of
- * the settings section was a red 「宿主会话数据通道不可用（插件未装配或该 profile 无 webServer）」, and a real
- * HTTP failure kept the same sentence while the reason was thrown away (audit 2026-11-01b ui P1-3).
- */
-export type SessionPanelPhase = {
-    readonly kind: 'loading';
-} | {
-    readonly kind: 'failed';
-    readonly error: string;
-} | {
-    readonly kind: 'ready';
-    readonly snapshot: SessionPanelSnapshot;
-};
-/**
- * The one status line above the inventory.
- *
- * Pure, so the three states are asserted without a renderer (this repository has none).
- *
- * @param phase - what the panel knows.
- * @param copy - the active dictionary.
- * @returns the notice, or `null` for an ordinary answer.
- */
-export declare function sessionPanelStatus(phase: SessionPanelPhase, copy: SessionPanelCopy): ReactNode;
-/**
- * The inventory's placeholder — only for an **answer** with nothing in it.
- *
- * While a read is in flight (or failed) the status line is the whole story; claiming "there is nothing here" is
- * the other half of the first-paint lie the status line exists to prevent.
- *
- * @param phase - what the panel knows.
- * @param copy - the active dictionary.
- * @returns the empty-state paragraph, or `null`.
- */
-export declare function sessionInventoryEmpty(phase: SessionPanelPhase, copy: SessionPanelCopy): ReactNode;
-/** Render the panel. */
-export declare function SessionPanel({ copy, io, close }: SessionPanelProps): ReactNode;
-/** One action awaiting confirmation. */
-export type PendingAction = {
-    readonly kind: 'delete-permanent';
-    readonly ids: readonly string[];
-} | {
-    readonly kind: 'delete-workspace';
-    readonly cwd: string;
-} | {
-    readonly kind: 'purge';
-    readonly ids: readonly string[];
-};
-/** The workspace-delete confirmation, narrowed so call sites can read `cwd` without a cast. */
-export type WorkspaceDeleteAction = Extract<PendingAction, {
-    kind: 'delete-workspace';
-}>;
-/** What the confirmation's two buttons call. */
-export interface ConfirmationHandlers {
-    readonly accept: () => void;
-    readonly cancel: () => void;
-}
-/**
- * The confirmation card: a modal dialog with the title, the sentence naming what will be destroyed, and the
- * confirm/cancel pair.
- *
- * Extracted from the render tree for the reason the rest of this file states: this repository's client tests
- * cannot render a hook-using component, so a template left inline is a template no test can reach.
- *
- * The card is a **dialog**, not an inline notice (2026-10-27): an inline card had to be found wherever it landed,
- * while a dialog is where the user is looking and cannot be scrolled away from. Esc closes it, and the platform's
- * own Esc handling must not also run — this card is the topmost surface while it is up.
- *
- * @param pending - the action awaiting confirmation.
- * @param copy - the dictionary.
- * @param handlers - what the two buttons call.
- * @param titleId - the heading's id, referenced by `aria-labelledby`. **Required**, and supplied by the caller
- *   (`useId()` in {@link SessionPanel}): it used to default to a module-level constant, which is one id for every
- *   mount of this card — the "half-new-half-old" shape the id audit (2026-10-31 client.md §2.4) is about.
- * @param loadedIdle - how many targets the host still has loaded ({@link loadedIdleIds}); adds the warning.
- * @returns the dialog.
- */
-export declare function renderConfirmationDialog(pending: PendingAction, copy: SessionPanelCopy, handlers: ConfirmationHandlers, titleId: string, loadedIdle?: number): ReactNode;
-/**
- * The confirmation a workspace's delete button should raise, or `undefined` when it must not be offered.
- *
- * Extracted from the JSX because this repository's tests cannot render a hook-using component (see the note
- * in `styles.ts`): a decision left inline in the render tree is a decision no test can reach, and "which
- * directory does this button act on" is exactly the kind of thing that silently becomes wrong — a stray
- * empty string would ask the host to delete the sessions of no workspace at all.
- *
- * @param group - one workspace section.
- * @returns the pending action, or `undefined` for the platform's no-cwd bucket (nothing to scope a delete to).
- */
-export declare function workspaceDeleteAction(group: SessionGroup): WorkspaceDeleteAction | undefined;
-/**
- * The confirmation text for one pending irreversible action.
- *
- * Split out so the component's JSX stays readable and so the wording (which names what will be destroyed)
- * is unit-testable. Every branch names its target: "确认永久删除" without saying *what* is the kind of
- * dialog a user clicks through by reflex.
- *
- * @param pending - the action awaiting confirmation.
- * @param copy - the dictionary.
- * @param loadedIdle - how many of the targets the host still has loaded ({@link loadedIdleIds}); when
- *   non-zero the sentence gains the "its log directory may be recreated" warning.
- * @returns the sentence shown above the buttons.
- */
-export declare function confirmationBody(pending: PendingAction, copy: SessionPanelCopy, loadedIdle?: number): string;
-/**
- * The ids in a permanent-delete selection that the host still has loaded but that are not running.
- *
- * Those rows **are** deletable (that is the point of the running/live split), but deleting one is not quite
- * final: if the host writes to that session again, its log directory is recreated. The confirmation has to say
- * so, otherwise 「永久删除」 reads as a promise the host does not keep.
- *
- * @param pending - the action awaiting confirmation.
- * @param rows - every row of the snapshot the selection was made in.
- * @returns the matching ids, in the order of `rows`; empty for every other kind of pending action.
- */
-export declare function loadedIdleIds(pending: PendingAction, rows: readonly SessionRowView[]): readonly string[];

package/lib/types/src/client/session/session-panel.d.ts

@@ -1,322 +0,0 @@
-/**
- * The session panel's whole decision surface: wire parsing, HTTP calls, validation and the view model.
- * **No React, no DOM, no `@deepseek-ai/*`** — the component renders what this module returns (红线 2).
- *
- * ## Three rules this module owns
- *
- *  1. **`GET` is the only read.** The panel never mutates on render; every destructive action is an explicit
- *     user click that becomes a `POST`.
- *  2. **Irreversible actions carry `confirm: true`.** The host route refuses `purge` and
- *     `mode: 'permanent'` without it, so the panel must send it — and it only does so after the user
- *     confirms. Two locks, not one.
- *  3. **A sub-session is not an orphan.** The model keeps `subsession` rows visibly distinct and refuses to
- *     offer them a delete button, because deleting one alone is what the requirement warns against.
- *  4. **「已打开」is not 「运行中」.** The host reports two separate facts: `live` (this session is loaded in
- *     this run, i.e. it was opened) and `running` (it has an active turn). The panel used to render the first
- *     one as the second, so every session the user had merely opened showed 「运行中」 — the reported bug.
- *     Only `running` blocks a deletion now; a loaded-but-idle session is deletable, and the confirmation says
- *     that its log directory may be recreated if it is written to again.
- *
- * @module dsh-over-ssh/client/session-panel
- */
-/**
- * Where the host route lives, as the browser must request it.
- *
- * **Duplicated from the host module on purpose**, exactly like `ROOTS_API_PATH` in `roots-panel.ts`: the
- * client bundle must not pull host code in (it would drag `node:fs`/`node:child_process` into the browser
- * build), and the two halves are separate bundles. The value is the contract; both sides assert it in their
- * own tests, so a divergence is a red test rather than a silent 404.
- *
- * Relative on purpose: `dsh web` serves the page from the host origin, and the Desktop shell forwards
- * `/api/...` from `dsh-app://app/` to the owned host with its session cookie (see `roots-panel.ts` for the
- * full reasoning).
- */
-export declare const SESSION_API_PATH = "/api/over-ssh/sessions";
-import type { MessageKey } from '../core/message.ts';
-/** One inventory row as the panel uses it. */
-export interface SessionRowView {
-    readonly id: string;
-    readonly classification: 'normal' | 'subsession' | 'unreadable';
-    readonly parentSessionId: string | undefined;
-    readonly title: string | undefined;
-    readonly cwd: string | undefined;
-    /** Display title of the workspace owning {@link cwd}, when the host resolved one. */
-    readonly workspaceTitle: string | undefined;
-    readonly bytes: number;
-    readonly updatedAtMs: number;
-    /**
-     * Whether the **host currently has this session loaded** (it was opened in this run).
-     *
-     * This is *not* "running": the host used to report exactly this flag as "live" and the panel rendered it as
-     * 「运行中」, which is the bug the screenshot reported (every session read as running while nothing ran).
-     */
-    readonly live: boolean;
-    /** Whether the session is actually **running** (the host has an active turn for it). */
-    readonly running: boolean;
-    /** Whether this row may be deleted on its own (a running or unreadable row may not). */
-    readonly deletable: boolean;
-    /** Why it may not be deleted, when it may not. */
-    readonly blockedReason: 'running' | 'subsession' | 'unreadable' | undefined;
-}
-/** One bin row as the panel uses it. */
-export interface BinRowView {
-    readonly entryId: string;
-    readonly sessionId: string;
-    readonly title: string | undefined;
-    readonly bytes: number;
-    readonly deletedAtMs: number;
-    readonly movedBy: 'rename' | 'copy';
-}
-/** The whole panel state. */
-export interface SessionPanelSnapshot {
-    readonly available: boolean;
-    readonly sessions: readonly SessionRowView[];
-    readonly bin: readonly BinRowView[];
-    readonly policy: {
-        readonly maxEntries: number;
-        readonly maxBytes: number;
-        readonly maxAgeMs: number;
-    };
-    /** Totals the header shows without recomputing in the component. */
-    readonly totals: {
-        readonly sessions: number;
-        readonly bytes: number;
-        readonly subsessions: number;
-        /** Sessions the host has loaded (opened) — 「已打开」. */
-        readonly live: number;
-        /** Sessions that are actually running — 「运行中」. */
-        readonly running: number;
-    };
-}
-/** What the panel needs from the browser, injected so a test needs no `fetch`. */
-export interface SessionPanelIo {
-    readonly fetch: (path: string, init?: {
-        readonly method?: string;
-        readonly body?: string;
-        readonly headers?: Record<string, string>;
-    }) => Promise<{
-        readonly ok: boolean;
-        readonly status: number;
-        json: () => Promise<unknown>;
-    }>;
-}
-/**
- * A panel action's outcome, as the view renders it.
- *
- * The message is a **`MessageKey`, not a sentence**: this module has no dictionary, and the sentences it used to
- * spell were Chinese in both locales (audit 2026-10-31 `client.md` §2.3). The view resolves them through
- * `copy.resolve`, which is the dictionary of the active locale.
- */
-export type PanelActionResult = {
-    readonly kind: 'ok';
-    readonly message: MessageKey;
-} | {
-    readonly kind: 'error';
-    readonly message: MessageKey;
-    readonly status?: number;
-} | {
-    readonly kind: 'needs-confirmation';
-    readonly message: MessageKey;
-};
-/**
- * Byte formatting, **re-exported from `src/shared/format.ts`** rather than implemented here.
- *
- * Two copies of this function existed (this one and the shared one), which is how "the same byte count rendered
- * two ways inside one page" happened before (audit 0057's units table). The client half and the host half already
- * share `shared/format.ts`; there is no reason for a third spelling, and a future unit change must land in one
- * place only (audit 2026-11-01b ui P3-2). Kept as a named re-export so every existing import path still works.
- */
-import { formatBytes } from '../../shared/format.ts';
-export { formatBytes };
-/** Classify one raw row and decide whether it is deletable on its own. */
-export declare function toSessionRowView(raw: Record<string, unknown>): SessionRowView | undefined;
-/** Project one raw bin row. */
-export declare function toBinRowView(raw: Record<string, unknown>): BinRowView | undefined;
-/** An empty snapshot, used before the first answer and when the route is unavailable. */
-export declare function emptySnapshot(): SessionPanelSnapshot;
-/**
- * The final path segment of a path spelled either way, or the whole string when it has no separator.
- *
- * Used for the workspace fallback label: a session's `cwd` is a path, and its leaf names the project far
- * better than the uuid beside it does.
- *
- * @param path - a POSIX or Windows path.
- * @returns the last non-empty segment.
- */
-export declare function leafName(path: string): string;
-/**
- * The human label for one row: its own title, else its workspace.
- *
- * FR-3.2 asks the panel for the session's 标题 and 根归属; this is the chain that answers it from whatever the
- * host could resolve. The id is **not** part of this string — the row renders it separately as `shortId`, which
- * is why an empty answer here is honest rather than a lost row (the earlier doc claimed the id was the last
- * resort; the code never did that).
- *
- * @param row - the row to label.
- * @returns the text shown as the row's name; `''` when the host resolved neither a title nor a workspace.
- */
-export declare function sessionLabel(row: SessionRowView): string;
-/**
- * The workspace line for one row: the registry's display title, else the `cwd` leaf.
- *
- * @param row - the row to describe.
- * @returns the workspace text; **empty** for the platform's no-cwd bucket. The view substitutes
- *   `copy.workspaceUnknown` there: a marker spelled in this module would be Chinese in the English UI.
- */
-export declare function workspaceLabel(row: SessionRowView): string;
-/** One workspace section of the inventory list. */
-export interface SessionGroup {
-    /** Stable key: the `cwd` when known, else the no-workspace marker. */
-    readonly key: string;
-    readonly label: string;
-    readonly cwd: string | undefined;
-    readonly sessions: readonly SessionRowView[];
-}
-/**
- * The rows the list shows: everything except sub-sessions that still have a visible parent.
- *
- * The user asked not to show sub-sessions at all, and that is right for the reachable ones: they are an
- * implementation detail of how a session spawned help, they are deleted together with their parent, and 44
- * of 88 rows on the reference machine were sub-sessions. Showing them doubles the list and adds rows the
- * user cannot act on individually.
- *
- * **A sub-session whose parent is not in the inventory stays visible.** That is an orphan: nothing navigates
- * to it (the platform nests children under their parent) and nothing will ever delete it with a parent, so
- * hiding it would make its bytes permanently invisible and unreachable — exactly the "会话数据只增不减"
- * problem FR-3.3 exists to expose. Hiding must not create garbage.
- *
- * @param rows - the full inventory.
- * @returns the rows to render, in the input order.
- */
-export declare function visibleSessions(rows: readonly SessionRowView[]): readonly SessionRowView[];
-/**
- * How many rows {@link visibleSessions} hid, so the panel can say so instead of silently dropping them.
- *
- * @param rows - the full inventory.
- * @returns the number of hidden sub-sessions.
- */
-export declare function hiddenSubsessionCount(rows: readonly SessionRowView[]): number;
-/**
- * Group rows by workspace, most recently updated workspace first, newest session first inside a group.
- *
- * Grouping is what makes the list answerable: 88 bare uuids become a handful of named projects, and a row's
- * id is only ever needed for the rare case where two sessions share a workspace and a title. FR-3.2 asks for
- * the session's 根归属, and a section heading states it once for the whole group instead of on every row.
- *
- * @param rows - the inventory rows to group (see {@link visibleSessions} for what the list actually shows).
- * @returns the sections, in display order.
- */
-export declare function groupByWorkspace(rows: readonly SessionRowView[]): readonly SessionGroup[];
-/**
- * Format an instant as a short, local, sortable-enough stamp.
- *
- * Deliberately compact: the panel lives in a narrow card, and the exact second never matters for deciding
- * which session to delete. The locale is the browser's own, so no dictionary entry is needed for it.
- *
- * **The year is shown when it is not the current one** (audit 2026-11-01b ui P3-1). A bare `10-14 13:41` read
- * exactly like today's session for one written eleven months ago — and this column is what the user reads before
- * deciding which session to delete, so "which year" is part of the answer. Same-year stamps keep the short shape
- * (the common case stays compact); older ones switch to `YYYY-MM-DD`.
- *
- * @param ms - milliseconds since the epoch; a non-finite value yields an empty string.
- * @param now - "today", injectable so the year rollover is a testable fact rather than a wall-clock accident.
- * @returns e.g. `10-14 13:41` (this year) / `2025-10-14` (another year), or `''` when the value is unusable.
- */
-export declare function formatStamp(ms: number, now?: number): string;
-/**
- * A short, unambiguous prefix of a session id, for the row's id line.
- *
- * The full uuid stays in the row's `title` attribute and in the delete confirmation, so nothing is lost;
- * this is only what the eye needs to tell two rows in the same workspace apart.
- *
- * @param id - the session id.
- * @returns the first 8 characters, or the whole id when shorter.
- */
-export declare function shortId(id: string): string;
-/**
- * Parse one `GET` answer.
- *
- * Field by field, like `parseRootsSnapshot`: a host answer carrying extra keys cannot reach the DOM.
- *
- * @param value - the decoded JSON body.
- * @returns the snapshot; an unusable body yields {@link emptySnapshot}.
- */
-export declare function parseSessionSnapshot(value: unknown): SessionPanelSnapshot;
-/** One read of the panel, with the failure kept so the view can tell "failed" from "nothing loaded yet". */
-export type SessionPanelRead = {
-    readonly ok: true;
-    readonly snapshot: SessionPanelSnapshot;
-} | {
-    readonly ok: false;
-    readonly error: string;
-};
-/**
- * Read the panel **and keep the failure**.
- *
- * {@link loadSessionPanel} cannot answer "nothing loaded yet" vs "the host refused": it folds both into
- * {@link emptySnapshot}, whose `available` is `false`. The settings section rendered that as a red
- * "the session channel is unavailable (the plugin is not wired)" on its very first paint, and it kept the same
- * sentence when the real cause was an HTTP 500 or a dead network — the reason was thrown away (audit 2026-11-01b
- * ui P1-3). A caller that only needs rows keeps using `loadSessionPanel`; the panel uses this one, so "still
- * reading", "the read failed, here is why" and "the host says it has no session channel" are three states.
- *
- * @param io - injected fetch.
- * @returns the snapshot, or the reason the read failed.
- */
-export declare function readSessionPanel(io: SessionPanelIo): Promise<SessionPanelRead>;
-/**
- * Load the panel's data, keeping **no** trace of a failure.
- *
- * For callers that only want the rows (the sidebar mark, the row-action dialog's lookup). The settings section
- * uses {@link readSessionPanel} instead: `available: false` here means "failed **or** the host said no", and the
- * two need different sentences (audit 2026-11-01b ui P1-3).
- *
- * @param io - injected fetch.
- * @returns the snapshot; a failure is `emptySnapshot()` rather than a throw, because a panel that cannot reach
- *   the host must still render.
- */
-export declare function loadSessionPanel(io: SessionPanelIo): Promise<SessionPanelSnapshot>;
-/**
- * Delete sessions.
- *
- * Sub-sessions are **not** a caller decision any more: the host always takes a parent's whole subtree along
- * (see `planDelete`), because leaving children behind orphans their logs. The request therefore carries no
- * `includeSubsessions` flag.
- *
- * @param io - injected fetch.
- * @param ids - session ids to delete.
- * @param options - `permanent` requires `confirm: true`, which the caller only passes after the user agreed.
- * @returns the outcome as the view renders it.
- */
-export declare function deleteSessions(io: SessionPanelIo, ids: readonly string[], options?: {
-    readonly permanent?: boolean;
-}): Promise<PanelActionResult>;
-/**
- * Delete every session belonging to one workspace directory.
- *
- * The workspace itself stays registered: the user asked to clear its sessions, not to unregister it.
- *
- * @param io - injected fetch.
- * @param cwd - the workspace directory whose sessions should go.
- * @param options - `permanent` requires `confirm: true`, which the caller only passes after the user agreed.
- * @returns the outcome as the view renders it.
- */
-export declare function deleteWorkspaceSessions(io: SessionPanelIo, cwd: string, options?: {
-    readonly permanent?: boolean;
-}): Promise<PanelActionResult>;
-/** Restore one bin entry. */
-export declare function restoreSession(io: SessionPanelIo, entryId: string): Promise<PanelActionResult>;
-/** Permanently remove one bin entry. Requires the caller to have confirmed. */
-export declare function purgeSession(io: SessionPanelIo, entryId: string): Promise<PanelActionResult>;
-/** Apply the retention policy. */
-export declare function sweepSessions(io: SessionPanelIo): Promise<PanelActionResult>;
-export declare function previewDelete(io: SessionPanelIo, ids: readonly string[]): Promise<{
-    readonly delete: readonly string[];
-    readonly refusals: readonly {
-        readonly id: string;
-        readonly reason: string;
-    }[];
-    readonly bytes: number;
-}>;
-/** Whether an action needs the user to confirm before it may run. */
-export declare function needsConfirmation(action: 'delete-permanent' | 'purge'): boolean;