pi-feats 0.1.4 → 0.1.7

package/extensions/pi-console-webui/components/skill-resources.tsx

@@ -15,6 +15,7 @@ type Skill = { name: string; path?: string; source: Source; package?: string; en
 type Document = { name: string; path?: string; frontmatter: Record<string, unknown>; content: string };
 type Sources = { shared: boolean; profile: boolean };
 type SkillSource = { identifier: string; name: string; enabled: boolean; hasAccessToken: boolean };
+type Publication = { action: "created" | "updated" | "unchanged" | "confirmation_required"; relativePath: string; description?: string | null; commitHash?: string | null };
 function formatFrontmatterValue(value: unknown): string { return typeof value === "string" ? value : JSON.stringify(value) ?? String(value); }
 async function request(path: string, init?: RequestInit): Promise<Response> { const response = await fetch(`/api/pi/${path}`, { ...init, headers: { "content-type": "application/json", ...init?.headers } }); if (!response.ok) { const body = await response.json().catch(() => ({})); throw new Error(body.error?.message ?? body.error ?? "Request failed"); } return response; }
 async function getJson<T>(path: string): Promise<T> { return (await request(path)).json() as Promise<T>; }
@@ -22,14 +23,14 @@ async function getJson<T>(path: string): Promise<T> { return (await request(path
 export function SkillResourcesPanel({ profile, initial }: { profile: string; initial?: { resources: Array<Omit<Skill, "source"> & { source: string }> } }) {
   const { toast } = useToast();
   const [items, setItems] = useState<Skill[]>((initial?.resources ?? []) as Skill[]), [sources, setSources] = useState<Sources>({ shared: true, profile: false }), [document, setDocument] = useState<Document>();
-  const [publishing, setPublishing] = useState<Skill>(); const [syncing, setSyncing] = useState<Skill>(); const [targets, setTargets] = useState<SkillSource[]>([]), [target, setTarget] = useState(""), [busy, setBusy] = useState(false);
+  const [publishing, setPublishing] = useState<Skill>(); const [syncing, setSyncing] = useState<Skill>(); const [targets, setTargets] = useState<SkillSource[]>([]), [target, setTarget] = useState(""), [busy, setBusy] = useState(false), [overwrite, setOverwrite] = useState<Publication>();
   const isDefault = profile === "default";
   const load = async () => { const [resources, sourceState] = await Promise.all([getJson<{ resources: Skill[] }>(`profiles/${profile}/resources/skills`), getJson<{ sources: Sources }>(`profiles/${profile}/skills/sources`)]); setItems(resources.resources); setSources(sourceState.sources); };
   const refresh = () => void load().catch((error) => toast((error as Error).message, "error"));
   const setSource = async (source: Source, enabled: boolean) => { const next = { ...sources, [source]: enabled }; if (!next.shared && !next.profile) return toast("Enable at least one skill source.", "error"); try { const response = await request(`profiles/${profile}/skills/sources`, { method: "PUT", body: JSON.stringify(next) }); setSources((await response.json() as { sources: Sources }).sources); await load(); } catch (error) { toast((error as Error).message, "error"); } };
   const openPublish = async (skill: Skill) => { if (skill.source === "shared" && profile !== "default") return toast("Shared Skills can only be published by the default profile.", "error"); try { const available = (await getJson<{ sources: SkillSource[] }>("skill-sources")).sources.filter((source) => source.enabled && source.hasAccessToken); setTargets(available); setTarget(available[0]?.identifier ?? ""); setPublishing(skill); } catch (error) { toast((error as Error).message, "error"); } };
-  const publish = async () => { if (!publishing || !target) return; setBusy(true); try { const data = await (await request(`profiles/${profile}/skills/${encodeURIComponent(publishing.name)}/publish?source=${publishing.source}`, { method: "POST", body: JSON.stringify({ identifier: target }) })).json() as { publication: { action: string } }; toast(`Skill ${data.publication.action} in the selected Skill Source.`, "success"); setPublishing(undefined); await load(); } catch (error) { toast((error as Error).message, "error"); } finally { setBusy(false); } };
+  const publish = async (confirmOverwrite = false) => { if (!publishing || !target) return; setBusy(true); try { const data = await (await request(`profiles/${profile}/skills/${encodeURIComponent(publishing.name)}/publish?source=${publishing.source}`, { method: "POST", body: JSON.stringify({ identifier: target, confirmOverwrite }) })).json() as { publication: Publication }; if (data.publication.action === "confirmation_required") { setOverwrite(data.publication); return; } toast(`Skill ${data.publication.action} in the selected Skill Source.`, "success"); setOverwrite(undefined); setPublishing(undefined); await load(); } catch (error) { toast((error as Error).message, "error"); } finally { setBusy(false); } };
   const syncFromSource = async () => { if (!syncing) return; setBusy(true); try { await request(`profiles/${profile}/skills/${encodeURIComponent(syncing.name)}/sync?source=${syncing.source}`, { method: "POST" }); toast("Skill updated from its Skill Source.", "success"); setSyncing(undefined); await load(); } catch (error) { toast((error as Error).message, "error"); } finally { setBusy(false); } };
   useEffect(() => { refresh(); }, [profile]);
-  return <Card><div className="flex flex-wrap items-start justify-between gap-4"><div><div className="flex flex-wrap items-center gap-3"><CardTitle>Skills</CardTitle>{isDefault ? <span className="rounded-full bg-zinc-100 px-2.5 py-1 text-xs font-medium text-zinc-600">Shared Skills</span> : <div className="ml-8 flex items-center gap-4 rounded-lg border border-zinc-200 bg-white px-3 py-2 sm:ml-16"><label className="flex items-center gap-2 text-sm font-medium text-zinc-700"><Switch className="h-4 w-7 data-[state=checked]:bg-[#55d175] [&>span]:size-3 [&>span]:data-[state=checked]:translate-x-3" checked={sources.shared} onCheckedChange={(enabled) => void setSource("shared", enabled)}/><span>Shared Skills</span></label><label className="flex items-center gap-2 text-sm font-medium text-zinc-700"><Switch className="h-4 w-7 data-[state=checked]:bg-[#6d28d9] [&>span]:size-3 [&>span]:data-[state=checked]:translate-x-3" checked={sources.profile} onCheckedChange={(enabled) => void setSource("profile", enabled)}/><span>Profile Skills</span></label></div>}</div><p className="mt-2 text-sm text-zinc-500">{isDefault ? "Shared skills are editable by the default profile." : "Shared skills are read-only; Profile Skills can be edited by this profile."}</p></div><div className="flex gap-2"><SkillSourceImport profile={profile} onImported={refresh}/><Button className="bg-zinc-100 text-zinc-700 hover:bg-zinc-200" title="Reload skills" onClick={refresh}><RotateCw size={17}/></Button></div></div><div className="mt-5 overflow-x-auto"><table className="w-full text-left text-sm"><thead className="border-b border-zinc-200 text-zinc-500"><tr><th className="p-3">Name</th><th className="p-3">Source</th><th className="p-3">Path</th><th className="p-3">Status</th><th className="p-3"/></tr></thead><tbody>{items.map((item) => <tr key={`${item.source}:${item.name}`} className="border-b border-zinc-100"><td className="p-3 font-medium">{item.name}</td><td className="p-3"><span className={item.source === "profile" ? "text-[#6d28d9]" : item.source === "package" ? "text-blue-600" : "text-[#55d175]"}>{item.source === "profile" ? "Profile" : item.source === "package" ? `Package: ${item.package ?? "unknown"}` : "Shared"}</span></td><td className="max-w-xs truncate p-3 text-zinc-500">{item.path ?? "—"}</td><td className="p-3"><label className="flex items-center gap-2"><Switch checked={item.enabled} onCheckedChange={async (enabled) => { try { await request(`profiles/${profile}/resources/skills/${encodeURIComponent(item.name)}?source=${item.source}`, { method: "PATCH", body: JSON.stringify({ enabled }) }); await load(); } catch (error) { toast((error as Error).message, "error"); } }}/><span className={item.enabled ? "text-emerald-700/70" : "text-rose-700/70"}>{item.enabled ? "Enabled" : "Disabled"}</span></label></td><td className="p-3"><button className="rounded p-2 text-zinc-500 hover:bg-zinc-100 hover:text-zinc-900" title="View skill" onClick={() => void getJson<Document>(`profiles/${profile}/skills/${encodeURIComponent(item.name)}/document?source=${item.source}`).then((value) => setDocument({ ...value, path: item.path })).catch((error) => toast(error.message, "error"))}><Eye size={17}/></button>{item.source !== "package" && <><button className="rounded p-2 text-zinc-500 hover:bg-zinc-100 hover:text-zinc-900" title="Apply version from Skill Source" onClick={() => setSyncing(item)}><RotateCw size={17}/></button><button className="rounded p-2 text-zinc-500 hover:bg-zinc-100 hover:text-zinc-900" title="Publish to Skill Source" onClick={() => void openPublish(item)}><Upload size={17}/></button><button className="rounded p-2 text-zinc-500 hover:bg-red-50 hover:text-red-700" title={item.source === "shared" && profile !== "default" ? "Remove from this profile" : "Delete skill"} onClick={() => { if (!confirm(item.source === "shared" && profile !== "default" ? `Remove '${item.name}' from this profile?` : `Delete '${item.name}'?`)) return; void request(`profiles/${profile}/resources/skills/${encodeURIComponent(item.name)}?source=${item.source}`, { method: "DELETE" }).then(refresh).catch((error) => toast(error.message, "error")); }}><Trash2 size={17}/></button></>}</td></tr>)}{items.length === 0 && <tr><td colSpan={5} className="p-5 text-zinc-500">No skills are available from the enabled sources.</td></tr>}</tbody></table></div>{syncing && <div className="fixed inset-0 z-50 grid place-items-center bg-black/30 p-4" role="dialog" aria-modal="true" aria-labelledby="sync-skill-title"><div className="w-full max-w-lg rounded-xl bg-white p-6 shadow-2xl"><div className="flex items-start justify-between gap-4"><div><h2 id="sync-skill-title" className="text-lg font-semibold">Apply Skill Source version</h2><p className="mt-1 text-sm text-zinc-500">Replace <b>{syncing.name}</b> with its current version from the installed Skill Source?</p></div><button type="button" className="rounded p-2 text-zinc-500 hover:bg-zinc-100" title="Close" disabled={busy} onClick={() => setSyncing(undefined)}><X size={18}/></button></div><p className="mt-4 rounded-lg bg-amber-50 p-3 text-sm text-amber-900">Local changes to this Skill, including auxiliary files, will be replaced.</p><div className="mt-6 flex justify-end gap-2"><Button type="button" className="border border-zinc-300 bg-white text-zinc-700 hover:bg-zinc-100" disabled={busy} onClick={() => setSyncing(undefined)}>Cancel</Button><Button className="inline-flex items-center justify-center gap-2" disabled={busy} onClick={() => void syncFromSource()}>{busy ? <Loader2 className="animate-spin" size={16}/> : <RotateCw size={16}/>}<span>Apply version</span></Button></div></div></div>}{publishing && <div className="fixed inset-0 z-50 grid place-items-center bg-black/30 p-4" role="dialog" aria-modal="true" aria-labelledby="publish-skill-title"><form onSubmit={(event) => { event.preventDefault(); void publish(); }} className="w-full max-w-lg rounded-xl bg-white p-6 shadow-2xl"><div className="flex items-start justify-between gap-4"><div><h2 id="publish-skill-title" className="text-lg font-semibold">Publish Skill</h2><p className="mt-1 text-sm text-zinc-500">Publish <b>{publishing.name}</b> to a Git-backed Skill Source.</p></div><button type="button" className="rounded p-2 text-zinc-500 hover:bg-zinc-100" title="Close" onClick={() => setPublishing(undefined)}><X size={18}/></button></div><label className="mt-5 block text-sm font-medium text-zinc-700">Skill Source<select className="mt-1 w-full rounded-md border border-zinc-300 bg-white px-3 py-2 text-sm" value={target} required onChange={(event) => setTarget(event.target.value)}>{targets.map((source) => <option key={source.identifier} value={source.identifier}>{source.name} ({source.identifier})</option>)}</select></label>{targets.length === 0 && <p className="mt-2 text-sm text-zinc-500">No enabled Skill Source with a write credential is available.</p>}<div className="mt-6 flex justify-end gap-2"><Button type="button" className="border border-zinc-300 bg-white text-zinc-700 hover:bg-zinc-100" onClick={() => setPublishing(undefined)}>Cancel</Button><Button type="submit" className="inline-flex items-center justify-center gap-2 bg-[#67c100] hover:bg-[#579f00]" disabled={!target || busy}>{busy ? <Loader2 className="animate-spin" size={16}/> : <Upload size={16}/>}<span>Publish</span></Button></div></form></div>}{document && <div className="fixed inset-0 z-50 bg-white" role="dialog" aria-modal="true"><div className="flex h-full flex-col"><header className="flex shrink-0 items-start justify-between gap-4 border-b border-zinc-200 px-6 py-4"><div className="min-w-0"><h2 className="truncate text-xl font-semibold text-slate-800">{document.name}</h2><p className="mt-0.5 truncate font-mono text-xs text-zinc-500">{document.path ?? `skills/${document.name}/SKILL.md`}</p></div><div className="flex shrink-0 items-center gap-2"><button className="rounded-lg p-2 text-zinc-500 hover:bg-zinc-100 hover:text-zinc-900" title="Copy SKILL.md" onClick={() => navigator.clipboard.writeText(`---\n${Object.entries(document.frontmatter).map(([key, value]) => `${key}: ${value}`).join("\n")}\n---\n\n${document.content}`)}><Copy size={18}/></button><Button className="border border-zinc-300 bg-white text-zinc-700 shadow-sm hover:bg-zinc-100" onClick={() => setDocument(undefined)}>Close</Button></div></header><article className="overflow-y-auto px-4 py-6 sm:px-14"><div className="mx-auto max-w-5xl rounded-xl border border-zinc-200 bg-white p-6 shadow-sm"><section className="overflow-hidden rounded-lg border border-zinc-200 bg-zinc-50"><div className="border-b border-zinc-200 bg-zinc-100 px-4 py-2 font-mono text-xs font-bold uppercase tracking-wide text-slate-500">Frontmatter</div><dl className="font-mono text-xs text-slate-800">{Object.entries(document.frontmatter).map(([key, value]) => <div key={key} className="grid grid-cols-[140px_1fr] border-b border-zinc-200 last:border-b-0"><dt className="bg-white/50 px-4 py-2 font-semibold text-slate-600">{key}</dt><dd className="whitespace-pre-wrap break-words px-4 py-2">{formatFrontmatterValue(value)}</dd></div>)}</dl></section><div className="skill-markdown prose mt-5 max-w-none prose-headings:text-slate-900 prose-p:text-slate-700"><ReactMarkdown remarkPlugins={[remarkGfm]}>{document.content}</ReactMarkdown></div></div></article></div></div>}</Card>;
+  return <Card><div className="flex flex-wrap items-start justify-between gap-4"><div><div className="flex flex-wrap items-center gap-3"><CardTitle>Skills</CardTitle>{isDefault ? <span className="rounded-full bg-zinc-100 px-2.5 py-1 text-xs font-medium text-zinc-600">Shared Skills</span> : <div className="ml-8 flex items-center gap-4 rounded-lg border border-zinc-200 bg-white px-3 py-2 sm:ml-16"><label className="flex items-center gap-2 text-sm font-medium text-zinc-700"><Switch className="h-4 w-7 data-[state=checked]:bg-[#55d175] [&>span]:size-3 [&>span]:data-[state=checked]:translate-x-3" checked={sources.shared} onCheckedChange={(enabled) => void setSource("shared", enabled)}/><span>Shared Skills</span></label><label className="flex items-center gap-2 text-sm font-medium text-zinc-700"><Switch className="h-4 w-7 data-[state=checked]:bg-[#6d28d9] [&>span]:size-3 [&>span]:data-[state=checked]:translate-x-3" checked={sources.profile} onCheckedChange={(enabled) => void setSource("profile", enabled)}/><span>Profile Skills</span></label></div>}</div><p className="mt-2 text-sm text-zinc-500">{isDefault ? "Shared skills are editable by the default profile." : "Shared skills are read-only; Profile Skills can be edited by this profile."}</p></div><div className="flex gap-2"><SkillSourceImport profile={profile} onImported={refresh}/><Button className="bg-zinc-100 text-zinc-700 hover:bg-zinc-200" title="Reload skills" onClick={refresh}><RotateCw size={17}/></Button></div></div><div className="mt-5 overflow-x-auto"><table className="w-full text-left text-sm"><thead className="border-b border-zinc-200 text-zinc-500"><tr><th className="p-3">Name</th><th className="p-3">Source</th><th className="p-3">Path</th><th className="p-3">Status</th><th className="p-3"/></tr></thead><tbody>{items.map((item) => <tr key={`${item.source}:${item.name}`} className="border-b border-zinc-100"><td className="p-3 font-medium">{item.name}</td><td className="p-3"><span className={item.source === "profile" ? "text-[#6d28d9]" : item.source === "package" ? "text-blue-600" : "text-[#55d175]"}>{item.source === "profile" ? "Profile" : item.source === "package" ? `Package: ${item.package ?? "unknown"}` : "Shared"}</span></td><td className="max-w-xs truncate p-3 text-zinc-500">{item.path ?? "—"}</td><td className="p-3"><label className="flex items-center gap-2"><Switch checked={item.enabled} onCheckedChange={async (enabled) => { try { await request(`profiles/${profile}/resources/skills/${encodeURIComponent(item.name)}?source=${item.source}`, { method: "PATCH", body: JSON.stringify({ enabled }) }); await load(); } catch (error) { toast((error as Error).message, "error"); } }}/><span className={item.enabled ? "text-emerald-700/70" : "text-rose-700/70"}>{item.enabled ? "Enabled" : "Disabled"}</span></label></td><td className="p-3"><button className="rounded p-2 text-zinc-500 hover:bg-zinc-100 hover:text-zinc-900" title="View skill" onClick={() => void getJson<Document>(`profiles/${profile}/skills/${encodeURIComponent(item.name)}/document?source=${item.source}`).then((value) => setDocument({ ...value, path: item.path })).catch((error) => toast(error.message, "error"))}><Eye size={17}/></button>{item.source !== "package" && <><button className="rounded p-2 text-zinc-500 hover:bg-zinc-100 hover:text-zinc-900" title="Apply version from Skill Source" onClick={() => setSyncing(item)}><RotateCw size={17}/></button><button className="rounded p-2 text-zinc-500 hover:bg-zinc-100 hover:text-zinc-900" title="Publish to Skill Source" onClick={() => void openPublish(item)}><Upload size={17}/></button><button className="rounded p-2 text-zinc-500 hover:bg-red-50 hover:text-red-700" title={item.source === "shared" && profile !== "default" ? "Remove from this profile" : "Delete skill"} onClick={() => { if (!confirm(item.source === "shared" && profile !== "default" ? `Remove '${item.name}' from this profile?` : `Delete '${item.name}'?`)) return; void request(`profiles/${profile}/resources/skills/${encodeURIComponent(item.name)}?source=${item.source}`, { method: "DELETE" }).then(refresh).catch((error) => toast(error.message, "error")); }}><Trash2 size={17}/></button></>}</td></tr>)}{items.length === 0 && <tr><td colSpan={5} className="p-5 text-zinc-500">No skills are available from the enabled sources.</td></tr>}</tbody></table></div>{syncing && <div className="fixed inset-0 z-50 grid place-items-center bg-black/30 p-4" role="dialog" aria-modal="true" aria-labelledby="sync-skill-title"><div className="w-full max-w-lg rounded-xl bg-white p-6 shadow-2xl"><div className="flex items-start justify-between gap-4"><div><h2 id="sync-skill-title" className="text-lg font-semibold">Apply Skill Source version</h2><p className="mt-1 text-sm text-zinc-500">Replace <b>{syncing.name}</b> with its current version from the installed Skill Source?</p></div><button type="button" className="rounded p-2 text-zinc-500 hover:bg-zinc-100" title="Close" disabled={busy} onClick={() => setSyncing(undefined)}><X size={18}/></button></div><p className="mt-4 rounded-lg bg-amber-50 p-3 text-sm text-amber-900">Local changes to this Skill, including auxiliary files, will be replaced.</p><div className="mt-6 flex justify-end gap-2"><Button type="button" className="border border-zinc-300 bg-white text-zinc-700 hover:bg-zinc-100" disabled={busy} onClick={() => setSyncing(undefined)}>Cancel</Button><Button className="inline-flex items-center justify-center gap-2" disabled={busy} onClick={() => void syncFromSource()}>{busy ? <Loader2 className="animate-spin" size={16}/> : <RotateCw size={16}/>}<span>Apply version</span></Button></div></div></div>}{publishing && <div className="fixed inset-0 z-50 grid place-items-center bg-black/30 p-4" role="dialog" aria-modal="true" aria-labelledby="publish-skill-title"><form onSubmit={(event) => { event.preventDefault(); void publish(); }} className="w-full max-w-lg rounded-xl bg-white p-6 shadow-2xl"><div className="flex items-start justify-between gap-4"><div><h2 id="publish-skill-title" className="text-lg font-semibold">Publish Skill</h2><p className="mt-1 text-sm text-zinc-500">Publish <b>{publishing.name}</b> to a Git-backed Skill Source.</p></div><button type="button" className="rounded p-2 text-zinc-500 hover:bg-zinc-100" title="Close" onClick={() => { setOverwrite(undefined); setPublishing(undefined); }} ><X size={18}/></button></div><label className="mt-5 block text-sm font-medium text-zinc-700">Skill Source<select className="mt-1 w-full rounded-md border border-zinc-300 bg-white px-3 py-2 text-sm" value={target} required onChange={(event) => setTarget(event.target.value)}>{targets.map((source) => <option key={source.identifier} value={source.identifier}>{source.name} ({source.identifier})</option>)}</select></label>{targets.length === 0 && <p className="mt-2 text-sm text-zinc-500">No enabled Skill Source with a write credential is available.</p>}<div className="mt-6 flex justify-end gap-2"><Button type="button" className="border border-zinc-300 bg-white text-zinc-700 hover:bg-zinc-100" onClick={() => setPublishing(undefined)}>Cancel</Button><Button type="submit" className="inline-flex items-center justify-center gap-2 bg-[#67c100] hover:bg-[#579f00]" disabled={!target || busy}>{busy ? <Loader2 className="animate-spin" size={16}/> : <Upload size={16}/>}<span>Publish</span></Button></div></form></div>}{overwrite && <div className="fixed inset-0 z-[60] grid place-items-center bg-black/40 p-4" role="dialog" aria-modal="true" aria-labelledby="overwrite-skill-title"><div className="w-full max-w-lg rounded-xl bg-white p-6 shadow-2xl"><h2 id="overwrite-skill-title" className="text-lg font-semibold">Overwrite Skill?</h2><p className="mt-2 text-sm text-zinc-600">This will replace the existing Skill at <code className="break-all">{overwrite.relativePath}</code> in the selected Skill Source with your local changes.</p>{overwrite.description && <p className="mt-2 text-sm text-zinc-500">Remote description: {overwrite.description}</p>}<p className="mt-3 rounded-lg bg-amber-50 p-3 text-sm text-amber-900">The remote Skill will be overwritten only after you confirm. Your local Skill is never replaced by this action.</p><div className="mt-6 flex justify-end gap-2"><Button type="button" className="border border-zinc-300 bg-white text-zinc-700 hover:bg-zinc-100" disabled={busy} onClick={() => setOverwrite(undefined)}>Cancel</Button><Button type="button" className="bg-red-600 hover:bg-red-700" disabled={busy} onClick={() => void publish(true)}>{busy ? <Loader2 className="animate-spin" size={16}/> : "Overwrite and publish"}</Button></div></div></div>}{document && <div className="fixed inset-0 z-50 bg-white" role="dialog" aria-modal="true"><div className="flex h-full flex-col"><header className="flex shrink-0 items-start justify-between gap-4 border-b border-zinc-200 px-6 py-4"><div className="min-w-0"><h2 className="truncate text-xl font-semibold text-slate-800">{document.name}</h2><p className="mt-0.5 truncate font-mono text-xs text-zinc-500">{document.path ?? `skills/${document.name}/SKILL.md`}</p></div><div className="flex shrink-0 items-center gap-2"><button className="rounded-lg p-2 text-zinc-500 hover:bg-zinc-100 hover:text-zinc-900" title="Copy SKILL.md" onClick={() => navigator.clipboard.writeText(`---\n${Object.entries(document.frontmatter).map(([key, value]) => `${key}: ${value}`).join("\n")}\n---\n\n${document.content}`)}><Copy size={18}/></button><Button className="border border-zinc-300 bg-white text-zinc-700 shadow-sm hover:bg-zinc-100" onClick={() => setDocument(undefined)}>Close</Button></div></header><article className="overflow-y-auto px-4 py-6 sm:px-14"><div className="mx-auto max-w-5xl rounded-xl border border-zinc-200 bg-white p-6 shadow-sm"><section className="overflow-hidden rounded-lg border border-zinc-200 bg-zinc-50"><div className="border-b border-zinc-200 bg-zinc-100 px-4 py-2 font-mono text-xs font-bold uppercase tracking-wide text-slate-500">Frontmatter</div><dl className="font-mono text-xs text-slate-800">{Object.entries(document.frontmatter).map(([key, value]) => <div key={key} className="grid grid-cols-[140px_1fr] border-b border-zinc-200 last:border-b-0"><dt className="bg-white/50 px-4 py-2 font-semibold text-slate-600">{key}</dt><dd className="whitespace-pre-wrap break-words px-4 py-2">{formatFrontmatterValue(value)}</dd></div>)}</dl></section><div className="skill-markdown prose mt-5 max-w-none prose-headings:text-slate-900 prose-p:text-slate-700"><ReactMarkdown remarkPlugins={[remarkGfm]}>{document.content}</ReactMarkdown></div></div></article></div></div>}</Card>;
 }

package/extensions/pi-console-webui/components/ui/input.tsx

@@ -1,4 +1,4 @@
 import { type InputHTMLAttributes, forwardRef } from "react";
 import { cn } from "@/lib/utils";
-export const Input = forwardRef<HTMLInputElement, InputHTMLAttributes<HTMLInputElement>>(({ className, ...props }, ref) => <input ref={ref} className={cn("w-full rounded-md border border-zinc-700 bg-zinc-900 px-3 py-2 text-sm outline-none focus:border-blue-500", className)} {...props} />);
+export const Input = forwardRef<HTMLInputElement, InputHTMLAttributes<HTMLInputElement>>(({ className, ...props }, ref) => <input ref={ref} className={cn("w-full rounded-md border border-zinc-700 bg-zinc-900 px-3 py-2 text-sm font-normal outline-none focus:border-blue-500", className)} {...props} />);
 Input.displayName = "Input";

package/extensions/pi-console-webui/index.ts

@@ -5,6 +5,7 @@ import { mkdir, readFile, unlink, writeFile } from "node:fs/promises";
 import { homedir } from "node:os";
 import { join } from "node:path";
 import { spawn } from "node:child_process";
+import { withoutTuiModeArgs } from "../lib/cli-tui-mode.ts";
 
 type ConsoleSettings = { host?: string; port?: number; username?: string; password?: string; secret?: string };
 type LegacySettings = Record<string, unknown> & { console?: ConsoleSettings };
@@ -30,4 +31,4 @@ async function build(next: string) { const log = openSync(logPath(), "a"); const
 async function start(rebuild = false) { const cfg = await config(), current = await state(), next = nextBinary(); if (current && alive(current.pid)) return console.log(`Pi Console is already running at http://${current.host}:${current.port}`); if (!existsSync(next)) throw new Error(`Dependencies are missing. Reinstall the Pi package or run npm install in ${dependencyRoot()}.`); if (rebuild || !existsSync(buildMarker())) await build(next); const log = openSync(logPath(), "a"); const child = spawn(process.execPath, [next, "start", "--hostname", cfg.host, "--port", String(cfg.port)], { cwd: root, detached: true, stdio: ["ignore", log, log], env: process.env }); child.unref(); await writeJson(statePath(), { pid: child.pid!, host: cfg.host, port: cfg.port, startedAt: new Date().toISOString() }); console.log(`Pi Console started at http://${cfg.host}:${cfg.port}`); console.log(`Console credentials are configured in ${configPath()}.`); }
 async function stop() { const current = await state(); if (!current || !alive(current.pid)) { await unlink(statePath()).catch(() => {}); return console.log("Pi Console is not running."); } try { process.kill(-current.pid, "SIGTERM"); } catch { process.kill(current.pid, "SIGTERM"); } await unlink(statePath()).catch(() => {}); console.log("Pi Console stopped."); }
 async function status() { const current = await state(); console.log(current && alive(current.pid) ? `Pi Console: running at http://${current.host}:${current.port}` : "Pi Console: stopped"); }
-export default async function (_pi: ExtensionAPI) { const [command, action] = process.argv.slice(2); if (command !== "console") return; if (action === "start") await start(); else if (action === "stop") await stop(); else if (action === "restart") { await stop(); await start(); } else if (action === "rebuild") { await stop(); await start(true); } else if (action === "status") await status(); else { console.error("Usage: pi console start | stop | restart | rebuild | status"); process.exitCode = 1; } process.exit(); }
+export default async function (_pi: ExtensionAPI) { const [command, action] = withoutTuiModeArgs(process.argv.slice(2)); if (command !== "console") return; if (action === "start") await start(); else if (action === "stop") await stop(); else if (action === "restart") { await stop(); await start(); } else if (action === "rebuild") { await stop(); await start(true); } else if (action === "status") await status(); else { console.error("Usage: pi console start | stop | restart | rebuild | status"); process.exitCode = 1; } process.exit(); }

package/extensions/pi-console-webui/lib/admin-models.ts

@@ -0,0 +1,38 @@
+import { chmod, readFile, rename, rm, writeFile } from "node:fs/promises";
+import { randomUUID } from "node:crypto";
+import { homedir } from "node:os";
+import { join } from "node:path";
+
+const agentDir = () => process.env.PI_CODING_AGENT_DIR ?? join(homedir(), ".pi", "agent");
+const modelsPath = () => join(agentDir(), "models.json");
+const emptyModels = "{\n  \"providers\": {}\n}\n";
+
+export async function readModelsConfig() {
+  try {
+    return await readFile(modelsPath(), "utf8");
+  } catch (error) {
+    if ((error as NodeJS.ErrnoException).code === "ENOENT") return emptyModels;
+    throw error;
+  }
+}
+
+export async function writeModelsConfig(content: unknown) {
+  if (typeof content !== "string") throw new Error("models.json content must be a string.");
+  const path = modelsPath();
+  const temporary = `${path}.tmp-${process.pid}-${randomUUID()}`;
+  try {
+    let parsed: unknown;
+    try { parsed = JSON.parse(content); }
+    catch (error) { throw new Error(`Invalid models.json: ${error instanceof Error ? error.message : String(error)}`); }
+    if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) throw new Error("Invalid models.json: the root value must be an object.");
+    const providers = (parsed as { providers?: unknown }).providers;
+    if (!providers || typeof providers !== "object" || Array.isArray(providers)) throw new Error("Invalid models.json: providers must be an object.");
+    await writeFile(temporary, content.endsWith("\n") ? content : `${content}\n`, { encoding: "utf8", mode: 0o600 });
+    await chmod(temporary, 0o600);
+    await rename(temporary, path);
+    await chmod(path, 0o600);
+    return readModelsConfig();
+  } finally {
+    await rm(temporary, { force: true }).catch(() => {});
+  }
+}

package/extensions/pi-console-webui/lib/page-metadata.ts

@@ -5,6 +5,7 @@ const sectionLabels: Record<string, string> = {
   chat: "Chat",
   profiles: "Profiles",
   settings: "Settings",
+  model: "Model",
   env: "Environment",
   soul: "SOUL",
   "context-memory": "Context Memory",
@@ -13,14 +14,16 @@ const sectionLabels: Record<string, string> = {
   tools: "Tools",
   packages: "Packages",
   pulses: "Pulses",
+  "sequential-workflows": "Sequential Workflows",
   extensions: "Extensions",
   applications: "Applications",
+  models: "Models",
   "api-server": "API Server",
   "pi-console-webui": "Console WebUI",
   "skill-sources": "Skill Sources",
 };
 
-const administrativeSections = new Set(["applications", "api-server", "pi-console-webui", "skill-sources"]);
+const administrativeSections = new Set(["applications", "models", "api-server", "pi-console-webui", "skill-sources"]);
 
 export function sectionMetadata(section: string, profile?: string): Metadata {
   const label = sectionLabels[section] ?? "Pi Console";

package/extensions/pi-console-webui/next.config.js

@@ -3,6 +3,7 @@ const appRoot = __dirname;
 
 module.exports = {
   outputFileTracingRoot: join(__dirname, "../.."),
+  serverExternalPackages: ["@earendil-works/pi-coding-agent"],
   // npm installs Pi Feats below node_modules. Ask Next to transpile the
   // package itself when the Console app is built from that location.
   transpilePackages: ["pi-feats"],

package/extensions/profile-ssh.ts

@@ -0,0 +1,274 @@
+import type { ExtensionAPI } from "@earendil-works/pi-coding-agent";
+import { Box, render, Text } from "ink";
+import React from "react";
+import { chmod, mkdir, readFile, rename, rm, writeFile } from "node:fs/promises";
+import { existsSync } from "node:fs";
+import { homedir } from "node:os";
+import { isIP } from "node:net";
+import { join } from "node:path";
+import { spawn } from "node:child_process";
+import { createInterface } from "node:readline/promises";
+
+const profileDirectory = () => process.env.PI_CODING_AGENT_DIR ?? join(homedir(), ".pi", "agent");
+const validAlias = (value: string) => /^[A-Za-z][A-Za-z0-9_-]{0,63}$/.test(value);
+const validHostname = (value: string) => /^[A-Za-z0-9](?:[A-Za-z0-9.-]*[A-Za-z0-9])?$/.test(value);
+const validUser = (value: string) => /^[A-Za-z_][A-Za-z0-9_.-]*$/.test(value);
+
+type CommandResult = { code: number; stdout: string; stderr: string };
+export type ProfileSshKeyType = "ed25519" | "rsa";
+type SshHost = { alias: string; hostname?: string; ip?: string; port: number; user: string; keyType?: ProfileSshKeyType };
+
+export function profileSshKeyTypeForBanner(banner: string): ProfileSshKeyType {
+  const version = banner.match(/OpenSSH_(\d+)\.(\d+)/i);
+  if (!version) return "ed25519";
+  const major = Number(version[1]), minor = Number(version[2]);
+  return major < 6 || (major === 6 && minor < 5) ? "rsa" : "ed25519";
+}
+
+async function command(command: string, args: string[], options: { env?: NodeJS.ProcessEnv; input?: string } = {}): Promise<CommandResult> {
+  return await new Promise((resolve, reject) => {
+    const child = spawn(command, args, { stdio: [options.input === undefined ? "ignore" : "pipe", "pipe", "pipe"], env: options.env });
+    let stdout = "", stderr = "";
+    child.stdout.on("data", (chunk) => { stdout += String(chunk); });
+    child.stderr.on("data", (chunk) => { stderr += String(chunk); });
+    child.once("error", reject);
+    child.once("exit", (code) => resolve({ code: code ?? 1, stdout, stderr }));
+    if (options.input !== undefined) child.stdin.end(options.input);
+  });
+}
+
+async function ask(label: string, defaultValue?: string): Promise<string> {
+  const prompt = createInterface({ input: process.stdin, output: process.stdout });
+  try { return (await prompt.question(defaultValue === undefined ? `${label}: ` : `${label} [${defaultValue}]: `)).trim() || defaultValue || ""; }
+  finally { prompt.close(); }
+}
+
+async function interactiveCommand(command: string, args: string[], env: NodeJS.ProcessEnv = process.env): Promise<number> {
+  return await new Promise((resolve, reject) => {
+    const child = spawn(command, args, { stdio: "inherit", env });
+    child.once("error", reject);
+    child.once("exit", (code) => resolve(code ?? 1));
+  });
+}
+
+export function profileSshCopyEnvironment(profileDir: string, base: NodeJS.ProcessEnv = process.env): NodeJS.ProcessEnv {
+  // ssh-copy-id creates temporary files below ~/.ssh. Named-profile sandboxes
+  // may read but cannot write the host user's home directory, so keep those
+  // files in the profile workspace alongside the profile key/config instead.
+  return { ...base, HOME: profileDir };
+}
+
+export function profileSshVerificationArgs(config: string, alias: string): string[] {
+  return [
+    "-F", config,
+    "-o", "BatchMode=yes",
+    "-o", "PasswordAuthentication=no",
+    "-o", "KbdInteractiveAuthentication=no",
+    "-o", "ConnectTimeout=15",
+    alias,
+    "true",
+  ];
+}
+
+function hostTokens(host: Pick<SshHost, "alias" | "hostname" | "ip">): string[] {
+  return [...new Set([host.alias, host.hostname, host.ip].filter((value): value is string => Boolean(value)))];
+}
+
+export function profileSshConfigBlock(host: SshHost, privateKey: string, knownHosts: string): string {
+  const target = host.ip ?? host.hostname;
+  if (!target) throw new Error("SSH host requires a hostname or IP address.");
+  const keyType = host.keyType ?? "ed25519";
+  return `# pi-profile-ssh: ${host.alias}\nHost ${hostTokens(host).join(" ")}\n  HostName ${target}\n  User ${host.user}\n  Port ${host.port}\n  IdentityFile ${privateKey}\n  IdentitiesOnly yes\n${keyType === "rsa" ? "  PubkeyAcceptedAlgorithms +ssh-rsa\n" : ""}  UserKnownHostsFile ${knownHosts}\n  StrictHostKeyChecking yes\n`;
+}
+
+async function ensureKey(directory: string, keyType: ProfileSshKeyType): Promise<{ privateKey: string; publicKey: string }> {
+  const privateKey = join(directory, keyType === "rsa" ? "id_rsa" : "id_ed25519"), publicKey = `${privateKey}.pub`;
+  if (existsSync(privateKey) !== existsSync(publicKey)) throw new Error(`The profile ${keyType} SSH key pair is incomplete. Restore it or remove both files before retrying.`);
+  if (!existsSync(privateKey)) {
+    const generated = await command("ssh-keygen", keyType === "rsa"
+      ? ["-q", "-t", "rsa", "-b", "4096", "-N", "", "-f", privateKey, "-C", `pi-profile@${profileDirectory()}`]
+      : ["-q", "-t", "ed25519", "-N", "", "-f", privateKey, "-C", `pi-profile@${profileDirectory()}`]);
+    if (generated.code !== 0) throw new Error(`ssh-keygen failed: ${generated.stderr.trim() || "unknown error"}`);
+  }
+  await chmod(privateKey, 0o600); await chmod(publicKey, 0o644);
+  return { privateKey, publicKey };
+}
+
+async function hostFingerprint(host: string, port: number): Promise<{ key: string; fingerprint: string; banner: string }> {
+  const scanned = await command("ssh-keyscan", ["-p", String(port), "-T", "10", host]);
+  if (!scanned.stdout.trim()) throw new Error(`Could not retrieve an SSH host key: ${scanned.stderr.trim() || "connection failed"}`);
+  const fingerprint = await command("ssh-keygen", ["-lf", "-"], { input: scanned.stdout });
+  if (fingerprint.code !== 0) throw new Error(`Could not read the SSH host fingerprint: ${fingerprint.stderr.trim() || "invalid key"}`);
+  return { key: scanned.stdout, fingerprint: fingerprint.stdout.trim(), banner: scanned.stderr };
+}
+
+function configuredHostTokens(source: string): Set<string> {
+  return new Set([...source.matchAll(/^\s*Host\s+(.+)$/gim)].flatMap((match) => match[1].trim().split(/\s+/)));
+}
+
+function assertHostTokensAvailable(source: string, tokens: string[]) {
+  const existing = configuredHostTokens(source);
+  const conflict = tokens.find((token) => existing.has(token));
+  if (conflict) throw new Error(`SSH host '${conflict}' already exists in the profile SSH config.`);
+}
+
+async function replaceConfig(path: string, content: string): Promise<void> {
+  const temporary = `${path}.${process.pid}.tmp`;
+  await writeFile(temporary, content, { mode: 0o600 });
+  await rename(temporary, path); await chmod(path, 0o600);
+}
+
+async function appendConfig(path: string, block: string): Promise<void> {
+  const current = existsSync(path) ? await readFile(path, "utf8") : "";
+  await replaceConfig(path, `${current.trimEnd()}${current.trim() ? "\n\n" : ""}${block}`);
+}
+
+async function writeKnownHosts(path: string, key: string): Promise<void> {
+  const current = existsSync(path) ? await readFile(path, "utf8") : "";
+  await writeFile(path, `${current}${current && !current.endsWith("\n") ? "\n" : ""}${key}`, { mode: 0o644 });
+  await chmod(path, 0o644);
+}
+
+type SshHostRow = { alias: string; hosts: string; user: string; port: string; keyType: ProfileSshKeyType };
+
+function SshHostTable({ hosts }: { hosts: SshHostRow[] }) {
+  const width = Math.max(88, process.stdout.columns ?? 88);
+  const available = width - 16;
+  const columns: Array<[string, number]> = [["ALIAS", Math.max(14, Math.floor(available * 0.18))], ["HOSTS", 0], ["USER", Math.max(12, Math.floor(available * 0.16))], ["PORT", 6], ["KEY TYPE", 10]];
+  columns[1][1] = Math.max(16, available - columns[0][1] - columns[2][1] - columns[3][1] - columns[4][1]);
+  const clip = (value: string, columnWidth: number) => value.length <= columnWidth ? value : `${value.slice(0, Math.max(0, columnWidth - 1))}…`;
+  const cell = (value: string, columnWidth: number) => clip(value, columnWidth).padEnd(columnWidth);
+  const line = `┼${columns.map(([, columnWidth]) => "─".repeat(columnWidth + 2)).join("┼")}┼`;
+  const top = line.replaceAll("┼", "┬").replace(/^┬/, "┌").replace(/┬$/, "┐");
+  const bottom = line.replaceAll("┼", "┴").replace(/^┴/, "└").replace(/┴$/, "┘");
+  const row = (values: string[]) => `│ ${values.map((value, index) => cell(value, columns[index][1])).join(" │ ")} │`;
+  return React.createElement(Box, { flexDirection: "column" },
+    React.createElement(Text, { color: "cyan", bold: true }, "PROFILE SSH HOSTS"),
+    React.createElement(Text, { color: "gray" }, top),
+    React.createElement(Text, { color: "cyan", bold: true }, row(columns.map(([name]) => name))),
+    React.createElement(Text, { color: "gray" }, line),
+    ...(hosts.length
+      ? hosts.map((host) => React.createElement(Text, { color: "white", key: host.alias }, row([host.alias, host.hosts, host.user, host.port, host.keyType])))
+      : [React.createElement(Text, { color: "gray", key: "empty" }, row(["—", "No Pi-managed SSH hosts configured", "—", "—", "—"]))]),
+    React.createElement(Text, { color: "gray" }, bottom),
+  );
+}
+
+export function removeProfileSshConfigBlock(config: string, alias: string): { config: string; hostName: string } {
+  const lines = config.split(/\r?\n/);
+  const marker = `# pi-profile-ssh: ${alias}`;
+  const start = lines.findIndex((line) => line === marker);
+  if (start < 0) throw new Error(`Pi-managed SSH host '${alias}' was not found.`);
+  const end = lines.findIndex((line, index) => index > start && line === "  StrictHostKeyChecking yes");
+  if (end < 0) throw new Error(`Pi-managed SSH host '${alias}' has an incomplete config block.`);
+  const hostLine = lines.slice(start, end + 1).find((line) => line.startsWith("  HostName "));
+  if (!hostLine) throw new Error(`Pi-managed SSH host '${alias}' has no HostName.`);
+  const remaining = [...lines.slice(0, start), ...lines.slice(end + 1)].join("\n").replace(/\n{3,}/g, "\n\n").trim();
+  return { config: remaining ? `${remaining}\n` : "", hostName: hostLine.slice("  HostName ".length) };
+}
+
+async function deleteProfileSshHost(alias: string): Promise<void> {
+  if (!validAlias(alias)) throw new Error("Invalid host name. Use letters, numbers, hyphens, or underscores (max. 64 characters).");
+  const directory = join(profileDirectory(), ".ssh"), configPath = join(directory, "config"), knownHosts = join(directory, "known_hosts");
+  if (!existsSync(configPath)) throw new Error(`Pi-managed SSH host '${alias}' was not found.`);
+  const removed = removeProfileSshConfigBlock(await readFile(configPath, "utf8"), alias);
+  await replaceConfig(configPath, removed.config);
+  if (existsSync(knownHosts)) await command("ssh-keygen", ["-R", removed.hostName, "-f", knownHosts]);
+  process.stdout.write(`SSH host '${alias}' deleted from ${configPath}.\n`);
+}
+
+async function listProfileSshHosts(): Promise<void> {
+  const path = join(profileDirectory(), ".ssh", "config");
+  const config = existsSync(path) ? await readFile(path, "utf8") : "";
+  const hosts = [...config.matchAll(/^# pi-profile-ssh: ([^\r\n]+)\r?\nHost ([^\r\n]+)[\s\S]*?^  User ([^\r\n]+)\r?\n  Port (\d+)\r?\n  IdentityFile ([^\r\n]+)$/gim)]
+    .map((match) => ({ alias: match[1], hosts: match[2], user: match[3], port: match[4], keyType: match[5].endsWith("id_rsa") ? "rsa" as const : "ed25519" as const }));
+  const app = render(React.createElement(SshHostTable, { hosts }), { stdout: process.stdout, stdin: process.stdin, exitOnCtrlC: false, patchConsole: false });
+  await new Promise((resolveRender) => setTimeout(resolveRender, 25));
+  app.unmount();
+}
+
+export async function addProfileSshHost(alias: string): Promise<void> {
+  if (!validAlias(alias)) throw new Error("Invalid host name. Use letters, numbers, hyphens, or underscores (max. 64 characters).");
+  const hostname = await ask("Hostname", alias);
+  if (!validHostname(hostname)) throw new Error("Invalid hostname.");
+  const ip = await ask("IP address");
+  if (!isIP(ip)) throw new Error("Invalid IP address.");
+  const portText = await ask("Port", "22"), port = Number(portText);
+  if (!Number.isInteger(port) || port < 1 || port > 65535) throw new Error("Port must be an integer between 1 and 65535.");
+  const user = await ask("Remote user");
+  if (!validUser(user)) throw new Error("Invalid remote user.");
+  const connection = { alias, hostname, ip, port, user };
+  const directory = join(profileDirectory(), ".ssh"), config = join(directory, "config"), knownHosts = join(directory, "known_hosts");
+  await mkdir(directory, { recursive: true, mode: 0o700 }); await chmod(directory, 0o700);
+  const currentConfig = existsSync(config) ? await readFile(config, "utf8") : "";
+  assertHostTokensAvailable(currentConfig, hostTokens(connection));
+  const fingerprint = await hostFingerprint(ip, port);
+  const keyType = profileSshKeyTypeForBanner(fingerprint.banner);
+  const host: SshHost = { ...connection, keyType };
+  const { privateKey, publicKey } = await ensureKey(directory, keyType);
+  process.stdout.write(`\nSSH host fingerprint:\n${fingerprint.fingerprint}\nUsing profile ${keyType === "rsa" ? "RSA-4096 (legacy server compatibility)" : "Ed25519"} key.\n`);
+  const confirmation = await ask("Trust this host key? [y/N]", "N");
+  if (!/^(y|yes)$/i.test(confirmation)) throw new Error("SSH host key was not trusted.");
+
+  const temporaryKnownHosts = join(directory, `known_hosts.${process.pid}.check`);
+  const block = profileSshConfigBlock(host, privateKey, temporaryKnownHosts);
+  const temporaryConfig = join(directory, `config.${process.pid}.check`);
+  await writeKnownHosts(temporaryKnownHosts, fingerprint.key);
+  await writeFile(temporaryConfig, block, { mode: 0o600 });
+  try {
+    let verified = await command("ssh", profileSshVerificationArgs(temporaryConfig, alias));
+    if (verified.code !== 0) {
+      if (!process.stdin.isTTY) throw new Error(`Profile key is not authorized and a password cannot be requested without a terminal: ${verified.stderr.trim() || "connection failed"}`);
+      process.stdout.write("The profile key is not authorized yet. ssh-copy-id will request the remote password once.\n");
+      const copied = await interactiveCommand("ssh-copy-id", ["-i", publicKey, "-F", temporaryConfig, alias], profileSshCopyEnvironment(profileDirectory()));
+      if (copied !== 0) throw new Error("ssh-copy-id failed.");
+      verified = await command("ssh", profileSshVerificationArgs(temporaryConfig, alias));
+    }
+    if (verified.code !== 0) throw new Error(`SSH key validation failed: ${verified.stderr.trim() || "connection failed"}`);
+  } finally {
+    await rm(temporaryConfig, { force: true });
+    await rm(temporaryKnownHosts, { force: true });
+  }
+
+  await writeKnownHosts(knownHosts, fingerprint.key);
+  await appendConfig(config, profileSshConfigBlock(host, privateKey, knownHosts));
+  process.stdout.write(`SSH host '${alias}' added to ${config}.\n`);
+}
+
+// Named profiles are re-executed with runtime-only extension/session flags
+// before the actual command. Strip those pairs before dispatching SSH actions.
+export function profileSshCommandArgs(raw: string[]): string[] {
+  const args: string[] = [];
+  for (let index = 0; index < raw.length; index += 1) {
+    const value = raw[index];
+    if (value === "--extension" || value === "--session-dir" || value === "--tui-mode") { index += 1; continue; }
+    if (value.startsWith("--extension=") || value.startsWith("--session-dir=") || value.startsWith("--tui-mode=")) continue;
+    args.push(value);
+  }
+  return args;
+}
+
+export async function handleProfileSshCli(args: string[]): Promise<boolean> {
+  if (args[0] !== "ssh") return false;
+  if (args[1] === "add" && args[2] && !args[3]) {
+    try { await addProfileSshHost(args[2]); }
+    catch (error) { process.stderr.write(`SSH setup failed: ${error instanceof Error ? error.message : String(error)}\n`); process.exitCode = 1; }
+    return true;
+  }
+  if (args[1] === "list" && !args[2]) {
+    try { await listProfileSshHosts(); }
+    catch (error) { process.stderr.write(`SSH setup failed: ${error instanceof Error ? error.message : String(error)}\n`); process.exitCode = 1; }
+    return true;
+  }
+  if ((args[1] === "delete" || args[1] === "remove") && args[2] && !args[3]) {
+    try { await deleteProfileSshHost(args[2]); }
+    catch (error) { process.stderr.write(`SSH setup failed: ${error instanceof Error ? error.message : String(error)}\n`); process.exitCode = 1; }
+    return true;
+  }
+  process.stderr.write("Usage: pi ssh add <host-name> | pi ssh list | pi ssh delete <host-name>\n"); process.exitCode = 1;
+  return true;
+}
+
+export default async function (_pi: ExtensionAPI) {
+  if (await handleProfileSshCli(profileSshCommandArgs(process.argv.slice(2)))) process.exit();
+}