pi-feats 0.1.4 → 0.1.5

package/extensions/pi-console-webui/components/profile-model-form.tsx

@@ -0,0 +1,54 @@
+"use client";
+
+import { useEffect, useMemo, useState } from "react";
+import { Loader2, RefreshCw, Save } from "lucide-react";
+import { Button } from "@/components/ui/button";
+import { Card, CardTitle } from "@/components/ui/card";
+import { useToast } from "@/components/toast";
+
+type Provider = { id: string; models: Array<{ id: string; name: string }> };
+type ModelCatalog = { providers: Provider[] };
+type ApplicationSession = { application: string; sessionPrefix: string; sessionId: string };
+
+export function ProfileModelForm({ profile, initial }: { profile: string; initial?: ModelCatalog & { settings?: Record<string, unknown> } }) {
+  const { toast } = useToast();
+  const [catalog, setCatalog] = useState<ModelCatalog>({ providers: initial?.providers ?? [] });
+  const [provider, setProvider] = useState(String(initial?.settings?.defaultProvider ?? initial?.providers[0]?.id ?? ""));
+  const models = useMemo(() => catalog.providers.find((item) => item.id === provider)?.models ?? [], [catalog, provider]);
+  const [model, setModel] = useState(String(initial?.settings?.defaultModel ?? ""));
+  const [loading, setLoading] = useState(!initial), [saving, setSaving] = useState(false), [rollingOver, setRollingOver] = useState(false);
+  const [rolloverDialog, setRolloverDialog] = useState(false), [activeSessions, setActiveSessions] = useState<ApplicationSession[]>([]);
+  const load = async () => { try { setLoading(true); const response = await fetch(`/api/pi/profiles/${encodeURIComponent(profile)}/model`); const body = await response.json(); if (!response.ok) throw new Error(body.error ?? "Unable to load models"); setCatalog(body); setProvider((current) => current && body.providers.some((item: Provider) => item.id === current) ? current : body.providers[0]?.id ?? ""); } catch (error) { toast((error as Error).message, "error"); } finally { setLoading(false); } };
+  useEffect(() => { if (!initial) { void load(); return; } setCatalog({ providers: initial.providers }); setProvider(String(initial.settings?.defaultProvider ?? initial.providers[0]?.id ?? "")); setModel(String(initial.settings?.defaultModel ?? "")); setLoading(false); }, [profile, initial]);
+  useEffect(() => { if (!models.some((item) => item.id === model)) setModel(models[0]?.id ?? ""); }, [models, model]);
+  const save = async () => {
+    if (!provider || !model || saving) return;
+    try {
+      setSaving(true);
+      const response = await fetch(`/api/pi/profiles/${encodeURIComponent(profile)}/model`, { method: "PUT", headers: { "content-type": "application/json" }, body: JSON.stringify({ provider, model }) });
+      const body = await response.json();
+      if (!response.ok) throw new Error(body.error ?? "Unable to save model");
+      const sessionsResponse = await fetch(`/api/pi/application-sessions?${new URLSearchParams({ profile })}`);
+      const sessionsBody = await sessionsResponse.json();
+      if (!sessionsResponse.ok) throw new Error(sessionsBody.error ?? "Model saved, but active sessions could not be loaded.");
+      const unique = new Map<string, ApplicationSession>();
+      for (const session of sessionsBody.sessions as ApplicationSession[]) unique.set(`${session.application}:${session.sessionPrefix}`, session);
+      setActiveSessions([...unique.values()]);
+      setRolloverDialog(true);
+    } catch (error) { toast((error as Error).message, "error"); } finally { setSaving(false); }
+  };
+  const later = () => { setRolloverDialog(false); toast("Model saved. It will be used by new sessions."); };
+  const rollover = async () => {
+    try {
+      setRollingOver(true);
+      const outcomes = await Promise.allSettled(activeSessions.map(async (session) => {
+        const response = await fetch(`/api/pi/applications/${encodeURIComponent(session.application)}/session-rollover`, { method: "POST", headers: { "content-type": "application/json" }, body: JSON.stringify({ profile, sessionPrefix: session.sessionPrefix }) });
+        if (!response.ok) { const body = await response.json().catch(() => ({})); throw new Error(body.error ?? "Unable to roll over session"); }
+      }));
+      const failed = outcomes.filter((outcome) => outcome.status === "rejected").length;
+      setRolloverDialog(false);
+      toast(failed ? `Model saved. ${activeSessions.length - failed} session(s) rolled over; ${failed} failed.` : "Model saved and active sessions rolled over.", failed ? "error" : "success");
+    } finally { setRollingOver(false); }
+  };
+  return <><Card><div className="flex flex-wrap items-center justify-between gap-3"><div><CardTitle>Model</CardTitle><p className="text-sm text-zinc-500">Choose the default provider and model for this profile.</p></div><Button className="!bg-[#2bbb77] hover:!bg-[#249b63]" title="Save model" disabled={loading || saving || !provider || !model} onClick={save}>{saving ? <Loader2 className="animate-spin" size={17}/> : <Save size={17}/>}</Button></div>{loading ? <div className="flex min-h-40 items-center justify-center gap-3 text-sm text-zinc-500"><Loader2 className="animate-spin" size={18}/>Loading models…</div> : <div className="mt-5 grid gap-4 md:grid-cols-2"><label className="grid gap-1.5 text-sm font-medium text-zinc-700">Provider<select className="rounded-md border border-zinc-200 px-3 py-2 font-normal" value={provider} onChange={(event) => setProvider(event.target.value)} disabled={catalog.providers.length === 0}>{catalog.providers.map((item) => <option key={item.id} value={item.id}>{item.id}</option>)}</select></label><label className="grid gap-1.5 text-sm font-medium text-zinc-700">Model<select className="rounded-md border border-zinc-200 px-3 py-2 font-normal" value={model} onChange={(event) => setModel(event.target.value)} disabled={models.length === 0}>{models.map((item) => <option key={item.id} value={item.id}>{item.name === item.id ? item.id : `${item.name} (${item.id})`}</option>)}</select></label>{catalog.providers.length === 0 && <p className="text-sm text-zinc-500 md:col-span-2">No models are available for this profile.</p>}</div>}</Card>{rolloverDialog && <div className="fixed inset-0 z-50 grid place-items-center bg-black/30 p-4" role="dialog" aria-modal="true" aria-labelledby="rollover-title"><Card className="w-full max-w-lg"><h2 id="rollover-title" className="text-lg font-semibold">Roll over active sessions?</h2><p className="mt-2 text-sm text-zinc-600">The new model is saved and will be used by new sessions. Roll over active Application sessions now so they start using this model.</p>{activeSessions.length > 0 ? <ul className="mt-4 max-h-40 space-y-1 overflow-auto rounded-md border border-zinc-200 bg-zinc-50 p-3 text-sm text-zinc-600">{activeSessions.map((session) => <li key={`${session.application}:${session.sessionPrefix}`}><span className="font-medium text-zinc-800">{session.application}</span> · {session.sessionPrefix}</li>)}</ul> : <p className="mt-4 text-sm text-zinc-500">There are no active Application sessions for this profile.</p>}<div className="mt-6 flex justify-end gap-2">{activeSessions.length > 0 && <Button className="!bg-[#2bbb77] hover:!bg-[#249b63]" title="Roll over active sessions" disabled={rollingOver} onClick={() => void rollover()}>{rollingOver ? <Loader2 className="animate-spin" size={17}/> : <RefreshCw size={17}/>}<span className="ml-2">Roll over now</span></Button>}<Button className="bg-zinc-100 text-zinc-700 hover:bg-zinc-200" title={activeSessions.length > 0 ? "Roll over later" : "Close"} disabled={rollingOver} onClick={later}>{activeSessions.length > 0 ? "Later" : "Close"}</Button></div></Card></div>}</>;
+}

package/extensions/pi-console-webui/components/pulse-resources.tsx

@@ -9,12 +9,12 @@ import { Input } from "@/components/ui/input";
 import { Switch } from "@/components/ui/switch";
 import { useToast } from "@/components/toast";
 
-type Pulse = { id: string; name: string; description: string; type: "cron" | "heartbeat"; schedule: string; prompt: string; thread_session_id: string; result: string | null; enabled: boolean; nextRunAt: string | null; lastRunAt: string | null };
+type Pulse = { id: string; name: string; description: string; type: "cron" | "heartbeat"; schedule: string; prompt: string; thread_session_id: string; insertIntoApiSession: boolean; result: string | null; enabled: boolean; nextRunAt: string | null; lastRunAt: string | null };
 type HistoryPulse = Pulse & { startedAt: string; finishedAt: string | null; status: string; error: string | null };
 type PulseRun = { id: string; startedAt: string; finishedAt: string | null; status: "running" | "success" | "error"; response: string | null; error: string | null };
 type Session = { id: string; name?: string | null };
-type Form = { name: string; description: string; schedule: string; prompt: string; thread_session_id: string; enabled: boolean };
-const blank = (): Form => ({ name: "", description: "", schedule: "*/15 * * * *", prompt: "", thread_session_id: "", enabled: true });
+type Form = { name: string; description: string; schedule: string; prompt: string; thread_session_id: string; insertIntoApiSession: boolean; enabled: boolean };
+const blank = (): Form => ({ name: "", description: "", schedule: "*/15 * * * *", prompt: "", thread_session_id: "", insertIntoApiSession: false, enabled: true });
 function localDateTime(value: Date): string { const pad = (part: number) => String(part).padStart(2, "0"); return `${value.getFullYear()}-${pad(value.getMonth() + 1)}-${pad(value.getDate())}T${pad(value.getHours())}:${pad(value.getMinutes())}`; }
 function scheduleDescription(schedule: string): { type: Pulse["type"]; text: string } {
   if (schedule.startsWith("@once:")) return { type: "cron", text: `Runs once at ${schedule.slice(6)}.` };
@@ -38,8 +38,8 @@ export function PulseResources({ profile, initial }: { profile: string; initial?
   useEffect(() => { void load(); }, [profile]);
   const close = () => { setDialog(undefined); setEditing(undefined); }; 
   const create = () => { setForm(blank()); setEditing(undefined); setDialog("create"); };
-  const edit = (pulse: Pulse) => { setEditing(pulse); setForm({ name: pulse.name, description: pulse.description, schedule: pulse.schedule, prompt: pulse.prompt, thread_session_id: pulse.thread_session_id, enabled: pulse.enabled }); setDialog("edit"); };
+  const edit = (pulse: Pulse) => { setEditing(pulse); setForm({ name: pulse.name, description: pulse.description, schedule: pulse.schedule, prompt: pulse.prompt, thread_session_id: pulse.thread_session_id, insertIntoApiSession: pulse.insertIntoApiSession, enabled: pulse.enabled }); setDialog("edit"); };
   const valid = /^[A-Za-z][A-Za-z0-9_-]{0,63}$/.test(form.name) && Boolean(form.description.trim() && form.schedule.trim() && form.prompt.trim());
   const save = async () => { if (!valid || saving) return; try { setSaving(true); const { enabled, ...payload } = form; const response = await request(`profiles/${profile}/pulses${editing ? `/${encodeURIComponent(editing.name)}` : ""}`, { method: editing ? "PUT" : "POST", body: JSON.stringify(payload) }); const saved = await response.json() as { pulse: Pulse }; if (saved.pulse.enabled !== enabled) await request(`profiles/${profile}/pulses/${encodeURIComponent(saved.pulse.name)}`, { method: "PATCH", body: JSON.stringify({ enabled }) }); await load(); toast(editing ? "Pulse saved." : `Pulse created and ${enabled ? "enabled" : "disabled"}.`); close(); } catch (cause) { toast((cause as Error).message, "error"); } finally { setSaving(false); } };
-  return <><Card><div className="flex flex-wrap items-center justify-between gap-3"><div><CardTitle>Pulses</CardTitle><p className="mt-1 text-sm text-zinc-500">Scheduled cron jobs and stateful heartbeats, executed by the Pulse Tick service.</p></div><div className="flex items-center gap-3"><label className="mr-6 flex items-center gap-2 text-sm font-medium text-zinc-600"><Switch className="data-[state=checked]:!bg-[#00b9ed]" checked={tickRunning} onCheckedChange={async (enabled) => { try { const response = await request("pulse/tick", { method: "POST", body: JSON.stringify({ enabled }) }); const data = await response.json() as { running: boolean }; setTickRunning(data.running); toast(`Pulse Tick ${data.running ? "started" : "stopped"}.`); } catch (cause) { toast((cause as Error).message, "error"); } }}/><span>Pulse Service</span></label><label className="flex items-center gap-2 text-sm font-medium text-zinc-600"><Switch className="data-[state=checked]:!bg-[#00b9ed]" checked={showHistory} onCheckedChange={setShowHistory}/><span>Show History</span></label><Button className="bg-zinc-100 text-zinc-700 hover:bg-zinc-200" title="Reload pulses" onClick={() => void load()}><RotateCw size={17}/></Button><Button title="Add pulse" onClick={create}><Plus size={17}/></Button></div></div><div className="mt-5 overflow-x-auto"><table className="w-full text-left text-sm"><thead className="border-b border-zinc-200 text-zinc-500"><tr><th className="p-3">Name</th><th className="p-3">Type</th><th className="p-3">Schedule</th><th className="p-3">Thread session</th><th className="p-3">Next run</th><th className="p-3">Enabled</th><th className="p-3"/></tr></thead><tbody>{items.filter((item) => showHistory || !(item.schedule.startsWith("@once:") && item.lastRunAt)).map((item) => <Fragment key={item.id}><tr className="border-b border-zinc-100"><td className="p-3"><p className="font-medium">{item.name}</p><p className="max-w-sm truncate text-xs text-zinc-500">{item.description}</p></td><td className="p-3"><span className={`inline-flex rounded-md border px-2.5 py-1 text-xs font-medium ${item.type === "heartbeat" ? "border-emerald-200 bg-emerald-50 text-emerald-800" : "border-blue-200 bg-blue-50 text-blue-800"}`}>{item.type === "heartbeat" ? "Heartbeat" : "Cron"}</span></td><td className="p-3 font-mono text-xs">{item.schedule}</td><td className="p-3 font-mono text-xs">{item.thread_session_id}</td><td className="p-3 text-xs text-zinc-500">{item.nextRunAt ?? "—"}</td><td className="p-3"><Switch checked={item.enabled} onCheckedChange={async (enabled) => { try { await request(`profiles/${profile}/pulses/${encodeURIComponent(item.name)}`, { method: "PATCH", body: JSON.stringify({ enabled }) }); await load(); toast(`Pulse ${enabled ? "enabled" : "disabled"}.`); } catch (cause) { toast((cause as Error).message, "error"); } }}/></td><td className="whitespace-nowrap p-3"><button className="rounded p-2 text-zinc-400 hover:bg-zinc-100 hover:text-zinc-900" title={expanded === item.id ? "Hide last result" : "Show last result"} onClick={() => setExpanded((current) => current === item.id ? undefined : item.id)}>{expanded === item.id ? <ChevronDown size={17}/> : <ChevronRight size={17}/>}</button><button className="rounded p-2 text-zinc-400 hover:bg-zinc-100 hover:text-zinc-900" title={`View execution logs for ${item.name}`} onClick={() => openLogs(item)}><ScrollText size={17}/></button><button className="rounded p-2 text-zinc-400 hover:bg-zinc-100 hover:text-zinc-900" title={`Edit ${item.name}`} onClick={() => edit(item)}><FilePenLine size={17}/></button><button className="rounded p-2 text-zinc-400 hover:bg-red-50 hover:text-red-600" title={`Delete ${item.name}`} onClick={async () => { if (!confirm(`Delete pulse '${item.name}'?`)) return; try { await request(`profiles/${profile}/pulses/${encodeURIComponent(item.name)}`, { method: "DELETE" }); await load(); toast("Pulse deleted."); } catch (cause) { toast((cause as Error).message, "error"); } }}><Trash2 size={17}/></button></td></tr>{expanded === item.id && <tr className="border-b border-zinc-100 bg-zinc-50"><td colSpan={7} className="p-4"><p className="mb-2 text-xs font-semibold uppercase tracking-wide text-zinc-500">Last result</p>{item.result ? <pre className="max-h-64 overflow-auto whitespace-pre-wrap break-words rounded-lg border border-zinc-200 bg-white p-3 font-mono text-xs text-zinc-800">{item.result}</pre> : <p className="text-sm text-zinc-500">No result available yet.</p>}</td></tr>}</Fragment>)}{!items.filter((item) => showHistory || !(item.schedule.startsWith("@once:") && item.lastRunAt)).length && <tr><td colSpan={7} className="p-5 text-zinc-500">No pulses are configured for this view.</td></tr>}</tbody></table></div></Card>{logPulse && <div className="fixed inset-0 z-50 grid place-items-center bg-black/30 p-4" role="dialog" aria-modal="true" aria-labelledby="pulse-logs-title"><div className="max-h-[90vh] w-full max-w-5xl overflow-y-auto rounded-xl bg-white p-6 shadow-2xl"><header className="mb-5 flex items-start justify-between gap-4"><div><h2 id="pulse-logs-title" className="text-xl font-semibold">Execution logs — {logPulse.name}</h2><p className="mt-1 text-sm text-zinc-500">Results recorded by the Pulse Tick service.</p></div><Button className="bg-zinc-100 text-zinc-700 hover:bg-zinc-200" title="Close execution logs" onClick={() => setLogPulse(undefined)}><X size={17}/></Button></header><div className="mb-5 grid gap-3 md:grid-cols-[1fr_1fr_auto_auto]"><label className="grid gap-1 text-sm font-medium text-zinc-700">Start<Input type="datetime-local" value={logStart} onChange={(event) => setLogStart(event.target.value)}/></label><label className="grid gap-1 text-sm font-medium text-zinc-700">End<Input type="datetime-local" value={logEnd} onChange={(event) => setLogEnd(event.target.value)}/></label><Button className="self-end" disabled={logsLoading} onClick={() => void loadRuns()}>{logsLoading ? <Loader2 className="animate-spin" size={17}/> : "Apply filters"}</Button><Button className="self-end bg-zinc-100 text-zinc-700 hover:bg-zinc-200" title="Refresh execution logs" disabled={logsLoading} onClick={() => void loadRuns()}><RotateCw className={logsLoading ? "animate-spin" : ""} size={17}/></Button></div>{logsLoading && !runs ? <div className="py-12 text-center text-sm text-zinc-500">Loading execution logs…</div> : runs?.length ? <div className="space-y-3">{runs.map((run) => <article key={run.id} className="rounded-lg border border-zinc-200 p-4"><div className="flex flex-wrap items-center justify-between gap-3"><div><p className="font-medium">{new Date(run.startedAt).toLocaleString()}</p><p className="text-xs text-zinc-500">{run.finishedAt ? `Duration: ${Math.max(0, new Date(run.finishedAt).getTime() - new Date(run.startedAt).getTime()) / 1000}s` : "Still running"}</p></div><span className={`rounded-md px-2 py-1 text-xs font-medium ${run.status === "success" ? "bg-emerald-50 text-emerald-800" : run.status === "error" ? "bg-red-50 text-red-800" : "bg-amber-50 text-amber-800"}`}>{run.status}</span></div>{run.response && <pre className="mt-3 max-h-64 overflow-auto whitespace-pre-wrap break-words rounded-lg border border-zinc-200 bg-zinc-50 p-3 font-mono text-xs text-zinc-800">{run.response}</pre>}{run.error && <pre className="mt-3 max-h-64 overflow-auto whitespace-pre-wrap break-words rounded-lg border border-red-200 bg-red-50 p-3 font-mono text-xs text-red-800">{run.error}</pre>}</article>)}</div> : <div className="py-12 text-center text-sm text-zinc-500">No executions were recorded in this period.</div>}</div></div>}{history && <div className="fixed inset-0 z-50 grid place-items-center bg-black/30 p-4" role="dialog" aria-modal="true"><div className="max-h-[90vh] w-full max-w-4xl overflow-y-auto rounded-xl bg-white p-6 shadow-2xl"><header className="mb-5 flex items-start justify-between gap-4"><div><h2 className="text-xl font-semibold">Completed one-time jobs</h2><p className="mt-1 text-sm text-zinc-500">Executed jobs with an <code>@once</code> schedule.</p></div><Button className="bg-zinc-100 text-zinc-700 hover:bg-zinc-200" title="Close history" onClick={() => setHistory(undefined)}><X size={17}/></Button></header>{history.length ? <div className="space-y-3">{history.map((item) => <article key={item.id} className="rounded-lg border border-zinc-200 p-4"><div className="flex flex-wrap items-center justify-between gap-2"><div><p className="font-medium">{item.name}</p><p className="text-xs text-zinc-500">{item.description}</p></div><span className={`rounded-md px-2 py-1 text-xs font-medium ${item.status === "success" ? "bg-emerald-50 text-emerald-800" : "bg-red-50 text-red-800"}`}>{item.status}</span></div><p className="mt-3 text-xs text-zinc-500">Executed: {item.finishedAt ?? item.startedAt}</p>{item.result && <pre className="mt-3 max-h-48 overflow-auto whitespace-pre-wrap break-words rounded-lg bg-zinc-50 p-3 font-mono text-xs">{item.result}</pre>}{item.error && <pre className="mt-3 max-h-48 overflow-auto whitespace-pre-wrap break-words rounded-lg bg-red-50 p-3 font-mono text-xs text-red-800">{item.error}</pre>}</article>)}</div> : <p className="py-10 text-center text-sm text-zinc-500">No completed one-time jobs yet.</p>}</div></div>}{dialog && <div className="fixed inset-0 z-50 grid place-items-center bg-black/30 p-4" role="dialog" aria-modal="true"><div className="max-h-[94vh] w-full max-w-3xl overflow-y-auto rounded-xl bg-white p-6 shadow-2xl"><header className="mb-6 flex items-start justify-between gap-4"><div><h2 className="text-xl font-semibold">{dialog === "create" ? "Create pulse" : `Edit ${editing?.name}`}</h2><p className="mt-1 text-sm text-zinc-500">Heartbeats retain state and must repeat in less than four hours. Cron jobs do not retain state.</p></div><div className="flex gap-2"><Button className="!bg-[#2bbb77] hover:!bg-[#249b63]" title="Save pulse" disabled={!valid || saving} onClick={() => void save()}>{saving ? <Loader2 className="animate-spin" size={17}/> : <Check size={17}/>}</Button><Button className="bg-zinc-100 text-zinc-700 hover:bg-zinc-200" title="Close" onClick={close}><X size={17}/></Button></div></header><div className="grid gap-5 md:grid-cols-2"><label className="grid content-start gap-1.5 text-sm font-semibold md:col-span-2">Name<Input disabled={dialog === "edit"} value={form.name} onChange={(event) => setForm({ ...form, name: event.target.value })} placeholder="e.g. daily-report"/></label><label className="grid gap-1.5 text-sm font-semibold md:col-span-2">Description<Input value={form.description} onChange={(event) => setForm({ ...form, description: event.target.value })} placeholder="What this pulse is responsible for"/></label><label className="grid content-start gap-1.5 text-sm font-semibold">Schedule<Input value={form.schedule} onChange={(event) => setForm({ ...form, schedule: event.target.value })} placeholder="*/15 * * * * or @once:2026-03-12T14:30:00Z"/><span className="text-xs font-normal text-zinc-500">{scheduleDescription(form.schedule).text}</span></label><label className="grid content-start gap-1.5 text-sm font-semibold">Type<Input readOnly value={scheduleDescription(form.schedule).type === "heartbeat" ? "Heartbeat" : "Cron"} className={scheduleDescription(form.schedule).type === "heartbeat" ? "border-emerald-200 bg-emerald-50 text-emerald-800" : "border-blue-200 bg-blue-50 text-blue-800"}/><span className="text-xs font-normal text-zinc-500">Calculated automatically from the schedule.</span></label><label className="flex items-center gap-3 text-sm font-semibold md:col-span-2"><Switch checked={form.enabled} onCheckedChange={(enabled) => setForm({ ...form, enabled })}/><span>Enabled</span><span className="font-normal text-zinc-500">Run this pulse when the Pulse Tick service is active.</span></label>{editing?.thread_session_id && <label className="grid gap-1.5 text-sm font-semibold md:col-span-2">Thread session<Input readOnly value={editing.thread_session_id}/><span className="text-xs font-normal text-zinc-500">This pulse was registered from this conversation and receives its results there.</span></label>}<section className="grid gap-1.5 md:col-span-2"><label className="text-sm font-semibold">Prompt</label><p className="text-xs text-zinc-500">Markdown instructions executed on every pulse.</p><div className="overflow-hidden rounded-md border border-zinc-200"><CodeMirror value={form.prompt} height="300px" extensions={[markdown()]} onChange={(prompt) => setForm({ ...form, prompt })}/></div></section></div></div></div>}</>;
+  return <><Card><div className="flex flex-wrap items-center justify-between gap-3"><div><CardTitle>Pulses</CardTitle><p className="mt-1 text-sm text-zinc-500">Scheduled cron jobs and stateful heartbeats, executed by the Pulse Tick service.</p></div><div className="flex items-center gap-3"><label className="mr-6 flex items-center gap-2 text-sm font-medium text-zinc-600"><Switch className="data-[state=checked]:!bg-[#00b9ed]" checked={tickRunning} onCheckedChange={async (enabled) => { try { const response = await request("pulse/tick", { method: "POST", body: JSON.stringify({ enabled }) }); const data = await response.json() as { running: boolean }; setTickRunning(data.running); toast(`Pulse Tick ${data.running ? "started" : "stopped"}.`); } catch (cause) { toast((cause as Error).message, "error"); } }}/><span>Pulse Service</span></label><label className="flex items-center gap-2 text-sm font-medium text-zinc-600"><Switch className="data-[state=checked]:!bg-[#00b9ed]" checked={showHistory} onCheckedChange={setShowHistory}/><span>Show History</span></label><Button className="bg-zinc-100 text-zinc-700 hover:bg-zinc-200" title="Reload pulses" onClick={() => void load()}><RotateCw size={17}/></Button><Button title="Add pulse" onClick={create}><Plus size={17}/></Button></div></div><div className="mt-5 overflow-x-auto"><table className="w-full text-left text-sm"><thead className="border-b border-zinc-200 text-zinc-500"><tr><th className="p-3">Name</th><th className="p-3">Type</th><th className="p-3">Schedule</th><th className="p-3">Thread session</th><th className="p-3">Next run</th><th className="p-3">Enabled</th><th className="p-3"/></tr></thead><tbody>{items.filter((item) => showHistory || !(item.schedule.startsWith("@once:") && item.lastRunAt)).map((item) => <Fragment key={item.id}><tr className="border-b border-zinc-100"><td className="p-3"><p className="font-medium">{item.name}</p><p className="max-w-sm truncate text-xs text-zinc-500">{item.description}</p></td><td className="p-3"><span className={`inline-flex rounded-md border px-2.5 py-1 text-xs font-medium ${item.type === "heartbeat" ? "border-emerald-200 bg-emerald-50 text-emerald-800" : "border-blue-200 bg-blue-50 text-blue-800"}`}>{item.type === "heartbeat" ? "Heartbeat" : "Cron"}</span></td><td className="p-3 font-mono text-xs">{item.schedule}</td><td className="p-3 font-mono text-xs">{item.thread_session_id}</td><td className="p-3 text-xs text-zinc-500">{item.nextRunAt ?? "—"}</td><td className="p-3"><Switch checked={item.enabled} onCheckedChange={async (enabled) => { try { await request(`profiles/${profile}/pulses/${encodeURIComponent(item.name)}`, { method: "PATCH", body: JSON.stringify({ enabled }) }); await load(); toast(`Pulse ${enabled ? "enabled" : "disabled"}.`); } catch (cause) { toast((cause as Error).message, "error"); } }}/></td><td className="whitespace-nowrap p-3"><button className="rounded p-2 text-zinc-400 hover:bg-zinc-100 hover:text-zinc-900" title={expanded === item.id ? "Hide last result" : "Show last result"} onClick={() => setExpanded((current) => current === item.id ? undefined : item.id)}>{expanded === item.id ? <ChevronDown size={17}/> : <ChevronRight size={17}/>}</button><button className="rounded p-2 text-zinc-400 hover:bg-zinc-100 hover:text-zinc-900" title={`View execution logs for ${item.name}`} onClick={() => openLogs(item)}><ScrollText size={17}/></button><button className="rounded p-2 text-zinc-400 hover:bg-zinc-100 hover:text-zinc-900" title={`Edit ${item.name}`} onClick={() => edit(item)}><FilePenLine size={17}/></button><button className="rounded p-2 text-zinc-400 hover:bg-red-50 hover:text-red-600" title={`Delete ${item.name}`} onClick={async () => { if (!confirm(`Delete pulse '${item.name}'?`)) return; try { await request(`profiles/${profile}/pulses/${encodeURIComponent(item.name)}`, { method: "DELETE" }); await load(); toast("Pulse deleted."); } catch (cause) { toast((cause as Error).message, "error"); } }}><Trash2 size={17}/></button></td></tr>{expanded === item.id && <tr className="border-b border-zinc-100 bg-zinc-50"><td colSpan={7} className="p-4"><p className="mb-2 text-xs font-semibold uppercase tracking-wide text-zinc-500">Last result</p>{item.result ? <pre className="max-h-64 overflow-auto whitespace-pre-wrap break-words rounded-lg border border-zinc-200 bg-white p-3 font-mono text-xs text-zinc-800">{item.result}</pre> : <p className="text-sm text-zinc-500">No result available yet.</p>}</td></tr>}</Fragment>)}{!items.filter((item) => showHistory || !(item.schedule.startsWith("@once:") && item.lastRunAt)).length && <tr><td colSpan={7} className="p-5 text-zinc-500">No pulses are configured for this view.</td></tr>}</tbody></table></div></Card>{logPulse && <div className="fixed inset-0 z-50 grid place-items-center bg-black/30 p-4" role="dialog" aria-modal="true" aria-labelledby="pulse-logs-title"><div className="max-h-[90vh] w-full max-w-5xl overflow-y-auto rounded-xl bg-white p-6 shadow-2xl"><header className="mb-5 flex items-start justify-between gap-4"><div><h2 id="pulse-logs-title" className="text-xl font-semibold">Execution logs — {logPulse.name}</h2><p className="mt-1 text-sm text-zinc-500">Results recorded by the Pulse Tick service.</p></div><Button className="bg-zinc-100 text-zinc-700 hover:bg-zinc-200" title="Close execution logs" onClick={() => setLogPulse(undefined)}><X size={17}/></Button></header><div className="mb-5 grid gap-3 md:grid-cols-[1fr_1fr_auto_auto]"><label className="grid gap-1 text-sm font-medium text-zinc-700">Start<Input type="datetime-local" value={logStart} onChange={(event) => setLogStart(event.target.value)}/></label><label className="grid gap-1 text-sm font-medium text-zinc-700">End<Input type="datetime-local" value={logEnd} onChange={(event) => setLogEnd(event.target.value)}/></label><Button className="self-end" disabled={logsLoading} onClick={() => void loadRuns()}>{logsLoading ? <Loader2 className="animate-spin" size={17}/> : "Apply filters"}</Button><Button className="self-end bg-zinc-100 text-zinc-700 hover:bg-zinc-200" title="Refresh execution logs" disabled={logsLoading} onClick={() => void loadRuns()}><RotateCw className={logsLoading ? "animate-spin" : ""} size={17}/></Button></div>{logsLoading && !runs ? <div className="py-12 text-center text-sm text-zinc-500">Loading execution logs…</div> : runs?.length ? <div className="space-y-3">{runs.map((run) => <article key={run.id} className="rounded-lg border border-zinc-200 p-4"><div className="flex flex-wrap items-center justify-between gap-3"><div><p className="font-medium">{new Date(run.startedAt).toLocaleString()}</p><p className="text-xs text-zinc-500">{run.finishedAt ? `Duration: ${Math.max(0, new Date(run.finishedAt).getTime() - new Date(run.startedAt).getTime()) / 1000}s` : "Still running"}</p></div><span className={`rounded-md px-2 py-1 text-xs font-medium ${run.status === "success" ? "bg-emerald-50 text-emerald-800" : run.status === "error" ? "bg-red-50 text-red-800" : "bg-amber-50 text-amber-800"}`}>{run.status}</span></div>{run.response && <pre className="mt-3 max-h-64 overflow-auto whitespace-pre-wrap break-words rounded-lg border border-zinc-200 bg-zinc-50 p-3 font-mono text-xs text-zinc-800">{run.response}</pre>}{run.error && <pre className="mt-3 max-h-64 overflow-auto whitespace-pre-wrap break-words rounded-lg border border-red-200 bg-red-50 p-3 font-mono text-xs text-red-800">{run.error}</pre>}</article>)}</div> : <div className="py-12 text-center text-sm text-zinc-500">No executions were recorded in this period.</div>}</div></div>}{history && <div className="fixed inset-0 z-50 grid place-items-center bg-black/30 p-4" role="dialog" aria-modal="true"><div className="max-h-[90vh] w-full max-w-4xl overflow-y-auto rounded-xl bg-white p-6 shadow-2xl"><header className="mb-5 flex items-start justify-between gap-4"><div><h2 className="text-xl font-semibold">Completed one-time jobs</h2><p className="mt-1 text-sm text-zinc-500">Executed jobs with an <code>@once</code> schedule.</p></div><Button className="bg-zinc-100 text-zinc-700 hover:bg-zinc-200" title="Close history" onClick={() => setHistory(undefined)}><X size={17}/></Button></header>{history.length ? <div className="space-y-3">{history.map((item) => <article key={item.id} className="rounded-lg border border-zinc-200 p-4"><div className="flex flex-wrap items-center justify-between gap-2"><div><p className="font-medium">{item.name}</p><p className="text-xs text-zinc-500">{item.description}</p></div><span className={`rounded-md px-2 py-1 text-xs font-medium ${item.status === "success" ? "bg-emerald-50 text-emerald-800" : "bg-red-50 text-red-800"}`}>{item.status}</span></div><p className="mt-3 text-xs text-zinc-500">Executed: {item.finishedAt ?? item.startedAt}</p>{item.result && <pre className="mt-3 max-h-48 overflow-auto whitespace-pre-wrap break-words rounded-lg bg-zinc-50 p-3 font-mono text-xs">{item.result}</pre>}{item.error && <pre className="mt-3 max-h-48 overflow-auto whitespace-pre-wrap break-words rounded-lg bg-red-50 p-3 font-mono text-xs text-red-800">{item.error}</pre>}</article>)}</div> : <p className="py-10 text-center text-sm text-zinc-500">No completed one-time jobs yet.</p>}</div></div>}{dialog && <div className="fixed inset-0 z-50 grid place-items-center bg-black/30 p-4" role="dialog" aria-modal="true"><div className="max-h-[94vh] w-full max-w-3xl overflow-y-auto rounded-xl bg-white p-6 shadow-2xl"><header className="mb-6 flex items-start justify-between gap-4"><div><h2 className="text-xl font-semibold">{dialog === "create" ? "Create pulse" : `Edit ${editing?.name}`}</h2><p className="mt-1 text-sm text-zinc-500">Heartbeats retain state and must repeat in less than four hours. Cron jobs do not retain state.</p></div><div className="flex gap-2"><Button className="!bg-[#2bbb77] hover:!bg-[#249b63]" title="Save pulse" disabled={!valid || saving} onClick={() => void save()}>{saving ? <Loader2 className="animate-spin" size={17}/> : <Check size={17}/>}</Button><Button className="bg-zinc-100 text-zinc-700 hover:bg-zinc-200" title="Close" onClick={close}><X size={17}/></Button></div></header><div className="grid gap-5 md:grid-cols-2"><label className="grid content-start gap-1.5 text-sm font-semibold md:col-span-2">Name<Input disabled={dialog === "edit"} value={form.name} onChange={(event) => setForm({ ...form, name: event.target.value })} placeholder="e.g. daily-report"/></label><label className="grid gap-1.5 text-sm font-semibold md:col-span-2">Description<Input value={form.description} onChange={(event) => setForm({ ...form, description: event.target.value })} placeholder="What this pulse is responsible for"/></label><label className="grid content-start gap-1.5 text-sm font-semibold">Schedule<Input value={form.schedule} onChange={(event) => setForm({ ...form, schedule: event.target.value })} placeholder="*/15 * * * * or @once:2026-03-12T14:30:00Z"/><span className="text-xs font-normal text-zinc-500">{scheduleDescription(form.schedule).text}</span></label><label className="grid content-start gap-1.5 text-sm font-semibold">Type<Input readOnly value={scheduleDescription(form.schedule).type === "heartbeat" ? "Heartbeat" : "Cron"} className={scheduleDescription(form.schedule).type === "heartbeat" ? "border-emerald-200 bg-emerald-50 text-emerald-800" : "border-blue-200 bg-blue-50 text-blue-800"}/><span className="text-xs font-normal text-zinc-500">Calculated automatically from the schedule.</span></label><label className="flex items-center gap-3 text-sm font-semibold md:col-span-2"><Switch checked={form.insertIntoApiSession} onCheckedChange={(insertIntoApiSession) => setForm({ ...form, insertIntoApiSession })}/><span>Insert result into active API sessions</span><span className="font-normal text-zinc-500">Records the result in every active Application session for this profile; it does not send through an outbound handler.</span></label><label className="flex items-center gap-3 text-sm font-semibold md:col-span-2"><Switch checked={form.enabled} onCheckedChange={(enabled) => setForm({ ...form, enabled })}/><span>Enabled</span><span className="font-normal text-zinc-500">Run this pulse when the Pulse Tick service is active.</span></label>{editing?.thread_session_id && <label className="grid gap-1.5 text-sm font-semibold md:col-span-2">Thread session<Input readOnly value={editing.thread_session_id}/><span className="text-xs font-normal text-zinc-500">This pulse was registered from this conversation and receives its results there.</span></label>}<section className="grid gap-1.5 md:col-span-2"><label className="text-sm font-semibold">Prompt</label><p className="text-xs text-zinc-500">Markdown instructions executed on every pulse.</p><div className="overflow-hidden rounded-md border border-zinc-200"><CodeMirror value={form.prompt} height="300px" extensions={[markdown()]} onChange={(prompt) => setForm({ ...form, prompt })}/></div></section></div></div></div>}</>;
 }

package/extensions/pi-console-webui/lib/admin-models.ts

@@ -0,0 +1,36 @@
+import { chmod, readFile, rename, rm, writeFile } from "node:fs/promises";
+import { randomUUID } from "node:crypto";
+import { homedir } from "node:os";
+import { join } from "node:path";
+import { ModelRuntime } from "@earendil-works/pi-coding-agent";
+
+const agentDir = () => process.env.PI_CODING_AGENT_DIR ?? join(homedir(), ".pi", "agent");
+const modelsPath = () => join(agentDir(), "models.json");
+const emptyModels = "{\n  \"providers\": {}\n}\n";
+
+export async function readModelsConfig() {
+  try {
+    return await readFile(modelsPath(), "utf8");
+  } catch (error) {
+    if ((error as NodeJS.ErrnoException).code === "ENOENT") return emptyModels;
+    throw error;
+  }
+}
+
+export async function writeModelsConfig(content: unknown) {
+  if (typeof content !== "string") throw new Error("models.json content must be a string.");
+  const path = modelsPath();
+  const temporary = `${path}.tmp-${process.pid}-${randomUUID()}`;
+  try {
+    await writeFile(temporary, content.endsWith("\n") ? content : `${content}\n`, { encoding: "utf8", mode: 0o600 });
+    await chmod(temporary, 0o600);
+    const runtime = await ModelRuntime.create({ modelsPath: temporary, refreshOnCreate: false });
+    const error = runtime.getError();
+    if (error) throw new Error(error.replace(/\n\nFile: .*$/, ""));
+    await rename(temporary, path);
+    await chmod(path, 0o600);
+    return readModelsConfig();
+  } finally {
+    await rm(temporary, { force: true }).catch(() => {});
+  }
+}

package/extensions/pi-console-webui/lib/page-metadata.ts

@@ -5,6 +5,7 @@ const sectionLabels: Record<string, string> = {
   chat: "Chat",
   profiles: "Profiles",
   settings: "Settings",
+  model: "Model",
   env: "Environment",
   soul: "SOUL",
   "context-memory": "Context Memory",
@@ -15,12 +16,13 @@ const sectionLabels: Record<string, string> = {
   pulses: "Pulses",
   extensions: "Extensions",
   applications: "Applications",
+  models: "Models",
   "api-server": "API Server",
   "pi-console-webui": "Console WebUI",
   "skill-sources": "Skill Sources",
 };
 
-const administrativeSections = new Set(["applications", "api-server", "pi-console-webui", "skill-sources"]);
+const administrativeSections = new Set(["applications", "models", "api-server", "pi-console-webui", "skill-sources"]);
 
 export function sectionMetadata(section: string, profile?: string): Metadata {
   const label = sectionLabels[section] ?? "Pi Console";

package/extensions/pi-console-webui/next.config.js

@@ -3,6 +3,7 @@ const appRoot = __dirname;
 
 module.exports = {
   outputFileTracingRoot: join(__dirname, "../.."),
+  serverExternalPackages: ["@earendil-works/pi-coding-agent"],
   // npm installs Pi Feats below node_modules. Ask Next to transpile the
   // package itself when the Console app is built from that location.
   transpilePackages: ["pi-feats"],

package/extensions/profile-ssh.ts

@@ -0,0 +1,274 @@
+import type { ExtensionAPI } from "@earendil-works/pi-coding-agent";
+import { Box, render, Text } from "ink";
+import React from "react";
+import { chmod, mkdir, readFile, rename, rm, writeFile } from "node:fs/promises";
+import { existsSync } from "node:fs";
+import { homedir } from "node:os";
+import { isIP } from "node:net";
+import { join } from "node:path";
+import { spawn } from "node:child_process";
+import { createInterface } from "node:readline/promises";
+
+const profileDirectory = () => process.env.PI_CODING_AGENT_DIR ?? join(homedir(), ".pi", "agent");
+const validAlias = (value: string) => /^[A-Za-z][A-Za-z0-9_-]{0,63}$/.test(value);
+const validHostname = (value: string) => /^[A-Za-z0-9](?:[A-Za-z0-9.-]*[A-Za-z0-9])?$/.test(value);
+const validUser = (value: string) => /^[A-Za-z_][A-Za-z0-9_.-]*$/.test(value);
+
+type CommandResult = { code: number; stdout: string; stderr: string };
+export type ProfileSshKeyType = "ed25519" | "rsa";
+type SshHost = { alias: string; hostname?: string; ip?: string; port: number; user: string; keyType?: ProfileSshKeyType };
+
+export function profileSshKeyTypeForBanner(banner: string): ProfileSshKeyType {
+  const version = banner.match(/OpenSSH_(\d+)\.(\d+)/i);
+  if (!version) return "ed25519";
+  const major = Number(version[1]), minor = Number(version[2]);
+  return major < 6 || (major === 6 && minor < 5) ? "rsa" : "ed25519";
+}
+
+async function command(command: string, args: string[], options: { env?: NodeJS.ProcessEnv; input?: string } = {}): Promise<CommandResult> {
+  return await new Promise((resolve, reject) => {
+    const child = spawn(command, args, { stdio: [options.input === undefined ? "ignore" : "pipe", "pipe", "pipe"], env: options.env });
+    let stdout = "", stderr = "";
+    child.stdout.on("data", (chunk) => { stdout += String(chunk); });
+    child.stderr.on("data", (chunk) => { stderr += String(chunk); });
+    child.once("error", reject);
+    child.once("exit", (code) => resolve({ code: code ?? 1, stdout, stderr }));
+    if (options.input !== undefined) child.stdin.end(options.input);
+  });
+}
+
+async function ask(label: string, defaultValue?: string): Promise<string> {
+  const prompt = createInterface({ input: process.stdin, output: process.stdout });
+  try { return (await prompt.question(defaultValue === undefined ? `${label}: ` : `${label} [${defaultValue}]: `)).trim() || defaultValue || ""; }
+  finally { prompt.close(); }
+}
+
+async function interactiveCommand(command: string, args: string[], env: NodeJS.ProcessEnv = process.env): Promise<number> {
+  return await new Promise((resolve, reject) => {
+    const child = spawn(command, args, { stdio: "inherit", env });
+    child.once("error", reject);
+    child.once("exit", (code) => resolve(code ?? 1));
+  });
+}
+
+export function profileSshCopyEnvironment(profileDir: string, base: NodeJS.ProcessEnv = process.env): NodeJS.ProcessEnv {
+  // ssh-copy-id creates temporary files below ~/.ssh. Named-profile sandboxes
+  // may read but cannot write the host user's home directory, so keep those
+  // files in the profile workspace alongside the profile key/config instead.
+  return { ...base, HOME: profileDir };
+}
+
+export function profileSshVerificationArgs(config: string, alias: string): string[] {
+  return [
+    "-F", config,
+    "-o", "BatchMode=yes",
+    "-o", "PasswordAuthentication=no",
+    "-o", "KbdInteractiveAuthentication=no",
+    "-o", "ConnectTimeout=15",
+    alias,
+    "true",
+  ];
+}
+
+function hostTokens(host: Pick<SshHost, "alias" | "hostname" | "ip">): string[] {
+  return [...new Set([host.alias, host.hostname, host.ip].filter((value): value is string => Boolean(value)))];
+}
+
+export function profileSshConfigBlock(host: SshHost, privateKey: string, knownHosts: string): string {
+  const target = host.ip ?? host.hostname;
+  if (!target) throw new Error("SSH host requires a hostname or IP address.");
+  const keyType = host.keyType ?? "ed25519";
+  return `# pi-profile-ssh: ${host.alias}\nHost ${hostTokens(host).join(" ")}\n  HostName ${target}\n  User ${host.user}\n  Port ${host.port}\n  IdentityFile ${privateKey}\n  IdentitiesOnly yes\n${keyType === "rsa" ? "  PubkeyAcceptedAlgorithms +ssh-rsa\n" : ""}  UserKnownHostsFile ${knownHosts}\n  StrictHostKeyChecking yes\n`;
+}
+
+async function ensureKey(directory: string, keyType: ProfileSshKeyType): Promise<{ privateKey: string; publicKey: string }> {
+  const privateKey = join(directory, keyType === "rsa" ? "id_rsa" : "id_ed25519"), publicKey = `${privateKey}.pub`;
+  if (existsSync(privateKey) !== existsSync(publicKey)) throw new Error(`The profile ${keyType} SSH key pair is incomplete. Restore it or remove both files before retrying.`);
+  if (!existsSync(privateKey)) {
+    const generated = await command("ssh-keygen", keyType === "rsa"
+      ? ["-q", "-t", "rsa", "-b", "4096", "-N", "", "-f", privateKey, "-C", `pi-profile@${profileDirectory()}`]
+      : ["-q", "-t", "ed25519", "-N", "", "-f", privateKey, "-C", `pi-profile@${profileDirectory()}`]);
+    if (generated.code !== 0) throw new Error(`ssh-keygen failed: ${generated.stderr.trim() || "unknown error"}`);
+  }
+  await chmod(privateKey, 0o600); await chmod(publicKey, 0o644);
+  return { privateKey, publicKey };
+}
+
+async function hostFingerprint(host: string, port: number): Promise<{ key: string; fingerprint: string; banner: string }> {
+  const scanned = await command("ssh-keyscan", ["-p", String(port), "-T", "10", host]);
+  if (!scanned.stdout.trim()) throw new Error(`Could not retrieve an SSH host key: ${scanned.stderr.trim() || "connection failed"}`);
+  const fingerprint = await command("ssh-keygen", ["-lf", "-"], { input: scanned.stdout });
+  if (fingerprint.code !== 0) throw new Error(`Could not read the SSH host fingerprint: ${fingerprint.stderr.trim() || "invalid key"}`);
+  return { key: scanned.stdout, fingerprint: fingerprint.stdout.trim(), banner: scanned.stderr };
+}
+
+function configuredHostTokens(source: string): Set<string> {
+  return new Set([...source.matchAll(/^\s*Host\s+(.+)$/gim)].flatMap((match) => match[1].trim().split(/\s+/)));
+}
+
+function assertHostTokensAvailable(source: string, tokens: string[]) {
+  const existing = configuredHostTokens(source);
+  const conflict = tokens.find((token) => existing.has(token));
+  if (conflict) throw new Error(`SSH host '${conflict}' already exists in the profile SSH config.`);
+}
+
+async function replaceConfig(path: string, content: string): Promise<void> {
+  const temporary = `${path}.${process.pid}.tmp`;
+  await writeFile(temporary, content, { mode: 0o600 });
+  await rename(temporary, path); await chmod(path, 0o600);
+}
+
+async function appendConfig(path: string, block: string): Promise<void> {
+  const current = existsSync(path) ? await readFile(path, "utf8") : "";
+  await replaceConfig(path, `${current.trimEnd()}${current.trim() ? "\n\n" : ""}${block}`);
+}
+
+async function writeKnownHosts(path: string, key: string): Promise<void> {
+  const current = existsSync(path) ? await readFile(path, "utf8") : "";
+  await writeFile(path, `${current}${current && !current.endsWith("\n") ? "\n" : ""}${key}`, { mode: 0o644 });
+  await chmod(path, 0o644);
+}
+
+type SshHostRow = { alias: string; hosts: string; user: string; port: string; keyType: ProfileSshKeyType };
+
+function SshHostTable({ hosts }: { hosts: SshHostRow[] }) {
+  const width = Math.max(88, process.stdout.columns ?? 88);
+  const available = width - 16;
+  const columns: Array<[string, number]> = [["ALIAS", Math.max(14, Math.floor(available * 0.18))], ["HOSTS", 0], ["USER", Math.max(12, Math.floor(available * 0.16))], ["PORT", 6], ["KEY TYPE", 10]];
+  columns[1][1] = Math.max(16, available - columns[0][1] - columns[2][1] - columns[3][1] - columns[4][1]);
+  const clip = (value: string, columnWidth: number) => value.length <= columnWidth ? value : `${value.slice(0, Math.max(0, columnWidth - 1))}…`;
+  const cell = (value: string, columnWidth: number) => clip(value, columnWidth).padEnd(columnWidth);
+  const line = `┼${columns.map(([, columnWidth]) => "─".repeat(columnWidth + 2)).join("┼")}┼`;
+  const top = line.replaceAll("┼", "┬").replace(/^┬/, "┌").replace(/┬$/, "┐");
+  const bottom = line.replaceAll("┼", "┴").replace(/^┴/, "└").replace(/┴$/, "┘");
+  const row = (values: string[]) => `│ ${values.map((value, index) => cell(value, columns[index][1])).join(" │ ")} │`;
+  return React.createElement(Box, { flexDirection: "column" },
+    React.createElement(Text, { color: "cyan", bold: true }, "PROFILE SSH HOSTS"),
+    React.createElement(Text, { color: "gray" }, top),
+    React.createElement(Text, { color: "cyan", bold: true }, row(columns.map(([name]) => name))),
+    React.createElement(Text, { color: "gray" }, line),
+    ...(hosts.length
+      ? hosts.map((host) => React.createElement(Text, { color: "white", key: host.alias }, row([host.alias, host.hosts, host.user, host.port, host.keyType])))
+      : [React.createElement(Text, { color: "gray", key: "empty" }, row(["—", "No Pi-managed SSH hosts configured", "—", "—", "—"]))]),
+    React.createElement(Text, { color: "gray" }, bottom),
+  );
+}
+
+export function removeProfileSshConfigBlock(config: string, alias: string): { config: string; hostName: string } {
+  const lines = config.split(/\r?\n/);
+  const marker = `# pi-profile-ssh: ${alias}`;
+  const start = lines.findIndex((line) => line === marker);
+  if (start < 0) throw new Error(`Pi-managed SSH host '${alias}' was not found.`);
+  const end = lines.findIndex((line, index) => index > start && line === "  StrictHostKeyChecking yes");
+  if (end < 0) throw new Error(`Pi-managed SSH host '${alias}' has an incomplete config block.`);
+  const hostLine = lines.slice(start, end + 1).find((line) => line.startsWith("  HostName "));
+  if (!hostLine) throw new Error(`Pi-managed SSH host '${alias}' has no HostName.`);
+  const remaining = [...lines.slice(0, start), ...lines.slice(end + 1)].join("\n").replace(/\n{3,}/g, "\n\n").trim();
+  return { config: remaining ? `${remaining}\n` : "", hostName: hostLine.slice("  HostName ".length) };
+}
+
+async function deleteProfileSshHost(alias: string): Promise<void> {
+  if (!validAlias(alias)) throw new Error("Invalid host name. Use letters, numbers, hyphens, or underscores (max. 64 characters).");
+  const directory = join(profileDirectory(), ".ssh"), configPath = join(directory, "config"), knownHosts = join(directory, "known_hosts");
+  if (!existsSync(configPath)) throw new Error(`Pi-managed SSH host '${alias}' was not found.`);
+  const removed = removeProfileSshConfigBlock(await readFile(configPath, "utf8"), alias);
+  await replaceConfig(configPath, removed.config);
+  if (existsSync(knownHosts)) await command("ssh-keygen", ["-R", removed.hostName, "-f", knownHosts]);
+  process.stdout.write(`SSH host '${alias}' deleted from ${configPath}.\n`);
+}
+
+async function listProfileSshHosts(): Promise<void> {
+  const path = join(profileDirectory(), ".ssh", "config");
+  const config = existsSync(path) ? await readFile(path, "utf8") : "";
+  const hosts = [...config.matchAll(/^# pi-profile-ssh: ([^\r\n]+)\r?\nHost ([^\r\n]+)[\s\S]*?^  User ([^\r\n]+)\r?\n  Port (\d+)\r?\n  IdentityFile ([^\r\n]+)$/gim)]
+    .map((match) => ({ alias: match[1], hosts: match[2], user: match[3], port: match[4], keyType: match[5].endsWith("id_rsa") ? "rsa" as const : "ed25519" as const }));
+  const app = render(React.createElement(SshHostTable, { hosts }), { stdout: process.stdout, stdin: process.stdin, exitOnCtrlC: false, patchConsole: false });
+  await new Promise((resolveRender) => setTimeout(resolveRender, 25));
+  app.unmount();
+}
+
+export async function addProfileSshHost(alias: string): Promise<void> {
+  if (!validAlias(alias)) throw new Error("Invalid host name. Use letters, numbers, hyphens, or underscores (max. 64 characters).");
+  const hostname = await ask("Hostname", alias);
+  if (!validHostname(hostname)) throw new Error("Invalid hostname.");
+  const ip = await ask("IP address");
+  if (!isIP(ip)) throw new Error("Invalid IP address.");
+  const portText = await ask("Port", "22"), port = Number(portText);
+  if (!Number.isInteger(port) || port < 1 || port > 65535) throw new Error("Port must be an integer between 1 and 65535.");
+  const user = await ask("Remote user");
+  if (!validUser(user)) throw new Error("Invalid remote user.");
+  const connection = { alias, hostname, ip, port, user };
+  const directory = join(profileDirectory(), ".ssh"), config = join(directory, "config"), knownHosts = join(directory, "known_hosts");
+  await mkdir(directory, { recursive: true, mode: 0o700 }); await chmod(directory, 0o700);
+  const currentConfig = existsSync(config) ? await readFile(config, "utf8") : "";
+  assertHostTokensAvailable(currentConfig, hostTokens(connection));
+  const fingerprint = await hostFingerprint(ip, port);
+  const keyType = profileSshKeyTypeForBanner(fingerprint.banner);
+  const host: SshHost = { ...connection, keyType };
+  const { privateKey, publicKey } = await ensureKey(directory, keyType);
+  process.stdout.write(`\nSSH host fingerprint:\n${fingerprint.fingerprint}\nUsing profile ${keyType === "rsa" ? "RSA-4096 (legacy server compatibility)" : "Ed25519"} key.\n`);
+  const confirmation = await ask("Trust this host key? [y/N]", "N");
+  if (!/^(y|yes)$/i.test(confirmation)) throw new Error("SSH host key was not trusted.");
+
+  const temporaryKnownHosts = join(directory, `known_hosts.${process.pid}.check`);
+  const block = profileSshConfigBlock(host, privateKey, temporaryKnownHosts);
+  const temporaryConfig = join(directory, `config.${process.pid}.check`);
+  await writeKnownHosts(temporaryKnownHosts, fingerprint.key);
+  await writeFile(temporaryConfig, block, { mode: 0o600 });
+  try {
+    let verified = await command("ssh", profileSshVerificationArgs(temporaryConfig, alias));
+    if (verified.code !== 0) {
+      if (!process.stdin.isTTY) throw new Error(`Profile key is not authorized and a password cannot be requested without a terminal: ${verified.stderr.trim() || "connection failed"}`);
+      process.stdout.write("The profile key is not authorized yet. ssh-copy-id will request the remote password once.\n");
+      const copied = await interactiveCommand("ssh-copy-id", ["-i", publicKey, "-F", temporaryConfig, alias], profileSshCopyEnvironment(profileDirectory()));
+      if (copied !== 0) throw new Error("ssh-copy-id failed.");
+      verified = await command("ssh", profileSshVerificationArgs(temporaryConfig, alias));
+    }
+    if (verified.code !== 0) throw new Error(`SSH key validation failed: ${verified.stderr.trim() || "connection failed"}`);
+  } finally {
+    await rm(temporaryConfig, { force: true });
+    await rm(temporaryKnownHosts, { force: true });
+  }
+
+  await writeKnownHosts(knownHosts, fingerprint.key);
+  await appendConfig(config, profileSshConfigBlock(host, privateKey, knownHosts));
+  process.stdout.write(`SSH host '${alias}' added to ${config}.\n`);
+}
+
+// Named profiles are re-executed with runtime-only extension/session flags
+// before the actual command. Strip those pairs before dispatching SSH actions.
+export function profileSshCommandArgs(raw: string[]): string[] {
+  const args: string[] = [];
+  for (let index = 0; index < raw.length; index += 1) {
+    const value = raw[index];
+    if (value === "--extension" || value === "--session-dir") { index += 1; continue; }
+    if (value.startsWith("--extension=") || value.startsWith("--session-dir=")) continue;
+    args.push(value);
+  }
+  return args;
+}
+
+export async function handleProfileSshCli(args: string[]): Promise<boolean> {
+  if (args[0] !== "ssh") return false;
+  if (args[1] === "add" && args[2] && !args[3]) {
+    try { await addProfileSshHost(args[2]); }
+    catch (error) { process.stderr.write(`SSH setup failed: ${error instanceof Error ? error.message : String(error)}\n`); process.exitCode = 1; }
+    return true;
+  }
+  if (args[1] === "list" && !args[2]) {
+    try { await listProfileSshHosts(); }
+    catch (error) { process.stderr.write(`SSH setup failed: ${error instanceof Error ? error.message : String(error)}\n`); process.exitCode = 1; }
+    return true;
+  }
+  if ((args[1] === "delete" || args[1] === "remove") && args[2] && !args[3]) {
+    try { await deleteProfileSshHost(args[2]); }
+    catch (error) { process.stderr.write(`SSH setup failed: ${error instanceof Error ? error.message : String(error)}\n`); process.exitCode = 1; }
+    return true;
+  }
+  process.stderr.write("Usage: pi ssh add <host-name> | pi ssh list | pi ssh delete <host-name>\n"); process.exitCode = 1;
+  return true;
+}
+
+export default async function (_pi: ExtensionAPI) {
+  if (await handleProfileSshCli(profileSshCommandArgs(process.argv.slice(2)))) process.exit();
+}