koneck 2.62.0 → 2.64.0

package/dist/folder-dialog.d.ts

@@ -0,0 +1,63 @@
+/**
+ * The computer's own folder picker, opened by the server.
+ *
+ * A browser cannot do this, and it is worth being precise about why rather than treating it as a
+ * missing feature. `<input type="file" webkitdirectory>` hands back file entries with names relative
+ * to the chosen folder and no absolute path; `showDirectoryPicker()` hands back a handle and no
+ * path either. Both withhold it deliberately — a page that learned where you keep your files has
+ * learned something about you that it was not given.
+ *
+ * But KONECK's server is on the same machine as the files, and acting through it already requires
+ * loopback and the token. So the *server* opens the dialog: the real one, the one every other
+ * application on the machine uses, and the path comes back because the process asking is entitled
+ * to know it.
+ *
+ * Two honest limits, both reported rather than papered over. The dialog appears on the machine
+ * running KONECK — which is the same machine, because acting is loopback-only, but somebody
+ * tunnelling a port should know that. And a machine with no desktop session has no dialog to show:
+ * over SSH there is nothing to put on screen, so the answer is to say so and let the built-in
+ * browser do the job instead.
+ */
+/** What came back, or why nothing did. */
+export type FolderChoice = {
+    ok: true;
+    path: string;
+}
+/** The person closed the dialog. Not an error, and must not be reported as one. */
+ | {
+    ok: false;
+    cancelled: true;
+} | {
+    ok: false;
+    cancelled: false;
+    reason: string;
+};
+/**
+ * Runs a dialog and stops waiting if it stops answering.
+ *
+ * execa's own timeout signals the process it started and then waits for its pipes to close, which
+ * is not the same thing — a dialog that dies in a way execa does not notice left the request open
+ * for the full two minutes. Measured: a dialog killed from outside took 120,027ms to settle, while
+ * one that exited cleanly took 2,588ms. So the wait is raced against a deadline and the process
+ * group is signalled, which is the same shape as the fix the command runner already needed.
+ */
+export declare function runDialog(file: string, args: readonly string[], 
+/** Injectable so the giving-up path can be tested without waiting two minutes for it. */
+waitMs?: number): Promise<{
+    code: number | undefined;
+    out: string;
+    err: string;
+    gaveUp: boolean;
+}>;
+/** Whether a desktop session exists to show a dialog on. */
+export declare function hasDesktop(env?: NodeJS.ProcessEnv, platform?: NodeJS.Platform): boolean;
+/** Which dialog tool would be used, or null when none is installed. */
+export declare function dialogAvailable(platform?: NodeJS.Platform): Promise<string | null>;
+/**
+ * Opens the folder dialog and waits for an answer.
+ *
+ * A generous timeout, because the answer is a person deciding: two minutes is long enough to think
+ * and short enough that a dialog nobody is looking at does not hold a handle for ever.
+ */
+export declare function chooseFolder(startIn?: string, title?: string, platform?: NodeJS.Platform): Promise<FolderChoice>;
+//# sourceMappingURL=folder-dialog.d.ts.map

package/dist/folder-dialog.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"folder-dialog.d.ts","sourceRoot":"","sources":["../src/folder-dialog.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAKH,0CAA0C;AAC1C,MAAM,MAAM,YAAY,GACpB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE;AAC5B,mFAAmF;GACjF;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,SAAS,EAAE,IAAI,CAAA;CAAE,GAC9B;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,SAAS,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAyBpD;;;;;;;;GAQG;AACH,wBAAsB,SAAS,CAC7B,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,MAAM,EAAE;AACrC,yFAAyF;AACzF,MAAM,SAAiB,GACtB,OAAO,CAAC;IAAE,IAAI,EAAE,MAAM,GAAG,SAAS,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,OAAO,CAAA;CAAE,CAAC,CAyBlF;AAKD,4DAA4D;AAC5D,wBAAgB,UAAU,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,EAAE,QAAQ,kBAAmB,GAAG,OAAO,CAGrG;AAED,uEAAuE;AACvE,wBAAsB,eAAe,CACnC,QAAQ,kBAAmB,GAC1B,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CASxB;AAED;;;;;GAKG;AACH,wBAAsB,YAAY,CAChC,OAAO,SAAe,EACtB,KAAK,SAAmB,EACxB,QAAQ,kBAAmB,GAC1B,OAAO,CAAC,YAAY,CAAC,CA8CvB"}

package/dist/folder-dialog.js

@@ -0,0 +1,175 @@
+/**
+ * The computer's own folder picker, opened by the server.
+ *
+ * A browser cannot do this, and it is worth being precise about why rather than treating it as a
+ * missing feature. `<input type="file" webkitdirectory>` hands back file entries with names relative
+ * to the chosen folder and no absolute path; `showDirectoryPicker()` hands back a handle and no
+ * path either. Both withhold it deliberately — a page that learned where you keep your files has
+ * learned something about you that it was not given.
+ *
+ * But KONECK's server is on the same machine as the files, and acting through it already requires
+ * loopback and the token. So the *server* opens the dialog: the real one, the one every other
+ * application on the machine uses, and the path comes back because the process asking is entitled
+ * to know it.
+ *
+ * Two honest limits, both reported rather than papered over. The dialog appears on the machine
+ * running KONECK — which is the same machine, because acting is loopback-only, but somebody
+ * tunnelling a port should know that. And a machine with no desktop session has no dialog to show:
+ * over SSH there is nothing to put on screen, so the answer is to say so and let the built-in
+ * browser do the job instead.
+ */
+import os from 'os';
+import { existsSync } from 'fs';
+/**
+ * The ways to ask, in the order worth trying.
+ *
+ * zenity and kdialog are the GTK and KDE dialogs, so one of them is present on most desktops; yad
+ * is a fork of zenity that some distributions ship instead. macOS has AppleScript, which drives the
+ * real Finder dialog. Windows has PowerShell, whose folder browser is the shell's own.
+ */
+const LINUX_DIALOGS = [
+    { file: 'zenity', args: (title, startIn) => ['--file-selection', '--directory', `--title=${title}`, `--filename=${startIn}/`] },
+    { file: 'kdialog', args: (title, startIn) => ['--getexistingdirectory', startIn, '--title', title] },
+    { file: 'qarma', args: (title, startIn) => ['--file-selection', '--directory', `--title=${title}`, `--filename=${startIn}/`] },
+    { file: 'yad', args: (title, startIn) => ['--file-selection', '--directory', `--title=${title}`, `--filename=${startIn}/`] },
+];
+/**
+ * Runs a dialog and stops waiting if it stops answering.
+ *
+ * execa's own timeout signals the process it started and then waits for its pipes to close, which
+ * is not the same thing — a dialog that dies in a way execa does not notice left the request open
+ * for the full two minutes. Measured: a dialog killed from outside took 120,027ms to settle, while
+ * one that exited cleanly took 2,588ms. So the wait is raced against a deadline and the process
+ * group is signalled, which is the same shape as the fix the command runner already needed.
+ */
+export async function runDialog(file, args, 
+/** Injectable so the giving-up path can be tested without waiting two minutes for it. */
+waitMs = DIALOG_WAIT_MS) {
+    const { execa } = await import('execa');
+    const child = execa(file, [...args], { reject: false, detached: true });
+    const GAVE_UP = Symbol('gave-up');
+    let timer;
+    const deadline = new Promise(resolve => {
+        timer = setTimeout(() => resolve(GAVE_UP), waitMs);
+    });
+    try {
+        const settled = await Promise.race([child.then(r => r), deadline]);
+        if (settled === GAVE_UP) {
+            // The whole group, because the dialog may have re-executed itself into a child.
+            try {
+                if (child.pid)
+                    process.kill(-child.pid, 'SIGKILL');
+            }
+            catch {
+                try {
+                    child.kill('SIGKILL');
+                }
+                catch { /* already gone */ }
+            }
+            return { code: undefined, out: '', err: '', gaveUp: true };
+        }
+        return {
+            code: settled.exitCode ?? undefined,
+            out: String(settled.stdout ?? ''),
+            err: String(settled.stderr ?? ''),
+            gaveUp: false,
+        };
+    }
+    finally {
+        if (timer)
+            clearTimeout(timer);
+    }
+}
+/** How long a dialog nobody is answering may hold a request open. */
+const DIALOG_WAIT_MS = 120_000;
+/** Whether a desktop session exists to show a dialog on. */
+export function hasDesktop(env = process.env, platform = process.platform) {
+    if (platform === 'darwin' || platform === 'win32')
+        return true;
+    return !!(env['DISPLAY'] || env['WAYLAND_DISPLAY']);
+}
+/** Which dialog tool would be used, or null when none is installed. */
+export async function dialogAvailable(platform = process.platform) {
+    if (platform === 'darwin')
+        return 'osascript';
+    if (platform === 'win32')
+        return 'powershell';
+    const { execa } = await import('execa');
+    for (const dialog of LINUX_DIALOGS) {
+        const found = await execa('command', ['-v', dialog.file], { shell: true, reject: false });
+        if (found.exitCode === 0 && String(found.stdout).trim() !== '')
+            return dialog.file;
+    }
+    return null;
+}
+/**
+ * Opens the folder dialog and waits for an answer.
+ *
+ * A generous timeout, because the answer is a person deciding: two minutes is long enough to think
+ * and short enough that a dialog nobody is looking at does not hold a handle for ever.
+ */
+export async function chooseFolder(startIn = os.homedir(), title = 'Open a project', platform = process.platform) {
+    if (!hasDesktop()) {
+        return { ok: false, cancelled: false, reason: 'This machine has no desktop session, so there is no dialog to show — KONECK is probably '
+                + 'running over SSH. Use the folder list instead.' };
+    }
+    const from = existsSync(startIn) ? startIn : os.homedir();
+    if (platform === 'darwin') {
+        // AppleScript drives the real Finder dialog, and returns POSIX path text.
+        const script = `set chosen to choose folder with prompt ${JSON.stringify(title)} `
+            + `default location POSIX file ${JSON.stringify(from)}\n`
+            + 'return POSIX path of chosen';
+        const done = await runDialog('osascript', ['-e', script]);
+        if (done.gaveUp)
+            return gaveUp();
+        if (done.code !== 0)
+            return cancelledOrFailed(done.err, done.code);
+        return finish(done.out);
+    }
+    if (platform === 'win32') {
+        const script = 'Add-Type -AssemblyName System.Windows.Forms; '
+            + '$d = New-Object System.Windows.Forms.FolderBrowserDialog; '
+            + `$d.Description = ${JSON.stringify(title)}; `
+            + `$d.SelectedPath = ${JSON.stringify(from)}; `
+            + 'if ($d.ShowDialog() -eq "OK") { $d.SelectedPath } else { exit 1 }';
+        const done = await runDialog('powershell.exe', ['-NoProfile', '-Command', script]);
+        if (done.gaveUp)
+            return gaveUp();
+        if (done.code !== 0)
+            return cancelledOrFailed(done.err, done.code);
+        return finish(done.out);
+    }
+    const tool = await dialogAvailable(platform);
+    if (!tool) {
+        return { ok: false, cancelled: false, reason: 'No folder dialog is installed. On most desktops that is the zenity package (or kdialog on '
+                + 'KDE). Use the folder list instead.' };
+    }
+    const dialog = LINUX_DIALOGS.find(d => d.file === tool);
+    const done = await runDialog(dialog.file, dialog.args(title, from));
+    if (done.gaveUp)
+        return gaveUp();
+    // Every one of these exits non-zero when the dialog is dismissed, which is a choice not to choose
+    // rather than a failure, and must not be reported as one.
+    if (done.code !== 0)
+        return cancelledOrFailed(done.err, done.code);
+    return finish(done.out);
+}
+function gaveUp() {
+    return { ok: false, cancelled: false, reason: 'the folder dialog stopped answering and was closed — try the folder list instead' };
+}
+function cancelledOrFailed(stderr, code) {
+    const said = String(stderr ?? '').trim();
+    // A dismissed dialog says nothing; a broken one says something.
+    if (said === '')
+        return { ok: false, cancelled: true };
+    return { ok: false, cancelled: false,
+        reason: `the folder dialog failed${code !== undefined ? ` (${code})` : ''}: ${said}` };
+}
+function finish(stdout) {
+    // zenity can return several paths separated by | when multiple selection is on; take the first.
+    const path = String(stdout ?? '').split('|')[0].trim().replace(/\/+$/, '');
+    if (path === '')
+        return { ok: false, cancelled: true };
+    return { ok: true, path };
+}
+//# sourceMappingURL=folder-dialog.js.map

package/dist/folder-dialog.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"folder-dialog.js","sourceRoot":"","sources":["../src/folder-dialog.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,EAAE,UAAU,EAAE,MAAM,IAAI,CAAC;AAehC;;;;;;GAMG;AACH,MAAM,aAAa,GAAa;IAC9B,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,CACvC,CAAC,kBAAkB,EAAE,aAAa,EAAE,WAAW,KAAK,EAAE,EAAE,cAAc,OAAO,GAAG,CAAC,EAAE;IACvF,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC,wBAAwB,EAAE,OAAO,EAAE,SAAS,EAAE,KAAK,CAAC,EAAE;IACpG,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,CACtC,CAAC,kBAAkB,EAAE,aAAa,EAAE,WAAW,KAAK,EAAE,EAAE,cAAc,OAAO,GAAG,CAAC,EAAE;IACvF,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,CACpC,CAAC,kBAAkB,EAAE,aAAa,EAAE,WAAW,KAAK,EAAE,EAAE,cAAc,OAAO,GAAG,CAAC,EAAE;CACxF,CAAC;AAEF;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,IAAY,EAAE,IAAuB;AACrC,yFAAyF;AACzF,MAAM,GAAG,cAAc;IAEvB,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,CAAC;IACxC,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;IACxE,MAAM,OAAO,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC;IAClC,IAAI,KAAiC,CAAC;IACtC,MAAM,QAAQ,GAAG,IAAI,OAAO,CAAiB,OAAO,CAAC,EAAE;QACrD,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,CAAC;IACrD,CAAC,CAAC,CAAC;IACH,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC;QACnE,IAAI,OAAO,KAAK,OAAO,EAAE,CAAC;YACxB,gFAAgF;YAChF,IAAI,CAAC;gBAAC,IAAI,KAAK,CAAC,GAAG;oBAAE,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;YAAC,CAAC;YAC3D,MAAM,CAAC;gBAAC,IAAI,CAAC;oBAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBAAC,CAAC;gBAAC,MAAM,CAAC,CAAC,kBAAkB,CAAC,CAAC;YAAC,CAAC;YACrE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;QAC7D,CAAC;QACD,OAAO;YACL,IAAI,EAAE,OAAO,CAAC,QAAQ,IAAI,SAAS;YACnC,GAAG,EAAE,MAAM,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC;YACjC,GAAG,EAAE,MAAM,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC;YACjC,MAAM,EAAE,KAAK;SACd,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,IAAI,KAAK;YAAE,YAAY,CAAC,KAAK,CAAC,CAAC;IACjC,CAAC;AACH,CAAC;AAED,qEAAqE;AACrE,MAAM,cAAc,GAAG,OAAO,CAAC;AAE/B,4DAA4D;AAC5D,MAAM,UAAU,UAAU,CAAC,MAAyB,OAAO,CAAC,GAAG,EAAE,QAAQ,GAAG,OAAO,CAAC,QAAQ;IAC1F,IAAI,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,OAAO;QAAE,OAAO,IAAI,CAAC;IAC/D,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC;AACtD,CAAC;AAED,uEAAuE;AACvE,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,QAAQ,GAAG,OAAO,CAAC,QAAQ;IAE3B,IAAI,QAAQ,KAAK,QAAQ;QAAE,OAAO,WAAW,CAAC;IAC9C,IAAI,QAAQ,KAAK,OAAO;QAAE,OAAO,YAAY,CAAC;IAC9C,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,CAAC;IACxC,KAAK,MAAM,MAAM,IAAI,aAAa,EAAE,CAAC;QACnC,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,SAAS,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;QAC1F,IAAI,KAAK,CAAC,QAAQ,KAAK,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE;YAAE,OAAO,MAAM,CAAC,IAAI,CAAC;IACrF,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,OAAO,GAAG,EAAE,CAAC,OAAO,EAAE,EACtB,KAAK,GAAG,gBAAgB,EACxB,QAAQ,GAAG,OAAO,CAAC,QAAQ;IAE3B,IAAI,CAAC,UAAU,EAAE,EAAE,CAAC;QAClB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAC1C,0FAA0F;kBACxF,gDAAgD,EAAE,CAAC;IACzD,CAAC;IACD,MAAM,IAAI,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC;IAE1D,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC1B,0EAA0E;QAC1E,MAAM,MAAM,GACV,2CAA2C,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG;cACjE,+BAA+B,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI;cACvD,6BAA6B,CAAC;QAClC,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;QAC1D,IAAI,IAAI,CAAC,MAAM;YAAE,OAAO,MAAM,EAAE,CAAC;QACjC,IAAI,IAAI,CAAC,IAAI,KAAK,CAAC;YAAE,OAAO,iBAAiB,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QACnE,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC1B,CAAC;IAED,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;QACzB,MAAM,MAAM,GACV,+CAA+C;cAC7C,4DAA4D;cAC5D,oBAAoB,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI;cAC7C,qBAAqB,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI;cAC7C,mEAAmE,CAAC;QACxE,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,gBAAgB,EAAE,CAAC,YAAY,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC;QACnF,IAAI,IAAI,CAAC,MAAM;YAAE,OAAO,MAAM,EAAE,CAAC;QACjC,IAAI,IAAI,CAAC,IAAI,KAAK,CAAC;YAAE,OAAO,iBAAiB,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QACnE,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC1B,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,eAAe,CAAC,QAAQ,CAAC,CAAC;IAC7C,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAC1C,4FAA4F;kBAC1F,oCAAoC,EAAE,CAAC;IAC7C,CAAC;IACD,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAE,CAAC;IACzD,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC;IACpE,IAAI,IAAI,CAAC,MAAM;QAAE,OAAO,MAAM,EAAE,CAAC;IACjC,kGAAkG;IAClG,0DAA0D;IAC1D,IAAI,IAAI,CAAC,IAAI,KAAK,CAAC;QAAE,OAAO,iBAAiB,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;IACnE,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC1B,CAAC;AAED,SAAS,MAAM;IACb,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAC1C,kFAAkF,EAAE,CAAC;AACzF,CAAC;AAED,SAAS,iBAAiB,CAAC,MAAc,EAAE,IAAwB;IACjE,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACzC,gEAAgE;IAChE,IAAI,IAAI,KAAK,EAAE;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;IACvD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK;QAC3B,MAAM,EAAE,2BAA2B,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,IAAI,GAAG,CAAC,CAAC,CAAC,EAAE,KAAK,IAAI,EAAE,EAAE,CAAC;AAClG,CAAC;AAED,SAAS,MAAM,CAAC,MAAc;IAC5B,gGAAgG;IAChG,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC5E,IAAI,IAAI,KAAK,EAAE;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;IACvD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;AAC5B,CAAC"}

package/dist/session-title.d.ts

@@ -0,0 +1,70 @@
+/**
+ * What a session is called.
+ *
+ * It was called whatever you typed first, truncated to eighty characters, for ever. So a session
+ * that began "hi" and went on to build a ledger page was called "hi" — and the picker, which exists
+ * to answer "which of these was the one about X", answered "hi", "ok", "continue" and "what is 2+2"
+ * for a week's work.
+ *
+ * Two mistakes in one line of code. The first message is often not the request: it is a greeting, an
+ * acknowledgement, a "carry on". And a title set once cannot follow a session that turned into
+ * something else, which is what sessions do.
+ *
+ * So the name is derived from the substance and revised as the substance changes. Mechanically
+ * first, because that always works and costs nothing: the earliest message that actually asks for
+ * something, cleaned up. Then, once there is enough to summarise, the model is asked for a short
+ * one — which is the only way to get "Stokvel dashboard with recharts" out of a conversation that
+ * happens to open with "hi". That ask is cheap, happens once, and never blocks a turn; when it
+ * fails the mechanical name stands.
+ */
+/**
+ * Messages, as much of them as naming needs.
+ *
+ * Deliberately loose. The provider's own message type has a narrower role union and several content
+ * shapes, some of which omit content altogether, and a stricter shape here would refuse the very
+ * array it exists to read. Naming only needs to know who said something and what it said.
+ */
+export interface Said {
+    role?: unknown;
+    content?: unknown;
+}
+export declare function isPleasantry(text: string): boolean;
+/** The text of a message, whatever shape its content came in. */
+export declare function textOf(message: Said | undefined): string;
+/**
+ * A name from the conversation itself, with no model involved.
+ *
+ * The earliest thing said that asks for something: greetings are skipped, KONECK's own prefixes are
+ * skipped, and a message too short to mean anything is skipped. Falls back to the first message
+ * there is — because a session called "hi" is still better than one called nothing — and to a plain
+ * label when even that is missing.
+ */
+export declare function mechanicalTitle(messages: readonly Said[], limit?: number): string;
+/** One line, no markdown fences, no newlines, trimmed to length at a word boundary. */
+export declare function tidy(text: string, limit?: number): string;
+/**
+ * Whether a session has enough in it to be worth naming properly.
+ *
+ * Asking a model to name "hi" wastes a call and produces a title about greetings. Two exchanges, or
+ * one substantial request, is the point at which there is something to summarise.
+ */
+export declare function worthNaming(messages: readonly Said[]): boolean;
+/**
+ * What to ask the model for.
+ *
+ * The instruction is narrow on purpose: a model asked to "summarise" writes a sentence, and a model
+ * asked for a title writes "Session Summary: Implementation of...". Naming the shape wanted, giving
+ * an example of the register, and forbidding the two habits it will otherwise reach for is what gets
+ * a usable answer back in one attempt rather than three.
+ */
+export declare function titleQuestion(messages: readonly Said[], take?: number): string;
+/**
+ * The model's answer, made safe to use as a title, or null when it is not usable.
+ *
+ * A model asked for six words will sometimes send a paragraph, a quoted phrase, a bulleted list or
+ * an apology. Anything that does not look like a label is refused, and the mechanical name stands —
+ * a bad title is worse than a plain one, because a picker full of "Certainly! Here is a title" is
+ * unreadable in a way that "hi" at least is not.
+ */
+export declare function usableTitle(answer: string, limit?: number): string | null;
+//# sourceMappingURL=session-title.d.ts.map

package/dist/session-title.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-title.d.ts","sourceRoot":"","sources":["../src/session-title.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH;;;;;;GAMG;AACH,MAAM,WAAW,IAAI;IACnB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AA2BD,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAElD;AAED,iEAAiE;AACjE,wBAAgB,MAAM,CAAC,OAAO,EAAE,IAAI,GAAG,SAAS,GAAG,MAAM,CAWxD;AAED;;;;;;;GAOG;AACH,wBAAgB,eAAe,CAAC,QAAQ,EAAE,SAAS,IAAI,EAAE,EAAE,KAAK,SAAK,GAAG,MAAM,CAW7E;AAED,uFAAuF;AACvF,wBAAgB,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,SAAK,GAAG,MAAM,CAUrD;AAED;;;;;GAKG;AACH,wBAAgB,WAAW,CAAC,QAAQ,EAAE,SAAS,IAAI,EAAE,GAAG,OAAO,CAM9D;AAED;;;;;;;GAOG;AACH,wBAAgB,aAAa,CAAC,QAAQ,EAAE,SAAS,IAAI,EAAE,EAAE,IAAI,SAAI,GAAG,MAAM,CAazE;AAED;;;;;;;GAOG;AACH,wBAAgB,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,SAAK,GAAG,MAAM,GAAG,IAAI,CA4BrE"}

package/dist/session-title.js

@@ -0,0 +1,167 @@
+/**
+ * What a session is called.
+ *
+ * It was called whatever you typed first, truncated to eighty characters, for ever. So a session
+ * that began "hi" and went on to build a ledger page was called "hi" — and the picker, which exists
+ * to answer "which of these was the one about X", answered "hi", "ok", "continue" and "what is 2+2"
+ * for a week's work.
+ *
+ * Two mistakes in one line of code. The first message is often not the request: it is a greeting, an
+ * acknowledgement, a "carry on". And a title set once cannot follow a session that turned into
+ * something else, which is what sessions do.
+ *
+ * So the name is derived from the substance and revised as the substance changes. Mechanically
+ * first, because that always works and costs nothing: the earliest message that actually asks for
+ * something, cleaned up. Then, once there is enough to summarise, the model is asked for a short
+ * one — which is the only way to get "Stokvel dashboard with recharts" out of a conversation that
+ * happens to open with "hi". That ask is cheap, happens once, and never blocks a turn; when it
+ * fails the mechanical name stands.
+ */
+/**
+ * Openers that say nothing about the work.
+ *
+ * Anchored, and matched against the whole message rather than its start: "hi" is a greeting and
+ * "highlight the failing test" is not, and a prefix match cannot tell them apart.
+ */
+const PLEASANTRY = new RegExp('^(?:'
+    + [
+        'hi', 'hey', 'hello', 'yo', 'sup', 'ok', 'okay', 'k',
+        'thanks', 'thank you', 'ta', 'cheers',
+        'cool', 'nice', 'great', 'lovely', 'perfect',
+        // Both halves of a greeting, because "good morning" is two words and "morning" is one, and a
+        // list of single words matched neither.
+        '(?:good )?(?:morning|afternoon|evening|day)',
+        '(?:hi|hey|hello) there',
+        'please', 'continue', 'carry on', 'go on', 'go ahead', 'proceed',
+        'yes', 'yep', 'yeah', 'no', 'nope', 'sure', 'right', 'done', 'next',
+        'and\\?', 'well\\?',
+    ].join('|')
+    + ')[\\s!.,?]*$', 'i');
+/** KONECK's own scaffolding, which a person did not write and must never be read as a request. */
+const MACHINERY = /^\s*\[(continue|persistent session goal|effort|the request you are working on)/i;
+export function isPleasantry(text) {
+    return PLEASANTRY.test(text.trim());
+}
+/** The text of a message, whatever shape its content came in. */
+export function textOf(message) {
+    if (!message)
+        return '';
+    const content = message.content;
+    if (typeof content === 'string')
+        return content;
+    if (!Array.isArray(content))
+        return '';
+    return content
+        .filter((part) => !!part && typeof part === 'object')
+        .map(part => (part.type === 'text' && typeof part.text === 'string' ? part.text : ''))
+        .join(' ')
+        .trim();
+}
+/**
+ * A name from the conversation itself, with no model involved.
+ *
+ * The earliest thing said that asks for something: greetings are skipped, KONECK's own prefixes are
+ * skipped, and a message too short to mean anything is skipped. Falls back to the first message
+ * there is — because a session called "hi" is still better than one called nothing — and to a plain
+ * label when even that is missing.
+ */
+export function mechanicalTitle(messages, limit = 72) {
+    const fromUser = messages.filter(m => m.role === 'user').map(textOf);
+    const substantive = fromUser.find(text => {
+        const trimmed = text.trim();
+        if (trimmed === '' || MACHINERY.test(trimmed))
+            return false;
+        if (isPleasantry(trimmed))
+            return false;
+        // Three words or twelve characters: below that there is nothing to name.
+        return trimmed.length >= 12 || trimmed.split(/\s+/).length >= 3;
+    });
+    const chosen = substantive ?? fromUser.find(t => t.trim() !== '') ?? '';
+    return tidy(chosen, limit) || 'New session';
+}
+/** One line, no markdown fences, no newlines, trimmed to length at a word boundary. */
+export function tidy(text, limit = 72) {
+    const oneLine = String(text ?? '')
+        .replace(/```[\s\S]*?```/g, ' ')
+        .replace(/[`*_#>]/g, '')
+        .replace(/\s+/g, ' ')
+        .trim();
+    if (oneLine.length <= limit)
+        return oneLine;
+    const cut = oneLine.slice(0, limit);
+    const lastSpace = cut.lastIndexOf(' ');
+    return (lastSpace > limit * 0.6 ? cut.slice(0, lastSpace) : cut).replace(/[\s,.;:–-]+$/, '') + '…';
+}
+/**
+ * Whether a session has enough in it to be worth naming properly.
+ *
+ * Asking a model to name "hi" wastes a call and produces a title about greetings. Two exchanges, or
+ * one substantial request, is the point at which there is something to summarise.
+ */
+export function worthNaming(messages) {
+    const fromUser = messages.filter(m => m.role === 'user').map(textOf)
+        .filter(t => t.trim() !== '' && !MACHINERY.test(t));
+    if (fromUser.length === 0)
+        return false;
+    const substantial = fromUser.some(t => !isPleasantry(t) && t.trim().length >= 20);
+    return substantial || fromUser.length >= 2;
+}
+/**
+ * What to ask the model for.
+ *
+ * The instruction is narrow on purpose: a model asked to "summarise" writes a sentence, and a model
+ * asked for a title writes "Session Summary: Implementation of...". Naming the shape wanted, giving
+ * an example of the register, and forbidding the two habits it will otherwise reach for is what gets
+ * a usable answer back in one attempt rather than three.
+ */
+export function titleQuestion(messages, take = 8) {
+    const relevant = messages
+        .filter(m => m.role === 'user' || m.role === 'assistant')
+        .slice(0, take)
+        .map(m => `${m.role === 'user' ? 'asked' : 'did'}: ${tidy(textOf(m), 240)}`)
+        .filter(line => line.length > 8)
+        .join('\n');
+    return 'Name this coding session in three to six words, as a person would label a tab.\n\n'
+        + relevant
+        + '\n\nAnswer with the name alone: no quotes, no full stop, no prefix like "Session" or '
+        + '"Task". Name what the work is about, not that it is a session. If the conversation opens '
+        + 'with a greeting, ignore the greeting.';
+}
+/**
+ * The model's answer, made safe to use as a title, or null when it is not usable.
+ *
+ * A model asked for six words will sometimes send a paragraph, a quoted phrase, a bulleted list or
+ * an apology. Anything that does not look like a label is refused, and the mechanical name stands —
+ * a bad title is worse than a plain one, because a picker full of "Certainly! Here is a title" is
+ * unreadable in a way that "hi" at least is not.
+ */
+export function usableTitle(answer, limit = 72) {
+    const first = String(answer ?? '')
+        .split('\n')
+        .map(line => line.trim())
+        .find(line => line !== '' && !/^[-*•\d.]+\s*$/.test(line));
+    if (!first)
+        return null;
+    /*
+     * The sentence test runs before the trim, not after.
+     *
+     * Trimming first made a paragraph look like a title: "This session covers building a ledger page
+     * with demo data and styling it..." is nineteen words, but cut to seventy-two characters it is
+     * eleven, and passed a check meant to reject exactly that.
+     */
+    const withoutPrefix = first
+        .replace(/^["'`]+|["'`]+$/g, '')
+        .replace(/^(session|task|title|chat)\s*[:\-–]\s*/i, '')
+        .trim();
+    if (withoutPrefix.split(/\s+/).length > 12)
+        return null;
+    const cleaned = tidy(withoutPrefix, limit).replace(/[.!]+$/, '').trim();
+    if (cleaned.length < 3)
+        return null;
+    // A refusal or a preamble is not a title, however politely it is phrased.
+    if (/^(certainly|sure|here is|here's|of course|i cannot|i can't|as an ai)\b/i.test(cleaned)) {
+        return null;
+    }
+    return cleaned;
+}
+//# sourceMappingURL=session-title.js.map

package/dist/session-title.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-title.js","sourceRoot":"","sources":["../src/session-title.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAcH;;;;;GAKG;AACH,MAAM,UAAU,GAAG,IAAI,MAAM,CAC3B,MAAM;MACJ;QACA,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG;QACpD,QAAQ,EAAE,WAAW,EAAE,IAAI,EAAE,QAAQ;QACrC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS;QAC5C,6FAA6F;QAC7F,wCAAwC;QACxC,6CAA6C;QAC7C,wBAAwB;QACxB,QAAQ,EAAE,UAAU,EAAE,UAAU,EAAE,OAAO,EAAE,UAAU,EAAE,SAAS;QAChE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM;QACnE,QAAQ,EAAE,SAAS;KACpB,CAAC,IAAI,CAAC,GAAG,CAAC;MACT,cAAc,EAAE,GAAG,CAAC,CAAC;AAEzB,kGAAkG;AAClG,MAAM,SAAS,GAAG,iFAAiF,CAAC;AAEpG,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,OAAO,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;AACtC,CAAC;AAED,iEAAiE;AACjE,MAAM,UAAU,MAAM,CAAC,OAAyB;IAC9C,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,CAAC;IACxB,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;IAChC,IAAI,OAAO,OAAO,KAAK,QAAQ;QAAE,OAAO,OAAO,CAAC;IAChD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;QAAE,OAAO,EAAE,CAAC;IACvC,OAAO,OAAO;SACX,MAAM,CAAC,CAAC,IAAI,EAA4C,EAAE,CACzD,CAAC,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,CAAC;SACpC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,KAAK,MAAM,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;SACrF,IAAI,CAAC,GAAG,CAAC;SACT,IAAI,EAAE,CAAC;AACZ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,eAAe,CAAC,QAAyB,EAAE,KAAK,GAAG,EAAE;IACnE,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACrE,MAAM,WAAW,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;QACvC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5B,IAAI,OAAO,KAAK,EAAE,IAAI,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC;YAAE,OAAO,KAAK,CAAC;QAC5D,IAAI,YAAY,CAAC,OAAO,CAAC;YAAE,OAAO,KAAK,CAAC;QACxC,yEAAyE;QACzE,OAAO,OAAO,CAAC,MAAM,IAAI,EAAE,IAAI,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC;IAClE,CAAC,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,WAAW,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,IAAI,EAAE,CAAC;IACxE,OAAO,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,aAAa,CAAC;AAC9C,CAAC;AAED,uFAAuF;AACvF,MAAM,UAAU,IAAI,CAAC,IAAY,EAAE,KAAK,GAAG,EAAE;IAC3C,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;SAC/B,OAAO,CAAC,iBAAiB,EAAE,GAAG,CAAC;SAC/B,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC;SACvB,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC;SACpB,IAAI,EAAE,CAAC;IACV,IAAI,OAAO,CAAC,MAAM,IAAI,KAAK;QAAE,OAAO,OAAO,CAAC;IAC5C,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IACpC,MAAM,SAAS,GAAG,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IACvC,OAAO,CAAC,SAAS,GAAG,KAAK,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC;AACrG,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,WAAW,CAAC,QAAyB;IACnD,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC;SACjE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IACtD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACxC,MAAM,WAAW,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;IAClF,OAAO,WAAW,IAAI,QAAQ,CAAC,MAAM,IAAI,CAAC,CAAC;AAC7C,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,aAAa,CAAC,QAAyB,EAAE,IAAI,GAAG,CAAC;IAC/D,MAAM,QAAQ,GAAG,QAAQ;SACtB,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,IAAI,CAAC,CAAC,IAAI,KAAK,WAAW,CAAC;SACxD,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC;SACd,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,KAAK,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;SAC3E,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;SAC/B,IAAI,CAAC,IAAI,CAAC,CAAC;IAEd,OAAO,oFAAoF;UACvF,QAAQ;UACR,uFAAuF;UACvF,2FAA2F;UAC3F,uCAAuC,CAAC;AAC9C,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,WAAW,CAAC,MAAc,EAAE,KAAK,GAAG,EAAE;IACpD,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC;SAC/B,KAAK,CAAC,IAAI,CAAC;SACX,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;SACxB,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,KAAK,EAAE,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAC7D,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IAExB;;;;;;OAMG;IACH,MAAM,aAAa,GAAG,KAAK;SACxB,OAAO,CAAC,kBAAkB,EAAE,EAAE,CAAC;SAC/B,OAAO,CAAC,yCAAyC,EAAE,EAAE,CAAC;SACtD,IAAI,EAAE,CAAC;IACV,IAAI,aAAa,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,EAAE;QAAE,OAAO,IAAI,CAAC;IAExD,MAAM,OAAO,GAAG,IAAI,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAExE,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACpC,0EAA0E;IAC1E,IAAI,yEAAyE,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5F,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/web/api.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"api.d.ts","sourceRoot":"","sources":["../../src/web/api.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AASH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAuB/C,eAAO,MAAM,gBAAgB,OAAO,CAAC;AAGrC,MAAM,WAAW,UAAU;IACzB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,4EAA4E;IAC5E,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,oFAAoF;IACpF,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,mCAAmC;IACnC,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AA6BD,MAAM,WAAW,SAAS;IACxB,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CAC5B;AAED,wBAAsB,QAAQ,CAC5B,YAAY,EAAE,WAAW,EAAE,OAAO,GAAE,UAAe,GAClD,OAAO,CAAC,SAAS,CAAC,CAo0CpB"}
+{"version":3,"file":"api.d.ts","sourceRoot":"","sources":["../../src/web/api.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AASH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAuB/C,eAAO,MAAM,gBAAgB,OAAO,CAAC;AAGrC,MAAM,WAAW,UAAU;IACzB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,4EAA4E;IAC5E,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,oFAAoF;IACpF,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,mCAAmC;IACnC,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AA6BD,MAAM,WAAW,SAAS;IACxB,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CAC5B;AAED,wBAAsB,QAAQ,CAC5B,YAAY,EAAE,WAAW,EAAE,OAAO,GAAE,UAAe,GAClD,OAAO,CAAC,SAAS,CAAC,CA44CpB"}

package/dist/web/api.js

@@ -131,7 +131,7 @@ export async function startWeb(baseConfigIn, options = {}) {
             if (route === '/api/workspaces' && req.method === 'GET') {
                 if (!mayRead)
                     return json(res, 401, { error: 'token required' });
-                const trusted = await trustedWorkspaces().catch(() => []);
+                const trusted = await trustedWorkspaces(baseConfig.stateHome).catch(() => []);
                 // The launch directory is always offered even if it is not in the store, because getting
                 // this far means it was trusted or explicitly run with --ci.
                 const choices = [...new Set([baseConfig.cwd, ...trusted])];
@@ -213,6 +213,76 @@ export async function startWeb(baseConfigIn, options = {}) {
                     provider: info.provider,
                 });
             }
+            /*
+             * The computer's own folder dialog, opened by the server.
+             *
+             * A browser cannot do this: webkitdirectory and showDirectoryPicker both withhold the
+             * absolute path deliberately. The server can, because it is on the same machine as the files
+             * and reaching this route already requires loopback and the acting token.
+             *
+             * Loopback is load-bearing here rather than incidental: the dialog appears on the machine
+             * running KONECK, so a server bound to a network address would be putting a window on
+             * somebody else's screen and waiting for them to answer it.
+             */
+            if (route === '/api/pickfolder' && req.method === 'POST') {
+                if (!mayAct)
+                    return json(res, 401, { error: 'token required' });
+                if (!isLocal) {
+                    return json(res, 400, { error: 'This server is listening on a network address, so the dialog would open on the '
+                            + 'machine running KONECK rather than yours. Use the folder list instead.' });
+                }
+                const body = await readBody(req);
+                const { chooseFolder, dialogAvailable, hasDesktop } = await import('../folder-dialog.js');
+                if (!hasDesktop()) {
+                    return json(res, 200, { available: false, reason: 'This machine has no desktop session, so there is no dialog to show — KONECK is '
+                            + 'probably running over SSH. Use the folder list instead.' });
+                }
+                if (!(await dialogAvailable())) {
+                    return json(res, 200, { available: false, reason: 'No folder dialog is installed. On most desktops that is the zenity package, or '
+                            + 'kdialog on KDE. Use the folder list instead.' });
+                }
+                const chosen = await chooseFolder(String(body.startIn ?? '') || workspace, body.newFolder === true ? 'Choose where the new folder goes' : 'Open a project');
+                if (!chosen.ok) {
+                    // Dismissing a dialog is a decision, not a failure, and is reported as one.
+                    return json(res, 200, chosen.cancelled
+                        ? { available: true, cancelled: true }
+                        : { available: false, reason: chosen.reason });
+                }
+                return json(res, 200, { available: true, path: chosen.path });
+            }
+            /*
+             * A new folder, made where the dialog said.
+             *
+             * Its own step rather than part of the dialog, because a folder dialog chooses an existing
+             * folder — asking one to invent a name is asking it to be a save dialog, and the two behave
+             * differently on every platform.
+             */
+            if (route === '/api/newfolder' && req.method === 'POST') {
+                if (!mayAct)
+                    return json(res, 401, { error: 'token required' });
+                if (!isLocal)
+                    return json(res, 400, { error: 'not from a network address' });
+                const body = await readBody(req);
+                const inside = path.resolve(String(body.inside ?? '') || workspace);
+                const name = String(body.name ?? '').trim();
+                // A name, not a path: anything with a separator in it is somewhere else entirely.
+                if (!name || /[\\/]/.test(name) || name === '.' || name === '..') {
+                    return json(res, 400, { error: 'give the folder a name, without slashes in it' });
+                }
+                const made = path.join(inside, name);
+                const { mkdir } = await import('fs/promises');
+                try {
+                    await mkdir(made, { recursive: false });
+                }
+                catch (err) {
+                    const why = err.code === 'EEXIST'
+                        ? `${made} already exists`
+                        : `could not create ${made}`;
+                    return json(res, 400, { error: why });
+                }
+                announce(`  Folder created from the browser: ${made}`);
+                return json(res, 200, { path: made });
+            }
             if (route === '/api/browse' && req.method === 'GET') {
                 if (!mayRead)
                     return json(res, 401, { error: 'token required' });
@@ -282,9 +352,9 @@ export async function startWeb(baseConfigIn, options = {}) {
                             + 'through it. Switch workspace at a terminal.' });
                 }
                 const wasKnown = wanted === path.resolve(baseConfig.cwd)
-                    || await isWorkspaceTrusted(wanted).catch(() => false);
+                    || await isWorkspaceTrusted(wanted, baseConfig.stateHome).catch(() => false);
                 if (!wasKnown) {
-                    await trustWorkspace(wanted).catch(() => undefined);
+                    await trustWorkspace(wanted, baseConfig.stateHome).catch(() => undefined);
                     announce(`  Workspace opened from the browser, and trusted: ${wanted}`);
                 }
                 workspace = wanted;
@@ -342,7 +412,7 @@ export async function startWeb(baseConfigIn, options = {}) {
                 if (url.searchParams.get('scope') === 'workspace') {
                     return json(res, 200, await searchSessions(workspace, q));
                 }
-                const trusted = await trustedWorkspaces().catch(() => []);
+                const trusted = await trustedWorkspaces(baseConfig.stateHome).catch(() => []);
                 return json(res, 200, await searchAllWorkspaces([workspace, baseConfig.cwd, ...trusted], q));
             }
             if (route === '/api/sessions' && req.method === 'GET') {