Merge pull request 'ci(release): open tap and bucket pull requests instead of pushing to main' (#19) from ci/packaging-pull-requests into main

For a final version the publish job now pushes branch release/qqq-<version>
to QRun-IO/homebrew-tap and QRun-IO/scoop-bucket with PACKAGES_TOKEN and
opens a pull request "qqq <version>" in each; a human merges. A prerelease,
or a refused push or pull request, attaches qqq.rb / qqq.json to the release
as before, and never fails the release. The logic moves to
scripts/publish-packaging.sh, with a DRY_RUN=1 path that clones and commits
locally but writes nothing remote.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

.circleci/config.yml

@@ -1,14 +0,0 @@
-version: 2.1
-setup: true
-orbs:
-  qqq-orb: kingsrook/qqq-orb@0.8
-workflows:
-  setup:
-    jobs:
-    - qqq-orb/generate_pipeline:
-        orb_version: '0.8'
-        filters:
-          branches:
-            ignore: automation/qbit-rc-pending
-          tags:
-            only: /.*/

.gitea/workflows/build.yaml

@@ -0,0 +1,17 @@
+name: build
+on:
+  push:
+    branches: ['**']
+jobs:
+  node:
+    uses: self:KofTwentyTwo/ci-workflows/.gitea/workflows/node.yaml@v1
+    with:
+      node-version: '22'
+      # The TUI (packages/tui) is not an npm workspace and needs Bun; build and test cover the four
+      # Node workspaces only, as the old CI did.
+      commands: |
+        npm run generate
+        git diff --exit-code -- packages/ui-api-client/src/schema.ts packages/core/src/api/operations.ts
+        npm run build
+        npm test
+        npm run lint

.gitea/workflows/release.yaml

@@ -0,0 +1,304 @@
+# Copyright 2026 QRun.IO, Inc.
+# Licensed under the Apache License, Version 2.0 (see LICENSE).
+#
+# Release on a v<CLI version> tag (docs/release-runbook.md):
+#   linux    scripts/release.mjs gate; linux-x64, linux-arm64, darwin-x64 binaries (cross); draft Gitea release
+#            (no musl builds: bun installs no OpenTUI musl native package on a glibc host)
+#   macos    native darwin-arm64 binary, built and smoke-tested on the macOS runner
+#   windows  native windows-x64 binary, built and smoke-tested on the Windows runner
+#   publish  SHA256SUMS; publish the release and check its downloads; the four npm packages to the
+#            QRun-IO Gitea npm registry; for a final version pull requests to the Homebrew tap and the Scoop bucket
+name: release
+on:
+  push:
+    tags: ['v*']
+
+permissions:
+  contents: write
+
+env:
+  NODE_VERSION: 22.23.4
+  BUN_VERSION: 1.4.4
+  BUN_LINUX_SHA256: e0446eb55995772eb9894bebae9a6be368d985a8b9271ee124486f9946eedd76     # bun-linux-x64-baseline.zip
+  BUN_DARWIN_SHA256: c240d7f0ccb90c263a849fcdb09b7ee62630d921348ed6aafda86b9d577bc510    # bun-darwin-aarch64.zip
+  BUN_WINDOWS_SHA256: 0f20ce6674d4f2dbcc8c5d59fdf99f7ba45f8c3b367e0f5781cbfa30a1c78d99   # bun-windows-x64-baseline.zip
+
+jobs:
+  linux:
+    runs-on: container-build
+    timeout-minutes: 60
+    container:
+      image: node:22.23.4-bookworm
+      volumes:
+        - /var/lib/gitea-job-workspace:${{ github.workspace }}
+    env:
+      HOME: /tmp
+      CI: 'true'
+    outputs:
+      release-id: ${{ steps.draft.outputs.id }}
+      version: ${{ steps.plan.outputs.version }}
+      sums: ${{ steps.draft.outputs.sums }}
+    steps:
+      - uses: builtin:checkout
+        with:
+          fetch-depth: 0
+
+      - name: Check the tag
+        id: plan
+        shell: bash
+        env:
+          TAG: ${{ github.ref_name }}
+        run: |
+          set -euo pipefail
+          git config --global --add safe.directory "$GITHUB_WORKSPACE"
+          version=$(node -p 'require("./packages/cli/package.json").version')
+          [[ $TAG =~ ^v[0-9]+\.[0-9]+\.[0-9]+(-[0-9A-Za-z.-]+)?$ ]] || { echo "$TAG is not a release tag"; exit 1; }
+          [[ $TAG == "v$version" ]] || { echo "Tag $TAG does not match packages/cli/package.json $version"; exit 1; }
+          echo "version=$version" >> "$GITHUB_OUTPUT"
+
+      - name: Install Bun
+        shell: bash
+        run: |
+          set -euo pipefail
+          mkdir -p /tmp/bun && cd /tmp/bun
+          curl -fsSLo bun.zip "https://github.com/oven-sh/bun/releases/download/bun-v$BUN_VERSION/bun-linux-x64-baseline.zip"
+          echo "$BUN_LINUX_SHA256  bun.zip" | sha256sum -c -
+          python3 -c 'import sys, zipfile; zipfile.ZipFile(sys.argv[1]).extractall(".")' bun.zip
+          chmod +x bun-linux-x64-baseline/bun && echo /tmp/bun/bun-linux-x64-baseline >> "$GITHUB_PATH"
+
+      - name: Release gate (scripts/release.mjs)
+        # npm ci, generate drift, build, readiness (final versions), test, lint, TUI tests and type check, pack dry runs
+        run: node scripts/release.mjs --skip-binaries
+
+      - name: Linux and darwin-x64 binaries
+        shell: bash
+        run: |
+          set -euo pipefail
+          node scripts/build-binaries.mjs --no-build --targets linux-x64,linux-arm64,darwin-x64
+          scripts/verify-binary.sh dist/qqq-linux-x64
+
+      - name: Draft Gitea release
+        id: draft
+        shell: bash
+        env:
+          TOKEN: ${{ github.token }}
+          TAG: ${{ github.ref_name }}
+          VERSION: ${{ steps.plan.outputs.version }}
+        run: |
+          set -euo pipefail
+          api="$GITHUB_SERVER_URL/api/v1/repos/$GITHUB_REPOSITORY"
+          auth="Authorization: token $TOKEN"
+          if curl -fsS -o /dev/null -H "$auth" "$api/releases/tags/$TAG" 2>/dev/null; then
+            echo "A release for $TAG already exists; a version is released once"; exit 1
+          fi
+          if [[ -f docs/release-notes/$VERSION.md ]]; then notes=$(cat "docs/release-notes/$VERSION.md"); else
+            notes=$(awk -v v="[$VERSION]" '/^## / { if (found) exit; if (index($0, "## " v) == 1) { found = 1; next } } found { print }' CHANGELOG.md)
+          fi
+          [[ -n ${notes//[[:space:]]/} ]] || notes="qqq $VERSION"
+          body=$(NOTES="$notes" node -e 'process.stdout.write(JSON.stringify({ tag_name: process.env.TAG,
+            name: `qqq ${process.env.VERSION}`, body: process.env.NOTES, draft: true, prerelease: process.env.VERSION.includes("-") }))')
+          id=$(curl -fsS -X POST -H "$auth" -H 'Content-Type: application/json' -d "$body" "$api/releases" |
+            node -e 'process.stdout.write(String(JSON.parse(require("fs").readFileSync(0, "utf8")).id))')
+          echo "id=$id" >> "$GITHUB_OUTPUT"
+          echo "sums=$(cd dist && sha256sum qqq-* | tr '\n' ';')" >> "$GITHUB_OUTPUT"
+          for f in dist/qqq-*; do
+            curl -fsS -o /dev/null -X POST -H "$auth" -F "attachment=@$f" "$api/releases/$id/assets?name=$(basename "$f")"
+            echo "Attached $(basename "$f") to draft release $id"
+          done
+
+  macos:
+    needs: linux
+    runs-on: qqq-macos-arm64
+    timeout-minutes: 45
+    env:
+      CI: 'true'
+    outputs:
+      sums: ${{ steps.attach.outputs.sums }}
+    steps:
+      - uses: builtin:checkout
+
+      - name: Install Node.js and Bun
+        shell: bash
+        run: |
+          set -euo pipefail
+          tools="$(mktemp -d)" && cd "$tools"
+          node_file="node-v$NODE_VERSION-darwin-arm64.tar.gz"
+          curl -fsSLO "https://nodejs.org/dist/v$NODE_VERSION/$node_file" && curl -fsSLO "https://nodejs.org/dist/v$NODE_VERSION/SHASUMS256.txt"
+          grep " $node_file\$" SHASUMS256.txt | shasum -a 256 -c -
+          tar -xzf "$node_file"
+          curl -fsSLo bun.zip "https://github.com/oven-sh/bun/releases/download/bun-v$BUN_VERSION/bun-darwin-aarch64.zip"
+          echo "$BUN_DARWIN_SHA256  bun.zip" | shasum -a 256 -c -
+          unzip -q bun.zip
+          echo "$tools/node-v$NODE_VERSION-darwin-arm64/bin" >> "$GITHUB_PATH"
+          echo "$tools/bun-darwin-aarch64" >> "$GITHUB_PATH"
+          echo "TOOLS_DIR=$tools" >> "$GITHUB_ENV"
+
+      - name: Build, test, darwin-arm64 binary
+        shell: bash
+        run: |
+          set -euo pipefail
+          node --version && bun --version
+          npm ci
+          npm run build
+          npm test
+          npm run lint
+          node scripts/build-binaries.mjs --no-build --host
+          scripts/verify-binary.sh dist/qqq-darwin-arm64
+
+      - name: Attach to the draft release
+        id: attach
+        shell: bash
+        env:
+          TOKEN: ${{ github.token }}
+          RELEASE_ID: ${{ needs.linux.outputs.release-id }}
+        run: |
+          set -euo pipefail
+          curl -fsS -o /dev/null -X POST -H "Authorization: token $TOKEN" -F "attachment=@dist/qqq-darwin-arm64" \
+            "$GITHUB_SERVER_URL/api/v1/repos/$GITHUB_REPOSITORY/releases/$RELEASE_ID/assets?name=qqq-darwin-arm64"
+          echo "Attached qqq-darwin-arm64"
+          echo "sums=$(cd dist && shasum -a 256 qqq-darwin-arm64 | tr '\n' ';')" >> "$GITHUB_OUTPUT"
+
+      - name: Remove the tools
+        if: always()
+        shell: bash
+        run: if [[ -n ${TOOLS_DIR:-} ]]; then rm -rf "$TOOLS_DIR"; fi
+
+  windows:
+    needs: linux
+    runs-on: qqq-windows-vm6218
+    timeout-minutes: 45
+    env:
+      CI: 'true'
+    outputs:
+      sums: ${{ steps.attach.outputs.sums }}
+    steps:
+      - uses: builtin:checkout
+
+      - name: Install Node.js and Bun
+        shell: pwsh
+        run: |
+          $ErrorActionPreference = 'Stop'; $ProgressPreference = 'SilentlyContinue'
+          $tools = Join-Path ([IO.Path]::GetTempPath()) ("qqq-tools-" + [guid]::NewGuid())
+          New-Item -ItemType Directory -Path $tools | Out-Null
+          $nodeFile = "node-v$env:NODE_VERSION-win-x64.zip"
+          Invoke-WebRequest "https://nodejs.org/dist/v$env:NODE_VERSION/$nodeFile" -OutFile "$tools\$nodeFile"
+          Invoke-WebRequest "https://nodejs.org/dist/v$env:NODE_VERSION/SHASUMS256.txt" -OutFile "$tools\SHASUMS256.txt"
+          $want = ((Get-Content "$tools\SHASUMS256.txt") | Where-Object { $_ -match " $([regex]::Escape($nodeFile))$" }).Split(' ')[0]
+          if ((Get-FileHash "$tools\$nodeFile" -Algorithm SHA256).Hash -ne $want) { throw "$nodeFile checksum mismatch" }
+          Expand-Archive "$tools\$nodeFile" -DestinationPath $tools
+          Invoke-WebRequest "https://github.com/oven-sh/bun/releases/download/bun-v$env:BUN_VERSION/bun-windows-x64-baseline.zip" -OutFile "$tools\bun.zip"
+          if ((Get-FileHash "$tools\bun.zip" -Algorithm SHA256).Hash -ne $env:BUN_WINDOWS_SHA256) { throw "bun.zip checksum mismatch" }
+          Expand-Archive "$tools\bun.zip" -DestinationPath $tools
+          Add-Content $env:GITHUB_PATH "$tools\node-v$env:NODE_VERSION-win-x64"
+          Add-Content $env:GITHUB_PATH "$tools\bun-windows-x64-baseline"
+          Add-Content $env:GITHUB_ENV "TOOLS_DIR=$tools"
+
+      - name: Build, test, windows-x64 binary
+        shell: pwsh
+        run: |
+          $ErrorActionPreference = 'Stop'; $PSNativeCommandUseErrorActionPreference = $true
+          node --version; bun --version
+          npm ci
+          npm run build
+          npm test
+          npm run lint
+          node scripts/build-binaries.mjs --no-build --host
+          pwsh -NoProfile -File scripts/verify-binary.ps1 -Binary dist\qqq-windows-x64.exe
+
+      - name: Attach to the draft release
+        id: attach
+        shell: pwsh
+        env:
+          TOKEN: ${{ github.token }}
+          RELEASE_ID: ${{ needs.linux.outputs.release-id }}
+        run: |
+          $ErrorActionPreference = 'Stop'; $PSNativeCommandUseErrorActionPreference = $true
+          curl.exe -fsS -o NUL -X POST -H "Authorization: token $env:TOKEN" -F "attachment=@dist/qqq-windows-x64.exe" `
+            "$env:GITHUB_SERVER_URL/api/v1/repos/$env:GITHUB_REPOSITORY/releases/$env:RELEASE_ID/assets?name=qqq-windows-x64.exe"
+          Write-Output "Attached qqq-windows-x64.exe"
+          $hash = (Get-FileHash dist\qqq-windows-x64.exe -Algorithm SHA256).Hash.ToLowerInvariant()
+          Add-Content $env:GITHUB_OUTPUT "sums=$hash  qqq-windows-x64.exe;"
+
+      - name: Remove the tools
+        if: always()
+        shell: pwsh
+        run: if ($env:TOOLS_DIR) { Remove-Item -Recurse -Force $env:TOOLS_DIR -ErrorAction SilentlyContinue }
+
+  publish:
+    needs: [linux, macos, windows]
+    runs-on: container-build
+    timeout-minutes: 30
+    container:
+      image: node:22.23.4-bookworm
+      volumes:
+        - /var/lib/gitea-job-workspace:${{ github.workspace }}
+    env:
+      HOME: /tmp
+      CI: 'true'
+      TOKEN: ${{ github.token }}
+      PACKAGES_TOKEN: ${{ secrets.PACKAGES_TOKEN }}
+      RELEASE_ID: ${{ needs.linux.outputs.release-id }}
+      VERSION: ${{ needs.linux.outputs.version }}
+    steps:
+      - uses: builtin:checkout
+
+      - name: SHA256SUMS
+        shell: bash
+        env:
+          SUMS: ${{ needs.linux.outputs.sums }}${{ needs.macos.outputs.sums }}${{ needs.windows.outputs.sums }}
+        run: |
+          set -euo pipefail
+          git config --global --add safe.directory "$GITHUB_WORKSPACE"
+          mkdir -p /tmp/assets
+          tr ';' '\n' <<< "$SUMS" | sed '/^$/d' | sort -k2 > /tmp/assets/SHA256SUMS
+          cat /tmp/assets/SHA256SUMS
+          for want in qqq-linux-x64 qqq-linux-arm64 qqq-darwin-x64 qqq-darwin-arm64 qqq-windows-x64.exe; do
+            grep -Eq "^[0-9a-f]{64}  $want\$" /tmp/assets/SHA256SUMS || { echo "No checksum for $want"; exit 1; }
+          done
+          curl -fsS -o /dev/null -X POST -H "Authorization: token $TOKEN" -F "attachment=@/tmp/assets/SHA256SUMS" \
+            "$GITHUB_SERVER_URL/api/v1/repos/$GITHUB_REPOSITORY/releases/$RELEASE_ID/assets?name=SHA256SUMS"
+
+      - name: Publish the release and check the downloads
+        shell: bash
+        run: |
+          set -euo pipefail
+          prerelease=false; [[ $VERSION == *-* ]] && prerelease=true
+          curl -fsS -o /dev/null -X PATCH -H "Authorization: token $TOKEN" -H 'Content-Type: application/json' \
+            -d "{\"draft\":false,\"prerelease\":$prerelease}" "$GITHUB_SERVER_URL/api/v1/repos/$GITHUB_REPOSITORY/releases/$RELEASE_ID"
+          # What users download (the formula, the manifest, install.sh) must match SHA256SUMS.
+          cd /tmp/assets
+          while read -r _ file; do
+            curl -fsSL -o "$file" "$GITHUB_SERVER_URL/$GITHUB_REPOSITORY/releases/download/v$VERSION/$file"
+          done < SHA256SUMS
+          sha256sum --check --strict SHA256SUMS
+          echo "Released: $GITHUB_SERVER_URL/$GITHUB_REPOSITORY/releases/tag/v$VERSION"
+
+      - name: Publish the npm packages
+        shell: bash
+        run: |
+          set -euo pipefail
+          if [[ -z ${PACKAGES_TOKEN:-} ]]; then echo "PACKAGES_TOKEN is empty"; exit 1; fi
+          npm ci
+          npm run build
+          registry="$GITHUB_SERVER_URL/api/packages/$GITHUB_REPOSITORY_OWNER/npm/"
+          export NPM_CONFIG_USERCONFIG=/tmp/publish.npmrc
+          printf '//%s:_authToken=${PACKAGES_TOKEN}\n@qrun-io:registry=%s\n' "${registry#*://}" "$registry" > "$NPM_CONFIG_USERCONFIG"
+          # In dependency order. A version already in the registry is left alone (versions are immutable),
+          # so a release republishes nothing that did not change; each package's own version picks its dist-tag.
+          for dir in packages/ui-api-client packages/core packages/conformance packages/cli; do
+            name=$(node -p "require('./$dir/package.json').name")
+            version=$(node -p "require('./$dir/package.json').version")
+            if npm view "$name@$version" version --registry "$registry" > /dev/null 2>&1; then
+              echo "$name@$version is already published; skipped"; continue
+            fi
+            tag=latest; [[ $version == *-* ]] && tag=next
+            (cd "$dir" && npm publish --registry "$registry" --tag "$tag")
+            echo "Published $name@$version ($tag): $(npm view "$name@$version" version --registry "$registry")"
+          done
+
+      - name: Homebrew tap and Scoop bucket (pull requests)
+        # Final versions: branch release/qqq-<version> and a pull request "qqq <version>" in QRun-IO/homebrew-tap
+        # and QRun-IO/scoop-bucket (PACKAGES_TOKEN); a human merges. Prereleases, or a refused push, attach
+        # qqq.rb / qqq.json to the release instead. Never fails the release.
+        shell: bash
+        run: bash scripts/publish-packaging.sh

.qqq-ci.yml

@@ -1,7 +0,0 @@
-profile: cli
-orb_version: '0.8'
-default_branch: main
-publish:
-  release: true
-publish_context: qqq-maven-registry-credentials
-platforms: [macos-arm64, windows-x64]

CHANGELOG.md

@@ -5,6 +5,17 @@ All notable changes to the qqq CLI and its packages. Versions follow [semver](ht
 
 ## [Unreleased]
 
+### Changed
+
+- TypeScript 5.8.3 to 6.0.3 and `@types/node` 22.15.3 to 26.6.6 across the workspace, `packages/tui` and `packages/tui-spike`. TypeScript 6 no longer loads every `@types/*` package implicitly, so `tsconfig.base.json` now lists `"types": ["node"]`; `@types/node` 26 no longer accepts an `undefined` assertion message, so one conformance test passes a real fallback message. TypeScript 7 is not adopted yet: `openapi-typescript` 7.13.0 (the client generator, peer `typescript ^5.x`) calls the TypeScript JS API (`ts.factory`), which the native 7 compiler does not provide. No behaviour change.
+
+### Fixed
+
+- **Windows: the DPAPI keyring passes secrets to PowerShell over stdin**, not on the command line, so a token never appears in the process list or in the Windows event log, and JSON, shell syntax, Unicode and leading or trailing whitespace round-trip unchanged. Secrets are decoded with UTF-8 on both sides, the decrypted BSTR is zeroed after reading, and a PowerShell failure reports "Windows credential protection failed" instead of the subprocess arguments. Carried locally by GG Forge since cli-v1.0.0.
+- **Windows: `qqq login --browser` opens the whole authorization URL.** The opener was `cmd /c start`, which splits the URL at every `&`, so the browser received only the part before the first query parameter (`client_id`, `state` and `redirect_uri` were lost) and the loopback redirect never came. The URL now goes to PowerShell in the environment variable `QQQ_BROWSER_URL` (`Start-Process -FilePath $env:QQQ_BROWSER_URL`, a fixed encoded command, hidden window; `QQQ_POWERSHELL` picks the shell). Carried locally by GG Forge since cli-v1.0.0.
+- **`qqq ui`: Tags (t) asks the server first.** The record screen reads the record's collaboration features (`getRecordFeatures`) before opening the tag editor and says "Tags are not enabled for this table." or "Your role cannot tag this record." instead of opening an editor whose save the server would refuse. Carried locally by GG Forge since cli-v1.0.0.
+- The screen saver's Online tile said "nobody around" with two terminals signed in. It now counts signed-in sessions first (the session store's table: sessions active in the last 10 minutes and their users, your own included, "2 sessions · 1 user (you ×2)"), else you plus the people in collaboration presence; it never says nobody is around while you are signed in. The saver also keeps its presence lease on the screen under it (the extension has no idle state), so other clients see you still viewing it instead of gone. A server that stores no sessions and merges presence per user (mock auth) shows both terminals as "1 online · you".
+- Query in the screen saver looked like a different dog. All sizes are now generated from the drawing on https://www.qrun.io/query/ (`scripts/gen-query-art.mjs`) in its indigo, with a new medium size (25×13 cells, used where there is room) between the large (42×22) and the small (17×9).
 ### Added
 
 - **F12 shows and hides the Assistant panel** on every screen (Ctrl+G, `:ask` and a click on `12Ask` do
@@ -16,6 +27,51 @@ All notable changes to the qqq CLI and its packages. Versions follow [semver](ht
 - Kernel: `parseMarkdown`, `markdownText`, `answerDocument` and `linkTargetKey` (render/markdown.ts): the
   assistant's markdown as blocks with numbered links, one per target (a filter on the primary key is
   that record; JSON and base64 filters compare by content).
+- **`qqq ui`: the Shift bank.** Shift+F1…F10 are a second row of function keys: Keys (the `?`
+  reference), Servers, SQL (SQL Runner), Bulk, Metadata (refresh), Views (saved views), Copy (into a new
+  record), Export, History and Assistant (the same toggle as F12 and Ctrl+G). Like the primary bar they follow the
+  screen: keys that do not apply are dimmed and say why when pressed. The assignments are one table bound to
+  named actions (`assistant.toggle` and the rest), so other keys can bind the same actions.
+- **The F-key bar in two rows** (primary, then the Shift row marked `⇧`) on terminals of 30 lines or more;
+  `:fkeys one|two|auto` and F9 › Settings › F-key bar choose (saved as `ui.fkeyBar`). In one-row mode the
+  Shift row replaces the primary row for 2 seconds after a Shift+F press. Clicks on the Shift row run its
+  keys; `?` lists the bank.
+- **One decoder for modified function keys** across terminals: xterm modifier forms (tmux, iTerm2, Windows
+  Terminal), the kitty keyboard protocol, the legacy `ESC [25~`…`ESC [34~` numbering (VT220, rxvt and
+  the Linux console, macOS Terminal.app; `QQQ_FKEYS` overrides the detection) and rxvt's `$ ^ @`
+  suffixes. Ctrl+F-keys are decoded too (no bindings yet).
+
+- **Save as PDF…** is the first entry of the UI's printer picker (record `p`, grid Ctrl+P, `:print`; `:print pdf`
+  saves straight away): the server renders the same record sheet, table list or page (printing
+  `printingRenderToPdf`) and the PDF is saved the way downloads and exports are — the save dialog or, with
+  silent downloads, the download folder, the stamped name (`Customer-Ada-Lovelace_2026-11-01_120301.pdf`), no
+  silent overwrite. The CLI's `qqq print`, `qqq print list` and `qqq print text` take `--to-file [path]` (a
+  folder, a file, or the download folder by default).
+- Ctrl+P on screens that are not records or grids asks **Print what?**: **Content** (the default: the screen's
+  panels as a document with their titles, without navigation or borders) or **Screen** (the terminal as drawn).
+- Every printed or saved page carries the app's header (instance name, breadcrumb, server, user, time in the
+  profile's date format) and footer (`qqq ui <version> · <server>` or `qqq <version> · <server>`, a grid's filter
+  and sort, page n of m); the CLI sends the same.
+- `scripts/print-agent.sh` prints to `~/Downloads` unless `QQQ_PRINT_OUT` says otherwise (`--dir` reports it).
+- The kernel adds `renderToPdf`, `renderValues`, `canSaveAsPdf`, `chromeValues` and content sections on text
+  prints; the TUI's breadcrumbs moved to `breadcrumbs.ts`.
+- **`qqq ui` starts on a splash**: Query (the qrun.io mascot) blinking and wagging while it boots, the `qqq`
+  wordmark, the version and a status line that follows the boot (reading profiles, connecting, signing in,
+  loading metadata with the table count). Large Query from about 34 rows, the small one beside the
+  wordmark at 80×24, plain characters under `--ascii`; any key stops the animation, not the boot; shown at
+  least 600 ms. `--no-splash`, `QQQ_UI_NO_SPLASH=1` or F9 › Settings › Splash on start (`:splash on|off`,
+  saved as `ui.splash`) skip it.
+- **A profile picker on start**: with several profiles and none named (`--profile`, `QQQ_PROFILE`,
+  `--server`, `QQQ_SERVER`), the Servers picker opens over the splash with the last used profile selected;
+  Enter connects, `n` adds, the server status fills in as the probes answer, Esc quits with a one-line hint
+  about `--profile`. With no profile at all the add form opens directly; with exactly one, it connects.
+- **Connection failures stay on the splash** with the reason: Enter retries, `c` chooses another profile, `n`
+  adds one, Esc quits (instead of the bare error on the sign-in screen).
+
+### Changed
+
+- With several profiles and none named, `qqq ui` asks which to connect to instead of using the default
+  profile (`--profile` or `QQQ_PROFILE` keeps the old behaviour).
 
 ### Fixed
 
@@ -26,6 +82,32 @@ All notable changes to the qqq CLI and its packages. Versions follow [semver](ht
   Links), never their URL-encoded `/app/...?filter=` targets; the tool results' links are listed only
   when the text does not already show the same target, so `db_performance` no longer appears three times.
   Exact duplicate paragraphs are shown once; the timing and token line stays, dimmed.
+- **Shift+F3 and the other modified F3s** (`ESC [1;2R`) no longer vanish: OpenTUI took them for cursor
+  position reports. They are rewritten on the input stream into `ESC [13;2~` outside the startup
+  cursor-query window.
+
+## [1.0.1-rc.1] - 2026-11-08
+
+Release candidate built and published by Gitea CI from the tag `v1.0.1-rc.1`, the first through the new
+release path: `@qrun-io/qqq-cli` 1.0.1-rc.1, `@qrun-io/qqq-core` 1.0.1-rc.1 and
+`@qrun-io/qqq-ui-api-client` 1.8.1-rc.1 (dist-tag `next`) with `@qrun-io/qqq-ui-api-conformance` 1.6.0 on
+the QRun-IO Gitea npm registry, and the binaries with `SHA256SUMS` on the Gitea release. It carries the
+changes listed under Unreleased above as of this tag.
+
+### Changed
+
+- **Releases move to Gitea.** A `v<CLI version>` tag runs `.gitea/workflows/release.yaml`: the
+  `scripts/release.mjs` gate, the Linux, macOS arm64 (native) and Windows x64 (native) binaries, the npm
+  packages on `https://git.kof22.com/api/packages/QRun-IO/npm/`, the Gitea release, and for final versions
+  the Homebrew tap and Scoop bucket. The `cli-v*` tags and GitHub releases are retired; `scripts/install.sh`,
+  the formula and the Scoop manifest download from `https://git.kof22.com/QRun-IO/qqq-cli/releases`.
+
+### Fixed
+
+- **Windows: the DPAPI keyring works when `qqq` is started from PowerShell 7.** The inherited `PSModulePath`
+  named PowerShell 7's modules, so Windows PowerShell 5.1 could not load `Microsoft.PowerShell.Security` and every
+  sign-in failed with "Windows credential protection failed". The keyring now starts PowerShell without it.
+  Found by the first native Windows release lane.
 
 ## [1.0.0] - 2026-11-01
 

README.md

@@ -190,10 +190,14 @@ returns at once; `qqq print job status <id> --watch` follows later; `qqq print j
 job still queued). The printer given with `--printer` (or `qqq printer use`) is remembered per profile.
 `qqq print list person -w "lastName = Odd" --order -id --columns id,firstName,lastName` prints a table list
 of the whole result (up to 10,000 rows; `--page 2` for one page), and `some-command | qqq print text --title Log`
-prints text. In `qqq ui`, **Ctrl+P prints what you see** on every screen: a record sheet, a table list of
-the grid (all rows or this page), or the screen as text. Tables print only where the server enabled Print
+prints text. Add `--to-file [folder|file]` to any of them to save the PDF instead of printing (no path: the
+download folder, with the stamped name exports use). In `qqq ui`, **Ctrl+P prints what you see** on every
+screen: a record sheet, a table list of the grid (all rows or this page), or a screen's content (or the
+screen as drawn), each page with the app's header and footer; **Save as PDF…** in the printer picker saves
+it like a download. Tables print only where the server enabled Print
 for them (qbit-printing 2.1 `registerAll` enables every table). For local testing without hardware,
-`scripts/print-agent.sh` runs qqq-print-agent's virtual file printer, which writes each job to a directory.
+`scripts/print-agent.sh` runs qqq-print-agent's virtual file printer, which writes each job to `~/Downloads`
+(or `QQQ_PRINT_OUT`; `--dir` shows the folder).
 
 [TRY-IT.md](TRY-IT.md) walks through every command against the sample server.
 
@@ -213,6 +217,8 @@ qqq ui --theme light                                      # high-contrast (defau
 - **The function-key bar** at the bottom is always right for the current screen: F1 Help, F2 Search,
   F3 View, F4 Edit, F5 Refresh, F6 Filter, F7 New, F8 Delete, F9 Menu, F10 Quit. When the terminal takes
   the F-keys, Esc then a digit (or Ctrl+digit) stands for F1 to F10.
+  **Shift+F1…F10** are a second bank (Keys, Servers, SQL, Bulk, Metadata, Views, Copy, Export, History,
+  Assistant), shown as a second bar row from 30 lines (`:fkeys one|two|auto`).
 - **F2** is Search: records across tables (quick search), the main way into the data. **`/`** (or `.`, Ctrl+K)
   is the find-anything palette: any app, table, process, widget, report, record or command, searched as you
   type, fast on instances with thousands of tables. **Ctrl+O** switches servers, **Ctrl+P** prints what you see.
@@ -318,8 +324,8 @@ scripts/verify-binary.sh dist/qqq-darwin-arm64 --server http://localhost:8077
 ```
 
 The CLI runs on Node 20 and later and uses no Bun-only API; Bun is needed only for the TUI and the
-binaries. CI is the qqq-orb `cli` profile (`.qqq-ci.yml`); a tag `v<client version>` publishes the
-packages to GitHub Packages ([`docs/ci-lanes.md`](docs/ci-lanes.md) says what it does and does not cover).
+binaries. CI is the shared Gitea `node.yaml` workflow (`.gitea/workflows/build.yaml`): build, test, lint and
+a generated-code drift check on every push; it publishes nothing ([`docs/ci-lanes.md`](docs/ci-lanes.md)).
 
 ## Contributing, security, license
 

docs/README.md

@@ -23,9 +23,9 @@ Everything under `docs/`:
 | [release-notes/1.0.0.md](release-notes/1.0.0.md) | the GitHub release body for `cli-v1.0.0` (the release commands are in an HTML comment at the top) |
 | [release-notes/1.0.0-rc.1.md](release-notes/1.0.0-rc.1.md) | the GitHub release body for the release candidate `cli-v1.0.0-rc.1`, kept for history |
 | [packaging/README.md](packaging/README.md) | the install paths (curl installer, Homebrew, Scoop, npm), where the formula and manifest live, platform notes (Gatekeeper, SmartScreen, musl), and how the terminal UI is bundled |
-| [packaging/homebrew-tap/](packaging/homebrew-tap/README.md) | the complete `QRun-IO/homebrew-tap` repository, ready to copy: `Formula/qqq.rb`, README, LICENSE and its qqq-orb CI files |
+| [packaging/homebrew-tap/](packaging/homebrew-tap/README.md) | the complete `QRun-IO/homebrew-tap` repository, ready to copy: `Formula/qqq.rb`, README, LICENSE (its old qqq-orb CI files were removed with CircleCI) |
 | [packaging/qqq.json](packaging/qqq.json) | the Scoop manifest, copied to `bucket/qqq.json` in `QRun-IO/scoop-bucket` |
-| [ci-lanes.md](ci-lanes.md) | what CircleCI (the qqq-orb `cli` profile) runs: the Linux verify-and-publish job and the macOS arm64 and Windows x64 lanes, what is still outside CI, and the history of the orb changes |
+| [ci-lanes.md](ci-lanes.md) | what CI runs (the shared Gitea `node.yaml` workflow), what is outside CI, and the history of the retired CircleCI orb lanes |
 
 `scripts/update-packaging.mjs` fills the version and checksums of the formula and manifest from a
 release's `SHA256SUMS`.

docs/ci-lanes.md

@@ -2,30 +2,19 @@
 
 ## What runs today
 
-`.circleci/config.yml` is the qqq-orb setup stub on the `0.8` track (it picks up every 0.8.x release by
-itself); `.qqq-ci.yml` selects the orb's `cli` profile and, since qqq-orb **0.8.33**, turns on the
-platform lanes with `platforms: [macos-arm64, windows-x64]`. The profile generates three jobs:
+CircleCI and the qqq-orb were retired on 2026-11-07. CI is the shared Gitea workflow
+[`KofTwentyTwo/ci-workflows` `node.yaml`](https://git.kof22.com/KofTwentyTwo/ci-workflows), called from
+`.gitea/workflows/build.yaml` on every push, Linux only (`node:22-bookworm`):
 
-| Job | Executor | What it runs |
-|---|---|---|
-| `cli-macos-arm64` (`qqq-orb/cli_platform`) | macOS, Xcode 16.4, `m4pro.medium` | Node 20.20.2 (the `engines` floor) with nvm, `npm ci`, `npm run build && npm test && npm run lint` |
-| `cli-windows-x64` (`qqq-orb/cli_platform`) | Windows Server 2022, `windows.medium`, steps in Git Bash | the same, on Windows (keyring DPAPI path, Windows paths) |
-| `qqq-orb/cli_verify_publish` | Linux, `cimg/node:22.23` | `npm ci`; `npm run generate` then `git diff --exit-code` on `schema.ts` and `operations.ts`; build, test, lint; a Prism smoke (`GET /qqq/v1/version`, `/metaData/authentication`); on a tag `v<client version>` with `publish.release: true`, publishing (below) |
+1. `npm ci`
+2. `npm run generate`, then `git diff --exit-code` on `schema.ts` and `operations.ts` (generated-code drift)
+3. `npm run build`, `npm test`, `npm run lint`
 
-On branches and pull requests the three jobs run side by side. On a release tag `cli_verify_publish`
-**requires both platform lanes**, so nothing is published unless macOS and Windows are green. Publishing
-puts all four packages on GitHub Packages (client, core, conformance, CLI, in that order) with the dist-tag
-`latest` when all four versions are final and `rc` when any of them has a prerelease part. The CircleCI
-plan must include the `m4pro.medium` and `windows.medium` resource classes.
+Not in CI: publishing (packages, binaries, Homebrew/Scoop updates are release-machine steps in
+`docs/release-runbook.md` until a release workflow is decided), the macOS arm64 and Windows x64 lanes,
+the Prism smoke, the TUI (`npm run test:tui`, `typecheck:tui`, which need Bun) and the platform binaries.
 
-The orb's generator accepts this manifest: rendered with `src/scripts/generate_pipeline.py` from qqq-orb
-v0.8.33, a push to `main` gives `cli-macos-arm64`, `cli-windows-x64` and `cli_verify_publish` in
-`test_only`, and the tag `v1.8.0` gives the same in `publish_release` with `cli_verify_publish` requiring
-both lanes and bound to the `qqq-maven-registry-credentials` context.
-
-Still not in CI: the TUI (`npm run test:tui`, `typecheck:tui`, which need Bun), and building and smoking
-the platform binaries (`scripts/build-binaries.mjs --host`, `scripts/verify-binary.sh` / `.ps1`); the
-lanes run the Node packages only. Those stay release-machine steps in `docs/release-runbook.md`.
+Everything below describes the retired CircleCI setup and is kept for the record.
 
 ### History
 

docs/extensions.md

@@ -17,7 +17,7 @@ Versions merged on 2026-10-31 (machine-readable copy: `packages/ui-api-client/op
 | health | 1.1.0 | `/health` | 4 | qqq `develop` 6ac64fc66 (qqq-middleware-javalin) | 1.1.0 (same) |
 | alerts | 1.2.0 | `/alerts` | 6 | qbit-alerts `develop` a3fc6ac | |
 | assistant | 1.6.0 | `/assistant` | 16 | qbit-assistant `develop` bcf173f | |
-| collaboration | 1.1.0 | `/qbit/collaboration` | 45 | qbit-collaboration `develop` 03407ae | 1.1.0 (presence schemas, error contract) |
+| collaboration | 1.2.0 | `/qbit/collaboration` | 45 | qbit-collaboration `feat/per-session-presence` 0ae1e62 (local worktree `.worktrees/qbit-collab-sessions`, not yet on `develop`) | 1.1.0 (presence schemas, error contract); 1.2.0 adds per-connection presence (`connections`, `leaseCount`, `perConnection`), used when present |
 | data-analysis | 1.5.0 | `/qbit/data-analysis` | 21 | qbit-data-analysis `develop` 368d2c0 | |
 | db-performance | 1.0.0 | `/qbit/db-performance` | 4 | qbit-db-performance `develop` 4fd2c30 | |
 | edi | 1.1.0 | `/qbit/edi` | 4 | qbit-edi `develop` 75a4e6b | |

docs/packaging/README.md

@@ -36,10 +36,8 @@ checkpoint the sums here first, not there.
 ## Where the formula and manifest live
 
 - **`QRun-IO/homebrew-tap`** is laid out under `homebrew-tap/` here (the repository is created by copying
-  that directory). Its CI is the qqq-orb `homebrew-tap` profile (`.qqq-ci.yml`, with the same setup
-  `.circleci/config.yml` as `QRun-IO/homebrew-qctl`). That CI fetches and checksums every platform's
-  download, but it installs the formula and runs `brew test` with the **Linux x64 binary only**; the
-  macOS (and Linux arm64) binaries are not executed there. qctl stays in `QRun-IO/homebrew-qctl` until it
+  that directory). Its old CI (the qqq-orb `homebrew-tap` profile on CircleCI) was retired on
+  2026-11-07 and the seed no longer carries CI files; tap CI on Gitea is not decided yet. qctl stays in `QRun-IO/homebrew-qctl` until it
   moves over.
 - **`QRun-IO/scoop-bucket`** is created from
   [ScoopInstaller/BucketTemplate](https://github.com/ScoopInstaller/BucketTemplate), with `qqq.json` as

docs/packaging/homebrew-tap/.circleci/config.yml

@@ -1,14 +0,0 @@
-version: 2.1
-setup: true
-orbs:
-  qqq-orb: kingsrook/qqq-orb@0.8
-workflows:
-  setup:
-    jobs:
-    - qqq-orb/generate_pipeline:
-        orb_version: '0.8'
-        filters:
-          branches:
-            ignore: automation/qbit-rc-pending
-          tags:
-            ignore: /.*/

docs/packaging/homebrew-tap/.qqq-ci.yml

@@ -1,5 +0,0 @@
-profile: homebrew-tap
-orb_version: '0.8'
-default_branch: main
-tap: qrun-io/tap
-formula: qqq

docs/packaging/homebrew-tap/Formula/qqq.rb

@@ -2,31 +2,31 @@
 
 # qqq: the QQQ command-line client and terminal UI (qqq ui) in one binary.
 # Kept in qqq-cli at docs/packaging/homebrew-tap/Formula/qqq.rb; scripts/update-packaging.mjs fills
-# version and sha256 from the SHA256SUMS of a GitHub release, then the file is copied to the tap.
+# version and sha256 from the SHA256SUMS of a Gitea release; the release workflow then copies it to the tap.
 class Qqq < Formula
   desc "Command-line client and terminal UI for QQQ applications"
-  homepage "https://github.com/QRun-IO/qqq-cli"
+  homepage "https://git.kof22.com/QRun-IO/qqq-cli"
   version "1.0.0"
   license "Apache-2.0"
 
   on_macos do
     on_arm do
-      url "https://github.com/QRun-IO/qqq-cli/releases/download/cli-v#{version}/qqq-darwin-arm64"
+      url "https://git.kof22.com/QRun-IO/qqq-cli/releases/download/v#{version}/qqq-darwin-arm64"
       sha256 "5017a32ac5031d9146d541381099a959e5c19bbf04c48f725045d89d6007b211"
     end
     on_intel do
-      url "https://github.com/QRun-IO/qqq-cli/releases/download/cli-v#{version}/qqq-darwin-x64"
+      url "https://git.kof22.com/QRun-IO/qqq-cli/releases/download/v#{version}/qqq-darwin-x64"
       sha256 "eb9b1d43d24b639118d94b175c343080a39ae9ba64c24645c1792ff3b16a37f1"
     end
   end
 
   on_linux do
     on_arm do
-      url "https://github.com/QRun-IO/qqq-cli/releases/download/cli-v#{version}/qqq-linux-arm64"
+      url "https://git.kof22.com/QRun-IO/qqq-cli/releases/download/v#{version}/qqq-linux-arm64"
       sha256 "25f513bdda13bbe40cf536844eebc1e3a7e21cf7804024f25ebe7c42793d7ebc"
     end
     on_intel do
-      url "https://github.com/QRun-IO/qqq-cli/releases/download/cli-v#{version}/qqq-linux-x64"
+      url "https://git.kof22.com/QRun-IO/qqq-cli/releases/download/v#{version}/qqq-linux-x64"
       sha256 "804d06cb7c0012c2f185ae5d94c6bb8f9e2482a440bb3c165361f1a14c941e41"
     end
   end

docs/packaging/homebrew-tap/README.md

@@ -20,9 +20,9 @@ here (`Formula/qctl.rb`) once this tap exists, with `homebrew-qctl` kept as a po
 
 The formula is generated in qqq-cli: after a `cli-v<version>` GitHub release, run
 `node scripts/update-packaging.mjs <release SHA256SUMS>` there and copy
-`docs/packaging/homebrew-tap/Formula/qqq.rb` here. CI (qqq-orb `homebrew-tap` profile) fetches every
-platform's download, installs the formula and runs its test, which fails on a wrong or all-zero sum, but
-only once the pull request here is opened and its checks are read. The script refuses to write missing or
+`docs/packaging/homebrew-tap/Formula/qqq.rb` here. The tap's old CI (qqq-orb `homebrew-tap` profile,
+which installed the formula and ran its test) was retired on 2026-11-07; Gitea CI for the tap is not
+decided yet, so check the formula by hand (`brew install --build-from-source ./Formula/qqq.rb && brew test qqq`). The script refuses to write missing or
 malformed sums; still compare the sums in the diff with the release's `SHA256SUMS` before opening the PR.
 
 Apache-2.0

docs/packaging/qqq.json

@@ -1,7 +1,7 @@
 {
     "version": "1.0.0",
     "description": "Command-line client and terminal UI (qqq ui) for QQQ applications, in one binary",
-    "homepage": "https://github.com/QRun-IO/qqq-cli",
+    "homepage": "https://git.kof22.com/QRun-IO/qqq-cli",
     "license": "Apache-2.0",
     "notes": [
         "qqq ui (the terminal UI) needs Windows Terminal or another ConPTY terminal; the legacy console is not supported.",
@@ -9,7 +9,7 @@
     ],
     "architecture": {
         "64bit": {
-            "url": "https://github.com/QRun-IO/qqq-cli/releases/download/cli-v1.0.0/qqq-windows-x64.exe",
+            "url": "https://git.kof22.com/QRun-IO/qqq-cli/releases/download/v1.0.0/qqq-windows-x64.exe",
             "hash": "cf418d7842a227cee412171878228004f9bc5098a272c64b89512d1e2d06a176"
         }
     },
@@ -20,13 +20,14 @@
         ]
     ],
     "checkver": {
-        "github": "https://github.com/QRun-IO/qqq-cli",
-        "regex": "cli-v([\\d.]+(?:-rc\\.\\d+)?)"
+        "url": "https://git.kof22.com/api/v1/repos/QRun-IO/qqq-cli/releases/latest",
+        "jsonpath": "$.tag_name",
+        "regex": "v([\\d.]+)"
     },
     "autoupdate": {
         "architecture": {
             "64bit": {
-                "url": "https://github.com/QRun-IO/qqq-cli/releases/download/cli-v$version/qqq-windows-x64.exe",
+                "url": "https://git.kof22.com/QRun-IO/qqq-cli/releases/download/v$version/qqq-windows-x64.exe",
                 "hash": {
                     "url": "$baseurl/SHA256SUMS"
                 }

docs/release-runbook.md

@@ -1,240 +1,140 @@
-# Release runbook: qqq 1.0.0
+# Release runbook
 
-From "the branch is green" to "1.0.0 is published and installable everywhere". It is written for
-1.0.0 but holds for any release; replace the versions. Nothing in the repository tags, pushes or
-publishes by itself: `scripts/release.mjs` checks and prints, people run the commands.
+From "main is green" to "qqq X.Y.Z is published and installable everywhere". A release is one tag,
+`v<CLI version>`, on the merge commit; Gitea CI (`.gitea/workflows/release.yaml`) does the rest. Nothing
+publishes from a branch.
+
+> **Since 2026-11-08** releases run on Gitea. The CircleCI/qqq-orb path (npm packages on a
+> `v<client version>` tag, binaries on a GitHub release `cli-v<version>`, hand-made tap and bucket pull
+> requests) is retired. Older releases (1.0.0 and before) stay on GitHub.
 
 What ships:
 
-| Artifact | Version for 1.0 | Where | Made by |
-|---|---|---|---|
-| `qqq` binaries with the terminal UI, 7 targets, plus `SHA256SUMS` | 1.0.0 | GitHub release `cli-v1.0.0` | `scripts/build-binaries.mjs` (via `release.mjs`) |
-| `@qrun-io/qqq-cli` (CLI only, Node 20+) | 1.0.0 | GitHub Packages | the orb, on tag `v1.8.0` |
-| `@qrun-io/qqq-core` | 1.0.0 | GitHub Packages | the orb (with PR #165), else by hand |
-| `@qrun-io/qqq-ui-api-client` | 1.8.0 | GitHub Packages | the orb |
-| `@qrun-io/qqq-ui-api-conformance` | 1.6.0 | GitHub Packages | the orb |
+| Artifact | Where | Made by |
+|---|---|---|
+| `qqq` binaries with the terminal UI, 5 targets (linux x64/arm64, darwin x64/arm64, windows x64), plus `SHA256SUMS` | Gitea release `v<version>` of `QRun-IO/qqq-cli` | `release.yaml`: Linux targets and darwin-x64 (cross) in the container, darwin-arm64 on the macOS runner, windows-x64 on the Windows runner |
+| `@qrun-io/qqq-ui-api-client`, `qqq-core`, `qqq-ui-api-conformance`, `qqq-cli` | QRun-IO Gitea npm registry, `https://git.kof22.com/api/packages/QRun-IO/npm/` | `release.yaml` publish job |
+| Homebrew formula `qqq` | `QRun-IO/homebrew-tap`, `Formula/qqq.rb` | pull request from `release.yaml` (final versions), merged by a human |
+| Scoop manifest `qqq` | `QRun-IO/scoop-bucket`, `bucket/qqq.json` | pull request from `release.yaml` (final versions), merged by a human |
 
-**All four npm packages go final together.** The orb (PR #165) derives the dist-tag from all four
-versions: if any of client, core, conformance or CLI has a prerelease part, all four are published as
-`rc`; only when all four are final do they go out as `latest`. So 1.0.0 ships client 1.8.0 and
-conformance 1.6.0 as finals beside CLI and core 1.0.0, under the tags `v1.8.0` (orb publish) and
-`cli-v1.0.0` (GitHub release). `release.mjs` refuses a final CLI version while any of the four is still a
-prerelease (the readiness gate's "package versions" line).
-| Homebrew formula `qqq` | 1.0.0 | `QRun-IO/homebrew-tap` | `scripts/update-packaging.mjs`, then a PR |
-| Scoop manifest `qqq` | 1.0.0 | `QRun-IO/scoop-bucket` | `scripts/update-packaging.mjs`, then a PR |
+## 1. Versions
 
-## Checklist: what needs James
-
-Nobody else can do these; each says what happens without it.
-
-- [x] **Orb changes released** in `kingsrook/qqq-orb` 0.8.33 (`docs/ci-lanes.md`): publishing
-      `@qrun-io/qqq-core`, lint, the `operations.ts` drift check, the dist-tag rule above (PR #165), and
-      the macOS arm64 and Windows x64 lanes, which `.qqq-ci.yml` turns on (`platforms:`) and a release tag
-      requires before publishing.
-- [ ] **CircleCI plan** includes the `m4pro.medium` (macOS) and `windows.medium` resource classes. Without
-      them the platform lanes cannot start, and because a release tag requires them, the publish waits;
-      remove `platforms:` from `.qqq-ci.yml` to publish without them.
-- [ ] **Apple Developer ID and notarization**: a "Developer ID Application" certificate and a notary
-      credential (App Store Connect API key) on the release machine. Without it the macOS binaries are
-      only ad-hoc signed. Homebrew and the curl installer are not affected (they do not set the
-      quarantine flag), but a binary downloaded with a browser is stopped by Gatekeeper ("Apple cannot
-      check it for malicious software"). Workaround, documented in the README and the packaging notes:
-      `xattr -d com.apple.quarantine ./qqq-darwin-arm64`, or Finder, right-click, Open.
-- [ ] **Windows Authenticode certificate** (the KofTwentyTwo release standard). Without it SmartScreen
-      warns on first run ("Windows protected your PC", More info, Run anyway); Scoop installs still work.
-- [x] **`QRun-IO/homebrew-tap` and `QRun-IO/scoop-bucket` exist** (created from `docs/packaging/homebrew-tap/` and
-      `docs/packaging/qqq.json`). After the GitHub release, run `scripts/update-packaging.mjs` on the uploaded
-      `SHA256SUMS` and commit the filled `Formula/qqq.rb` and `bucket/qqq.json` to them. Without that commit
-      `brew install` and `scoop install` fail their checksum (the curl installer and the download still work).
-- [ ] **CircleCI context** `qqq-maven-registry-credentials` holds a `GITHUB_TOKEN` that can write the
-      four `@qrun-io` packages (the orb checks it authenticates; write access is only proven by a publish).
-- [ ] **Go for 1.0.0 final**: the 1.0.0-rc.1 feedback is accepted and no blocker is open.
-
-## Not verified before 1.0
-
-The platform lanes run the Node packages' build, tests and lint on macOS arm64 and Windows x64 (Node
-20), which covers the keyring code paths there, but they do not build or run the binaries.
-
-- `qqq-windows-x64.exe` (CLI and UI) has never run; `scripts/verify-binary.ps1` is the smoke to run on
-  a Windows machine.
-- `qqq-darwin-x64` has never run (no Intel Mac or Rosetta on the build machine).
-- Windows Terminal rendering of `qqq ui`, and the DPAPI keyring outside unit tests.
-
-Verified on the build machine: darwin-arm64 (CLI, keyring, completion, `qqq ui` tmux smoke and width
-smoke against the sample server), linux-x64 glibc, linux-arm64 glibc and linux-arm64-musl in Docker
-(CLI and `qqq ui` in tmux), the npm tarballs installed on Node 20, the Homebrew formula in the
-`homebrew/brew` container, and the curl installer from a local mirror.
-
-## 1. Branch green
-
-- `feat/m5-cli-release` (and whatever else is in the release) is merged to `main`; the orb pipeline on
-  `main` is green: `cli_verify_publish` (Linux, `cimg/node:22.23`) and the `cli-macos-arm64` and
-  `cli-windows-x64` lanes.
-- Locally on `main`, clean tree: `npm ci && npm run build && npm test && npm run lint && npm run test:tui`.
-
-## 2. Versions: release candidate to final
-
-**For 1.0.0 this step is done** on the branch `release/1.0.0` (34bbd2a, on top of the rc.1 commit
-6517373): all four packages final, the exact workspace pins, the `## [1.0.0]` CHANGELOG entry,
-`docs/release-notes/1.0.0.md`, and the READMEs at 1.0.0. That branch (with the release docs merged into
-it) is fast-forwarded onto `main`; nothing else changes versions:
-
-```sh
-git checkout main && git pull --ff-only
-git merge --ff-only release/1.0.0      # fails if main moved: rebase release/1.0.0 onto main first
-git push origin main
-```
-
-For later releases, the table below is the recipe.
-
-On a branch `release/1.0.0` from `main`:
+On a branch from `main`:
 
 | File | Change |
 |---|---|
-| `packages/cli/package.json`, `packages/cli/src/version.ts` (`CLI_VERSION`) | `1.0.0-rc.N` → `1.0.0` |
-| `packages/core/package.json` | `1.0.0-rc.N` → `1.0.0` |
-| `packages/ui-api-client/package.json` | `1.8.0-rc.N` → `1.8.0` (the client follows the UI API version) |
-| `packages/conformance/package.json` | `1.6.0-rc.N` → `1.6.0` |
+| `packages/cli/package.json`, `packages/cli/src/version.ts` (`CLI_VERSION`) | the CLI version, e.g. `1.1.0-rc.1` or `1.1.0` |
+| `packages/core/package.json`, `packages/conformance/package.json` | bump any package whose content changed |
+| `packages/ui-api-client/package.json` | follows the UI API version of `openapi/qqq-v1.json` |
 | workspace dependencies in `packages/cli` and `packages/core` | the same versions, exact |
-| `CHANGELOG.md` | a `## [1.0.0] - <date>` entry above the rc entries |
-| `README.md`, `packages/cli/README.md` | the version and `@rc` in the npm command (`@latest`, or no tag) |
+| `CHANGELOG.md` | a `## [X.Y.Z] - <date>` entry (it becomes the release notes; `docs/release-notes/X.Y.Z.md` wins if present) |
 
-All four packages move to finals in the same commit; none may stay `-rc` (the orb would then publish all
-four as `rc`, and `release.mjs` refuses). Then `npm install` (refreshes `package-lock.json`),
-`npm run lint`, which fails if any version disagrees, and `npm run release -- --check`, which must say
-READY (parity 100% in both columns, every finding filed, the CHANGELOG entry, documented commands,
-package versions). Commit (`git commit -S -m "release: 1.0.0"`), merge to `main` through a pull request.
+Then `npm install` (refreshes `package-lock.json`), `npm run lint` (fails if any version disagrees) and
+`node scripts/release.mjs` (the same gate CI runs; add `--skip-binaries` to save time). A final version
+must pass the readiness gate (`npm run release -- --check`: parity, findings filed, CHANGELOG entry,
+documented commands, all four packages final); a prerelease is not gated. Merge through a pull request.
 
-## 3. Release check and binaries
+Each package version is published once. The publish job skips a package whose exact version is already
+in the registry (unchanged packages ride along), so bump every package whose content changed.
 
-On `main` at the release commit, clean tree:
+## 2. Tag
 
 ```sh
-node scripts/release.mjs        # the readiness gate (final versions), npm ci, generate drift, build, test,
-                                # lint, TUI tests and type check, pack dry runs, the 7 binaries with the UI
-                                # and dist/SHA256SUMS
-scripts/verify-binary.sh dist/qqq-darwin-arm64 --server http://localhost:8077   # sample server running
+git checkout main && git pull --ff-only
+git tag -s v1.1.0 -m "qqq 1.1.0" && git push origin v1.1.0
 ```
 
-`release.mjs` prints the commands for steps 5 and 6 with the right versions.
+Or create the tag on the merge commit through the Gitea API (`POST /repos/QRun-IO/qqq-cli/tags`). The tag
+must equal `packages/cli/package.json` or the release fails at once. A version with a `-` (`-rc.N`) is a
+prerelease: npm dist-tag `next` for prerelease packages, a Gitea prerelease, and no tap or bucket update.
 
-## 4. Sign (James's credentials)
+## 3. What CI does
 
-Signing changes the files, so it comes before the checksums are final. Each script reads its
-credentials from the environment, does nothing (and says what is missing) without them, has
-`--dry-run`, and recomputes `dist/SHA256SUMS`.
+`.gitea/workflows/release.yaml`, in order; any failure stops it:
+
+1. **linux** (`container-build`, `node:22.23.4-bookworm`, Bun 1.4.4 checksum-pinned):
+   `scripts/release.mjs --skip-binaries` (npm ci, generate drift, build, readiness for finals, tests, lint,
+   TUI tests and type check, pack dry runs), then the linux-x64, linux-arm64 and darwin-x64
+   binaries (`scripts/build-binaries.mjs`), the `scripts/verify-binary.sh` smoke on linux-x64, and a
+   **draft** Gitea release with those binaries. An existing release for the tag fails the run.
+2. **macos** (`qqq-macos-arm64`) and **windows** (`qqq-windows-vm6218`), in parallel: pinned Node.js
+   (`SHASUMS256.txt`) and Bun (pinned sha256), `npm ci`, build, test, lint, the native binary
+   (`--host`), the `verify-binary.sh` / `verify-binary.ps1` smoke, and the upload to the draft.
+3. **publish** (`container-build`): `SHA256SUMS` from the three jobs' checksums, uploaded; the release is
+   published and every download is checked against `SHA256SUMS`; the four packages go to the Gitea npm
+   registry with `PACKAGES_TOKEN`; `scripts/update-packaging.mjs` fills the formula and the manifest.
+   For a final version `scripts/publish-packaging.sh` pushes branch `release/qqq-<version>` to
+   `QRun-IO/homebrew-tap` and `QRun-IO/scoop-bucket` with `PACKAGES_TOKEN` and opens a pull request
+   `qqq <version>` in each; a human checks the sums and merges. When the push or the pull request is refused
+   (or for a prerelease) `qqq.rb` and `qqq.json` are attached to the release instead (step 4); the release
+   never fails over this. Dry run, no writes: `DRY_RUN=1 VERSION=<version> SUMS_FILE=<SHA256SUMS> scripts/publish-packaging.sh`.
+
+Watch it under Actions in `QRun-IO/qqq-cli`. The release page is
+`https://git.kof22.com/QRun-IO/qqq-cli/releases/tag/v<version>`.
+
+**No musl binaries.** `build-binaries.mjs --musl` is best effort: on the glibc build container Bun does not
+install OpenTUI's musl native packages, so the release carries no `qqq-linux-*-musl`. On Alpine and other
+musl hosts use the npm package (`@qrun-io/qqq-cli`, CLI only) until a musl build lane exists.
+
+## 4. Homebrew tap and Scoop bucket (when CI could not push)
+
+`PACKAGES_TOKEN` is the package-scoped publisher token (user `qqq-package-publisher`); unless it is granted
+write on the tap and the bucket, CI attaches the filled files to the release instead. Their `main` branches
+should be protected so CI can only propose. For a final version, download them and open a
+pull request on each:
 
 ```sh
-QQQ_MACOS_SIGN_IDENTITY="Developer ID Application: <name> (<team>)" QQQ_NOTARY_PROFILE=qqq-notary \
-  scripts/sign-macos.sh            # codesign, hardened runtime + scripts/macos-entitlements.plist, notarytool --wait
-QQQ_WINDOWS_PFX=<cert.pfx> QQQ_WINDOWS_PFX_PASSWORD_FILE=<file> \
-  scripts/sign-windows.sh          # osslsigncode with an RFC 3161 timestamp
-scripts/verify-binary.sh dist/qqq-darwin-arm64 --server http://localhost:8077   # still runs after signing
-spctl --assess --type execute -vv dist/qqq-darwin-arm64   # "accepted, source=Notarized Developer ID"
+curl -fsSLO https://git.kof22.com/QRun-IO/qqq-cli/releases/download/v1.1.0/qqq.rb
+curl -fsSLO https://git.kof22.com/QRun-IO/qqq-cli/releases/download/v1.1.0/qqq.json
+# QRun-IO/homebrew-tap: Formula/qqq.rb   QRun-IO/scoop-bucket: bucket/qqq.json
 ```
 
-A bare executable cannot be stapled: Gatekeeper fetches the notarization ticket online the first time a
-quarantined (browser-downloaded) copy runs, and refuses offline until it can. Homebrew and the curl
-installer do not quarantine, so they work signed or not. Tried here without real credentials: an ad-hoc
-hardened-runtime signature with the entitlements (the CLI and the `qqq ui` smoke still pass), and an
-osslsigncode signature with a throwaway certificate that verifies. A real Developer ID, notarization
-and an Authenticode certificate are untried until James's credentials are used.
+Compare each sum with the release's `SHA256SUMS`. A wrong sum makes `brew install` and `scoop install`
+fail their checksum; the curl installer and direct downloads are unaffected.
 
-## 5. Tags and packages
+## 5. Signing (not automated)
 
-```sh
-git tag -s v1.8.0 -m "UI API client 1.8.0, qqq 1.0.0"     # the orb publishes on v<client version>
-git tag -s cli-v1.0.0 -m "qqq 1.0.0"                      # the GitHub release with the binaries
-git push origin v1.8.0 cli-v1.0.0
-```
+The binaries are not signed by CI: there is no Apple Developer ID / notary credential or Authenticode
+certificate on the runners. Homebrew and the curl installer do not quarantine, so they work unsigned; a
+browser-downloaded macOS binary needs `xattr -d com.apple.quarantine ./qqq-darwin-arm64`, and Windows
+SmartScreen warns on first run. `scripts/sign-macos.sh` and `scripts/sign-windows.sh` remain for a manual
+signed release (they recompute `dist/SHA256SUMS`); wiring them into the native jobs needs the credentials
+as runner-side secrets (owner decision).
 
-The tag `v1.8.0` makes the orb's `cli` profile verify the commit again and publish client, core,
-conformance and CLI to GitHub Packages, all as `latest` because all four are final. Watch the
-`publish_release` workflow. Only if the orb release with PR #165 is not out yet, finish by hand:
+Gitea has no equivalent of GitHub's artifact attestations; `SHA256SUMS` on the release and the signed tag
+are the provenance.
 
-```sh
-npm publish -w @qrun-io/qqq-core --registry https://npm.pkg.github.com --tag latest
-for p in qqq-ui-api-client qqq-core qqq-ui-api-conformance qqq-cli; do
-  npm dist-tag add "@qrun-io/$p@<its version>" latest --registry https://npm.pkg.github.com
-done
-```
-
-A version can never be published twice: if the orb job fails after publishing some packages, bump the
-patch version of the rest instead of retrying the same one.
-
-## 6. GitHub release
-
-```sh
-gh release create cli-v1.0.0 --repo QRun-IO/qqq-cli --latest --title "qqq 1.0.0" \
-  --notes-file <(sed -n '/^## \[1\.0\.0\]/,/^## \[/p' CHANGELOG.md | sed '$d') \
-  dist/qqq-* dist/SHA256SUMS
-```
-
-`dist/qqq-*` is the seven binaries (source maps are in `dist/sourcemaps/`, not uploaded). For a release
-candidate use `--prerelease` instead of `--latest`. The curl installer takes the newest stable `cli-v*`
-release (the channel Homebrew and Scoop follow); a release candidate is reached with `--pre` or
-`--version 1.x.y-rc.N`.
-
-## 7. Homebrew tap and Scoop bucket
-
-```sh
-gh release download cli-v1.0.0 --repo QRun-IO/qqq-cli -p SHA256SUMS -D /tmp/qqq-1.0.0
-node scripts/update-packaging.mjs /tmp/qqq-1.0.0/SHA256SUMS
-git diff docs/packaging                                  # every sha256 differs from the placeholder, none is all zeros
-git commit -S -am "packaging: qqq 1.0.0" && git push      # in qqq-cli, through a pull request
-```
-
-The script exits 1 and writes nothing if `SHA256SUMS` lacks a target or has a malformed sum. Compare each sum
-in the diff with the release's `SHA256SUMS` by eye before committing: the tap's CI and the bucket's manifest
-tests catch a wrong sum (the download will not match) only when someone opens those pull requests and reads
-their checks.
-
-Then copy `docs/packaging/homebrew-tap/Formula/qqq.rb` to `Formula/qqq.rb` in `QRun-IO/homebrew-tap`
-and `docs/packaging/qqq.json` to `bucket/qqq.json` in `QRun-IO/scoop-bucket`, a pull request on each. The tap's
-CI fetches every platform's download, installs the formula and runs its test (which insists on
-`binary with ui`). Scoop's `checkver`/`autoupdate` can take later versions from `SHA256SUMS` by itself.
-
-## 8. Smoke after publishing
+## 6. Smoke after publishing
 
 Against a real server (`--server`), from clean machines or containers:
 
 ```sh
 # curl installer (macOS, Linux)
-curl -fsSL https://raw.githubusercontent.com/QRun-IO/qqq-cli/main/scripts/install.sh | sh -s -- --version 1.0.0
+curl -fsSL https://git.kof22.com/QRun-IO/qqq-cli/raw/branch/main/scripts/install.sh | sh -s -- --version 1.1.0
 scripts/verify-binary.sh ~/.local/bin/qqq --server https://<server>
 
 # Homebrew
-brew install qrun-io/tap/qqq && brew test qrun-io/tap/qqq && scripts/verify-binary.sh "$(brew --prefix)/bin/qqq"
+brew install qrun-io/tap/qqq && brew test qrun-io/tap/qqq
 
-# npm, Node 20
-echo "@qrun-io:registry=https://npm.pkg.github.com" >> ~/.npmrc
-npm install -g @qrun-io/qqq-cli@1.0.0 && scripts/verify-binary.sh qqq --cli-only --server https://<server>
-
-# Docker (glibc and musl)
-docker run --rm --platform linux/amd64 -v "$PWD/dist:/d:ro" -v "$PWD/scripts:/s:ro" debian:bookworm-slim bash /s/verify-binary.sh /d/qqq-linux-x64
+# npm, Node 20+
+echo "@qrun-io:registry=https://git.kof22.com/api/packages/QRun-IO/npm/" >> ~/.npmrc
+npm install -g @qrun-io/qqq-cli@1.1.0 && scripts/verify-binary.sh qqq --cli-only --server https://<server>
 ```
 
 ```powershell
-# Windows, PowerShell
-scoop bucket add qrun https://github.com/QRun-IO/scoop-bucket; scoop install qqq
+scoop bucket add qrun https://git.kof22.com/QRun-IO/scoop-bucket; scoop install qqq
 pwsh scripts\verify-binary.ps1 -Binary (Get-Command qqq).Source -Server https://<server>
 ```
 
-And by hand once: download `qqq-darwin-arm64` with a browser on a Mac and run it (notarized: it runs;
-not notarized: the Gatekeeper prompt, cleared by `xattr -d com.apple.quarantine`), then `qqq ui` in
-Windows Terminal.
-
-## 9. After
-
-- Merge `main` back into the development branch; the next development version can stay at 1.0.0 until
-  the next bump (lint keeps the versions consistent either way).
-- Announce with the release link and the install commands from the README.
+Users who added the tap or the bucket from GitHub re-add them from Gitea
+(`brew tap qrun-io/tap https://git.kof22.com/QRun-IO/homebrew-tap`).
 
 ## When something goes wrong
 
-- **A package is broken**: `npm deprecate @qrun-io/<pkg>@<version> "<reason>"` and publish a patch; a
-  version cannot be unpublished from GitHub Packages without breaking installs that pinned it.
-- **A binary is broken**: delete the asset from the GitHub release, rebuild, re-sign, upload, recompute
-  `SHA256SUMS` and rerun step 7 (the formula and manifest carry the sums).
-- **The tap's CI fails on the new formula**: do not merge its pull request; `brew install` keeps
-  serving the previous version.
+- **The run fails before the publish job**: nothing is public. Delete the draft release (and the tag, if
+  the version must change), fix, and tag again.
+- **A package is broken**: `npm deprecate @qrun-io/<pkg>@<version> "<reason>"` against the Gitea registry
+  and publish a new version; a version is never republished.
+- **A binary is broken**: delete the release, bump the version and release again; the formula and the
+  manifest carry the sums, so never replace an asset in place.
+- **The tap's or bucket's check fails on the new file**: do not merge; users keep the previous version.

package-lock.json

@@ -14,8 +14,8 @@
       ],
       "devDependencies": {
         "@stoplight/prism-cli": "5.16.0",
-        "@types/node": "22.15.3",
-        "typescript": "5.8.3",
+        "@types/node": "26.6.6",
+        "typescript": "6.0.3",
         "yaml": "2.9.1"
       },
       "engines": {
@@ -564,13 +564,13 @@
       "license": "MIT"
     },
     "node_modules/@types/node": {
-      "version": "22.15.3",
-      "resolved": "https://registry.npmjs.org/@types/node/-/node-22.15.3.tgz",
-      "integrity": "sha512-lX7HFZeHf4QG/J7tBZqrCAXwz9J5RD56Y6MpP0eJkka8p+K0RY/yBTW7CYFJ4VGCclxqOLKmiGP5juQc6MKgcw==",
+      "version": "26.6.6",
+      "resolved": "https://registry.npmjs.org/@types/node/-/node-26.6.6.tgz",
+      "integrity": "sha512-MzQj+8Kx3XI40OmUAE6Qoh58ZMNstNNMwn2nfd3qWsfe7nDNSqJNzes4njhz6AHwrSHOffSLwXU6yb474Q4aog==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
-        "undici-types": "~6.21.0"
+        "undici-types": "~8.9.0"
       }
     },
     "node_modules/@types/swagger-schema-official": {
@@ -2708,9 +2708,9 @@
       }
     },
     "node_modules/typescript": {
-      "version": "5.8.3",
-      "resolved": "https://registry.npmjs.org/typescript/-/typescript-5.8.3.tgz",
-      "integrity": "sha512-p1diW6TqL9L07nNxvRMM7hMMw4c5XOo/1ibL4aAIGmSAt9slTE1Xgw5KWuof2uTOvCg9BY7ZRi+GaF+7sfgPeQ==",
+      "version": "6.0.3",
+      "resolved": "https://registry.npmjs.org/typescript/-/typescript-6.0.3.tgz",
+      "integrity": "sha512-y2TvuxSZPDyQakkFRPZHKFm+KKVqIisdg9/CZwm9ftvKXLP8NRWj38/ODjNbr43SsoXqNuAisEf1GdCxqWcdBw==",
       "dev": true,
       "license": "Apache-2.0",
       "bin": {
@@ -2722,9 +2722,9 @@
       }
     },
     "node_modules/undici-types": {
-      "version": "6.21.0",
-      "resolved": "https://registry.npmjs.org/undici-types/-/undici-types-6.21.0.tgz",
-      "integrity": "sha512-iwDZqg0QAGrg9Rav5H4n0M64c3mkR59cJ6wQp+7C4nI0gsmExaedaYLNO44eT4AtBBwjbTiGPMlt2Md0T9H9JQ==",
+      "version": "8.9.0",
+      "resolved": "https://registry.npmjs.org/undici-types/-/undici-types-8.9.0.tgz",
+      "integrity": "sha512-KTDyRTYX8sWmKXAikPHHSyc63CRPETMctyjKFupcC6OBLXT3xsN0e9aF7m+mIXutFWpUXuedtowG7iLOzp0kQg==",
       "dev": true,
       "license": "MIT"
     },
@@ -2954,11 +2954,11 @@
     },
     "packages/cli": {
       "name": "@qrun-io/qqq-cli",
-      "version": "1.0.0",
+      "version": "1.0.1-rc.1",
       "license": "Apache-2.0",
       "dependencies": {
-        "@qrun-io/qqq-core": "1.0.0",
-        "@qrun-io/qqq-ui-api-client": "1.8.0",
+        "@qrun-io/qqq-core": "1.0.1-rc.1",
+        "@qrun-io/qqq-ui-api-client": "1.8.1-rc.1",
         "@qrun-io/qqq-ui-api-conformance": "1.6.0",
         "commander": "15.0.0"
       },
@@ -2986,10 +2986,10 @@
     },
     "packages/core": {
       "name": "@qrun-io/qqq-core",
-      "version": "1.0.0",
+      "version": "1.0.1-rc.1",
       "license": "Apache-2.0",
       "dependencies": {
-        "@qrun-io/qqq-ui-api-client": "1.8.0",
+        "@qrun-io/qqq-ui-api-client": "1.8.1-rc.1",
         "jmespath": "0.16.0",
         "yaml": "2.9.1"
       },
@@ -3002,7 +3002,7 @@
     },
     "packages/ui-api-client": {
       "name": "@qrun-io/qqq-ui-api-client",
-      "version": "1.8.0",
+      "version": "1.8.1-rc.1",
       "license": "Apache-2.0",
       "dependencies": {
         "openapi-fetch": "0.17.0"

package.json

@@ -30,8 +30,8 @@
   },
   "devDependencies": {
     "@stoplight/prism-cli": "5.16.0",
-    "@types/node": "22.15.3",
-    "typescript": "5.8.3",
+    "@types/node": "26.6.6",
+    "typescript": "6.0.3",
     "yaml": "2.9.1"
   }
 }

packages/cli/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@qrun-io/qqq-cli",
-  "version": "1.0.0",
+  "version": "1.0.1-rc.1",
   "description": "Reference command-line client for QQQ applications, built only on the QQQ UI API (/qqq/v1).",
   "keywords": [
     "qqq",
@@ -50,7 +50,7 @@
     "node": ">=20"
   },
   "publishConfig": {
-    "registry": "https://npm.pkg.github.com"
+    "registry": "https://git.kof22.com/api/packages/QRun-IO/npm/"
   },
   "scripts": {
     "build": "tsc -p tsconfig.json",
@@ -58,8 +58,8 @@
     "prepack": "node ../../scripts/copy-license.mjs"
   },
   "dependencies": {
-    "@qrun-io/qqq-core": "1.0.0",
-    "@qrun-io/qqq-ui-api-client": "1.8.0",
+    "@qrun-io/qqq-core": "1.0.1-rc.1",
+    "@qrun-io/qqq-ui-api-client": "1.8.1-rc.1",
     "@qrun-io/qqq-ui-api-conformance": "1.6.0",
     "commander": "15.0.0"
   }

packages/cli/src/browser-login.ts

@@ -30,9 +30,9 @@ export interface BrowserSignInOptions {
 
 /** Opens a URL with the platform's opener; failures are ignored (the URL is printed anyway). */
 export function openInBrowser(url: string): void {
-  const [command, args] = process.platform === 'darwin' ? ['open', [url]] : process.platform === 'win32' ? ['cmd', ['/c', 'start', '', url]] : ['xdg-open', [url]]
+  const [command, args] = process.platform === 'darwin' ? ['open', [url]] : process.platform === 'win32' ? [process.env.QQQ_POWERSHELL || 'powershell.exe', ['-NoProfile', '-NonInteractive', '-EncodedCommand', Buffer.from('Start-Process -FilePath $env:QQQ_BROWSER_URL', 'utf16le').toString('base64')]] : ['xdg-open', [url]]
   try {
-    const child = spawn(command, args as string[], { stdio: 'ignore', detached: true })
+    const child = spawn(command, args as string[], { stdio: 'ignore', detached: true, windowsHide: true, env: { ...process.env, QQQ_BROWSER_URL: url } })
     child.on('error', () => undefined)
     child.unref()
   } catch {

packages/cli/src/commands/collab.ts

@@ -10,7 +10,7 @@
  */
 
 import type { Command } from 'commander'
-import { COLLABORATION, type TagEntry, type CollaborationTarget, type CommentEntry, type FavoriteEntry, type PresenceState } from '@qrun-io/qqq-core'
+import { COLLABORATION, connectionsSuffix, type TagEntry, type CollaborationTarget, type CommentEntry, type FavoriteEntry, type PresenceState } from '@qrun-io/qqq-core'
 import type { Context } from '../context.js'
 import { UsageError } from '../context.js'
 import { COLUMNS_OPTION, chooseColumns, countFooter, instantText, positiveInt, type Json } from './shared.js'
@@ -27,14 +27,15 @@ function hhmmss(date: Date): string {
   return date.toTimeString().slice(0, 8)
 }
 
-/** `2 here: Alice Morgan (viewing since 17:50:01), Bob Chen (editing email since 17:51:10)`. */
+/** `2 on person 1: Alice Morgan ×2 (viewing since 17:50:01), Bob Chen (editing email since 17:51:10)`. */
 export function presenceLine(state: PresenceState): string {
   if (!state.available) return 'presence: the collaboration extension is not installed'
   if (state.error) return `presence: ${state.error}`
   const where = state.scope.pk !== undefined ? `${state.scope.table} ${state.scope.pk}` : state.scope.table
   if (!state.count) return `nobody on ${where}`
-  const people = state.people.map((p) => `${p.name} (${String(p.mode).toLowerCase()}${p.fieldName ? ` ${p.fieldName}` : ''} since ${hhmmss(p.since)})`)
-  return `${state.count} on ${where}: ${people.join(', ')}`
+  const people = state.people.map((p) => `${p.name}${connectionsSuffix(p)} (${String(p.mode).toLowerCase()}${p.fieldName ? ` ${p.fieldName}` : ''} since ${hhmmss(p.since)})`)
+  const connections = state.connections ?? state.count
+  return `${state.count} on ${where}${connections > state.count ? ` (${connections} connections)` : ''}: ${people.join(', ')}`
 }
 
 function favoriteRows(items: FavoriteEntry[]): Json[] {
@@ -71,7 +72,8 @@ export function registerCollab(noun: Command, ctx: () => Context): void {
     .option('--watch', 'join and follow changes (heartbeat every 20 s, leaves on exit)')
     .option('--observe', 'follow changes without joining')
     .option('--editing [field]', 'with --watch: join as EDITING, optionally on a field')
-    .action(async (table: string, pk: string | undefined, options: { watch?: boolean; observe?: boolean; editing?: string | boolean }) => {
+    .option('--per-connection', 'one row per connection (tab, terminal) with its mode, field and start (collaboration 1.2.0)')
+    .action(async (table: string, pk: string | undefined, options: { watch?: boolean; observe?: boolean; editing?: string | boolean; perConnection?: boolean }) => {
       const c = ctx()
       const collaboration = await collab(c)
       const scope = { table, pk }
@@ -81,18 +83,30 @@ export function registerCollab(noun: Command, ctx: () => Context): void {
         else process.stdout.write(`${hhmmss(new Date())}  ${presenceLine(state)}${state.live ? '' : '  (polling)'}\n`)
       }
       if (!options.watch && !options.observe) {
-        const state = await collaboration.presenceSnapshot(scope)
-        const rows = state.people.map((p) => ({ name: p.name, user: p.userId, mode: p.mode, field: p.fieldName ?? '' }))
-        c.print({ data: { table, pk: pk ?? null, count: state.count, viewers: rows }, rows, columns: ['name', 'user', 'mode', 'field'], footer: countFooter(state.count, 'person', [`on ${pk !== undefined ? `${table} ${pk}` : table}`, '--watch to join and follow'], 'people') })
+        const state = await collaboration.presenceSnapshot(scope, { perConnection: options.perConnection })
+        const connections = state.connections ?? state.count
+        const where = `on ${pk !== undefined ? `${table} ${pk}` : table}`
+        const notes = [where, ...(connections > state.count ? [`${connections} connections`] : []), '--watch to join and follow']
+        const rows = state.people.map((p) => ({ name: p.name, user: p.userId, mode: p.mode, field: p.fieldName ?? '', connections: p.connections ?? 1 }))
+        if (options.perConnection) {
+          // older servers send no per-connection detail: one row per person, connection unknown
+          const leaseRows = state.people.flatMap((p) => p.leases?.length
+            ? p.leases.map((l) => ({ name: p.name, user: p.userId, mode: l.mode, field: l.fieldName ?? '', since: l.since ? hhmmss(l.since) : '', connection: l.connectionId }))
+            : [{ name: p.name, user: p.userId, mode: p.mode, field: p.fieldName ?? '', since: '', connection: '' }])
+          c.print({ data: { table, pk: pk ?? null, count: state.count, connections, viewers: rows, leases: leaseRows }, rows: leaseRows, columns: ['name', 'user', 'mode', 'field', 'since', 'connection'], footer: countFooter(state.count, 'person', notes, 'people') })
+          return
+        }
+        c.print({ data: { table, pk: pk ?? null, count: state.count, connections, viewers: rows }, rows, columns: ['name', 'user', 'mode', 'field', 'connections'], footer: countFooter(state.count, 'person', notes, 'people') })
         return
       }
       let last = ''
       const handle = await collaboration.joinPresence(scope, {
         announce: Boolean(options.watch),
+        perConnection: options.perConnection,
         mode: options.editing ? 'EDITING' : 'VIEWING',
         fieldName: typeof options.editing === 'string' ? options.editing : undefined,
         onChange: (state) => {
-          const key = JSON.stringify([state.people.map((p) => [p.userId, p.mode, p.fieldName]), state.error, state.live])
+          const key = JSON.stringify([state.people.map((p) => [p.userId, p.mode, p.fieldName, p.connections, p.leases?.map((l) => [l.connectionId, l.mode, l.fieldName])]), state.error, state.live])
           if (key !== last) {
             last = key
             emit(state)

packages/cli/src/commands/print.ts

@@ -22,10 +22,13 @@
  */
 
 import type { Command } from 'commander'
-import { readFileSync } from 'node:fs'
-import { FAILED_JOB_STATES, MAX_LIST_ROWS, printFilter, isFinalJobState, jobStateSummary, printProcessName, PRINT_PROCESS_PREFIX, readRememberedPrinter, resolvePrinter, whyNotPrintable, writeRememberedPrinter, type Printer, type PrintJob, type Printing } from '@qrun-io/qqq-core'
+import { existsSync, readFileSync, statSync } from 'node:fs'
+import { join } from 'node:path'
+import { profileNameForServer, formatDateValue, localeFromEnv, readDateSettings, resolveDateSettings, saveDownload, type PrintChrome, type RenderedPdf, type RenderRequest, FAILED_JOB_STATES, MAX_LIST_ROWS, printFilter, isFinalJobState, jobStateSummary, printProcessName, PRINT_PROCESS_PREFIX, readRememberedPrinter, resolvePrinter, whyNotPrintable, writeRememberedPrinter, type Printer, type PrintJob, type Printing } from '@qrun-io/qqq-core'
 import { EXIT, UsageError, type Context } from '../context.js'
-import { ORDER_OPTION, countFooter, instantText, positiveInt, type Json } from './shared.js'
+import { getLogin } from '../session.js'
+import { CLI_VERSION } from '../version.js'
+import { ORDER_OPTION, countFooter, instantText, positiveInt, writeDownload, type Json } from './shared.js'
 import { resolvedFilterFrom, type QueryOptions } from './table.js'
 
 const JOB_COLUMNS = ['id', 'title', 'status', 'printer', 'copies', 'created', 'message']
@@ -45,6 +48,61 @@ function printerRows(printers: Printer[], remembered: string | undefined): Json[
   return printers.map((p) => ({ default: p.id === remembered ? '*' : '', name: p.name, device: p.device ?? '', status: p.status ?? '', approved: p.approved ? 'yes' : 'no', exposed: p.exposed ? 'yes' : 'no', formats: p.formats.join(' '), id: p.id }))
 }
 
+/**
+ * The app's header and footer for what the CLI prints: the instance's branding name (else the
+ * profile), the title, the server (profile and host), the signed-in user, the time in the
+ * profile's date format; the footer `qqq <version> · <server>`.
+ */
+async function chromeFor(c: Context, title?: string): Promise<PrintChrome> {
+  const t = c.target
+  let host = t.server
+  try {
+    host = new URL(t.server).host
+  } catch {
+    host = t.server
+  }
+  const server = t.name && t.name !== host && t.name !== profileNameForServer(t.server) ? `${t.name} (${host})` : host
+  let app: string | undefined
+  try {
+    app = ((await c.metaData()) as unknown as { branding?: { appName?: string } }).branding?.appName
+  } catch {
+    app = undefined
+  }
+  const login = await getLogin(t).catch(() => undefined)
+  const user = login && login.kind === 'session' ? String((login.user as { name?: string } | undefined)?.name ?? '') : ''
+  let printedAt = new Date().toISOString()
+  try {
+    printedAt = formatDateValue(printedAt, 'DATE_TIME', resolveDateSettings(readDateSettings(t.name), localeFromEnv()), { withSeconds: false })
+  } catch {
+    // the ISO instant stays
+  }
+  return { app: app ?? t.name, title, server, user: user || undefined, printedAt, footerLeft: `qqq ${CLI_VERSION} · ${server}` }
+}
+
+/**
+ * --to-file: renders each document on the server and saves it as downloads are saved: a folder
+ * given gets the stamped default names, a file name given is written as given (one document
+ * only), no path saves to the download folder (`qqq config get download-dir`) with the stamped
+ * name, never overwriting.
+ */
+async function saveAsPdf(c: Context, printing: Printing, requests: RenderRequest[], out: string | true, title?: string): Promise<void> {
+  const chrome = await chromeFor(c, title)
+  const path = out === true ? undefined : out
+  const folder = path !== undefined && path !== '-' && existsSync(path) && statSync(path).isDirectory()
+  if (path !== undefined && !folder && requests.length > 1) throw new UsageError('--to-file with several documents takes a folder (or no path: the download folder).')
+  const rows: Json[] = []
+  for (const request of requests) {
+    const pdf: RenderedPdf = await printing.renderToPdf(request, new Date(), chrome)
+    if (pdf.message) c.note(pdf.message)
+    const written = folder ? saveDownload(join(path!, pdf.fileName), pdf.bytes, { explicit: false }) : writeDownload(path, pdf.fileName, pdf.bytes)
+    if (written) {
+      c.note(`Saved ${written} (${pdf.bytes.length.toLocaleString('en-US')} bytes)`)
+      rows.push({ saved: written, bytes: pdf.bytes.length })
+    }
+  }
+  if (path !== '-') c.print({ data: rows, rows, columns: ['saved', 'bytes'] })
+}
+
 /** Tables the server offers Print on, from the metadata. */
 async function printableTables(c: Context): Promise<string[]> {
   const processes = ((await c.metaData() as unknown as Json).processes ?? {}) as Record<string, unknown>
@@ -102,16 +160,18 @@ export function registerPrint(program: Command, ctx: () => Context): void {
     .option('-c, --copies <n>', 'copies of each record (1-100)', '1')
     .option('--no-wait', 'return once the jobs are queued')
     .option('--timeout <seconds>', 'how long to wait for the jobs', '120')
-    .action(async (table: string, ids: string[], options: { printer?: string; copies: string; wait: boolean; timeout: string }) => {
+    .option('--to-file [path]', 'save each record sheet as a PDF instead of printing: a folder, a file (one record), or the download folder')
+    .action(async (table: string, ids: string[], options: { printer?: string; copies: string; wait: boolean; timeout: string; toFile?: string | true }) => {
       const c = ctx()
       const printing = await printingOf(c)
       const tables = await printableTables(c)
       if (!tables.includes(table)) throw new UsageError(`Print is not enabled for table "${table}" on this server${tables.length ? ` (tables with Print: ${tables.join(', ')})` : ''}.`)
+      if (options.toFile !== undefined) return saveAsPdf(c, printing, ids.map((id) => ({ kind: 'record' as const, table, id })), options.toFile)
       const copies = positiveInt(options.copies, '--copies')
       const printer = await choosePrinter(c, printing, options.printer)
       if (options.printer) writeRememberedPrinter(c.target.name, { id: printer.id, name: printer.name })
       c.note(`Printing ${ids.length} ${table} record${ids.length === 1 ? '' : 's'} on "${printer.name}"${copies > 1 ? `, ${copies} copies each` : ''} (${printProcessName(table)})`)
-      const jobIds = await printing.print({ table, ids, printer: printer.id, copies })
+      const jobIds = await printing.print({ table, ids, printer: printer.id, copies, chrome: await chromeFor(c) })
       if (!jobIds.length) throw new Error(`Nothing was printed: no ${table} record ${ids.join(', ')} was found (or you may not see ${ids.length === 1 ? 'it' : 'them'}).`)
       const jobs = options.wait ? await follow(c, printing, jobIds, positiveInt(options.timeout, '--timeout')) : await printing.jobs({ ids: jobIds })
       c.print({ data: { printer: { id: printer.id, name: printer.name }, jobs }, rows: jobRows(jobs, c), columns: JOB_COLUMNS, footer: countFooter(jobs.length, 'job', [jobStateSummary(jobs), !options.wait && `follow: qqq print job status ${jobIds.join(' ')} --watch`]) })
@@ -134,7 +194,8 @@ export function registerPrint(program: Command, ctx: () => Context): void {
     .option('--copies <n>', 'copies (1-100)', '1')
     .option('--no-wait', 'return once the job is queued')
     .option('--timeout <seconds>', 'how long to wait for the job', '300')
-    .action(async (table: string, options: QueryOptions & { columns?: string; page?: string; pageSize: string; title?: string; orientation: string; paper: string; printer?: string; copies: string; wait: boolean; timeout: string }) => {
+    .option('--to-file [path]', 'save the table list as a PDF instead of printing: a folder, a file, - for stdout, or the download folder')
+    .action(async (table: string, options: QueryOptions & { columns?: string; page?: string; pageSize: string; title?: string; orientation: string; paper: string; printer?: string; copies: string; wait: boolean; timeout: string; toFile?: string | true }) => {
       const c = ctx()
       const printing = await printingOf(c)
       const meta = await c.tableMeta<Json>(table)
@@ -148,11 +209,15 @@ export function registerPrint(program: Command, ctx: () => Context): void {
       const filter = await resolvedFilterFrom(c, { ...options, pageSize: '500' }, meta, columns)
       const pageSize = positiveInt(options.pageSize, '--page-size')
       const scope = options.page ? { kind: 'page' as const, skip: (positiveInt(options.page, '--page') - 1) * pageSize, limit: pageSize } : { kind: 'all' as const }
+      if (options.toFile !== undefined) {
+        const described = [printFilter(filter as never), options.search ? `quick "${options.search}"` : ''].filter(Boolean).join(' · ')
+        return saveAsPdf(c, printing, [{ kind: 'list', list: { table, columns, filter: filter as unknown as Record<string, unknown>, scope, title: options.title ?? String(meta.label ?? table), filterDescription: described || undefined, orientation: orientation as 'AUTO', pageSize: paper as 'LETTER', primaryKeyField: String(meta.primaryKeyField ?? 'id') } }], options.toFile, String(meta.label ?? table))
+      }
       const printer = await choosePrinter(c, printing, options.printer)
       if (options.printer) writeRememberedPrinter(c.target.name, { id: printer.id, name: printer.name })
       const described = [printFilter(filter as never), options.search ? `quick "${options.search}"` : ''].filter(Boolean).join(' · ')
       c.note(`Printing ${scope.kind === 'all' ? 'all rows of' : `page ${options.page} of`} ${meta.label ?? table}${described ? ` where ${described}` : ''} on "${printer.name}"`)
-      const outcome = await printing.printTableList({ table, columns, filter: filter as unknown as Record<string, unknown>, scope, title: options.title ?? String(meta.label ?? table), filterDescription: described || undefined, printer: printer.id, copies: positiveInt(options.copies, '--copies'), orientation: orientation as 'AUTO', pageSize: paper as 'LETTER', primaryKeyField: String(meta.primaryKeyField ?? 'id') })
+      const outcome = await printing.printTableList({ table, columns, filter: filter as unknown as Record<string, unknown>, scope, title: options.title ?? String(meta.label ?? table), filterDescription: described || undefined, printer: printer.id, copies: positiveInt(options.copies, '--copies'), orientation: orientation as 'AUTO', pageSize: paper as 'LETTER', primaryKeyField: String(meta.primaryKeyField ?? 'id'), chrome: await chromeFor(c, String(meta.label ?? table)) })
       if (outcome.message) c.note(outcome.message)
       if (!outcome.jobIds.length) throw new Error('The server queued no print job.')
       const jobs = options.wait ? await follow(c, printing, outcome.jobIds, positiveInt(options.timeout, '--timeout')) : await printing.jobs({ ids: outcome.jobIds })
@@ -168,14 +233,16 @@ export function registerPrint(program: Command, ctx: () => Context): void {
     .option('--copies <n>', 'copies (1-100)', '1')
     .option('--no-wait', 'return once the job is queued')
     .option('--timeout <seconds>', 'how long to wait for the job', '120')
-    .action(async (file: string | undefined, options: { title: string; subtitle?: string; landscape?: boolean; printer?: string; copies: string; wait: boolean; timeout: string }) => {
+    .option('--to-file [path]', 'save the text page as a PDF instead of printing: a folder, a file, or the download folder')
+    .action(async (file: string | undefined, options: { title: string; subtitle?: string; landscape?: boolean; printer?: string; copies: string; wait: boolean; timeout: string; toFile?: string | true }) => {
       const c = ctx()
       const printing = await printingOf(c)
       const text = readFileSync(file === undefined || file === '-' ? 0 : file, 'utf8')
       if (!text.trim()) throw new UsageError('Nothing to print: the text is empty.')
+      if (options.toFile !== undefined) return saveAsPdf(c, printing, [{ kind: 'text', title: options.title, subtitle: options.subtitle, text, orientation: options.landscape ? 'LANDSCAPE' : 'PORTRAIT' }], options.toFile, options.title)
       const printer = await choosePrinter(c, printing, options.printer)
       if (options.printer) writeRememberedPrinter(c.target.name, { id: printer.id, name: printer.name })
-      const outcome = await printing.printText({ title: options.title, subtitle: options.subtitle, text, printer: printer.id, copies: positiveInt(options.copies, '--copies'), orientation: options.landscape ? 'LANDSCAPE' : 'PORTRAIT' })
+      const outcome = await printing.printText({ title: options.title, subtitle: options.subtitle, text, printer: printer.id, copies: positiveInt(options.copies, '--copies'), orientation: options.landscape ? 'LANDSCAPE' : 'PORTRAIT', chrome: await chromeFor(c, options.title) })
       const jobs = options.wait ? await follow(c, printing, outcome.jobIds, positiveInt(options.timeout, '--timeout')) : await printing.jobs({ ids: outcome.jobIds })
       c.print({ data: { printer: { id: printer.id, name: printer.name }, jobs }, rows: jobRows(jobs, c), columns: JOB_COLUMNS, footer: countFooter(jobs.length, 'job', [jobStateSummary(jobs)]) })
     })

packages/cli/src/context.ts

@@ -10,7 +10,7 @@
 
 import type { Command } from 'commander'
 import { UiApiError, unwrap, type UiApiClient } from '@qrun-io/qqq-ui-api-client'
-import { Assistant, Collaboration, Printing, missingQBitMessage, runProcess, type ProcessMeta, ExtensionNotInstalledError, OperationInputError, ExtensionRegistry, KNOWN_EXTENSIONS, FilterSyntaxError, OUTPUT_FORMATS, ProcessError, UnsafeFileNameError, defaultTimeZone, type DisplayOptions, applyQuery, callOperation, defaultFormat, extensionRegistry, getMetaData, getTableMetaData, render, type CallInput, type CallResult, type MetaDataDocument, type OutputFormat, type Printable } from '@qrun-io/qqq-core'
+import { Assistant, Collaboration, Printing, downloadProcessFile, missingQBitMessage, runProcess, type ProcessMeta, ExtensionNotInstalledError, OperationInputError, ExtensionRegistry, KNOWN_EXTENSIONS, FilterSyntaxError, OUTPUT_FORMATS, ProcessError, UnsafeFileNameError, defaultTimeZone, type DisplayOptions, applyQuery, callOperation, defaultFormat, extensionRegistry, getMetaData, getTableMetaData, render, type CallInput, type CallResult, type MetaDataDocument, type OutputFormat, type Printable } from '@qrun-io/qqq-core'
 import { openRealtimeStream } from '@qrun-io/qqq-ui-api-client'
 import { CLIENT_CHANNEL, authenticatedFetch, clientFor, currentToken, selectTarget, sessionCookieHeaderFor, target, type Target } from './session.js'
 
@@ -190,6 +190,7 @@ export class Context {
         const outcome = await runProcess({ baseUrl: t.server, fetch: authenticatedFetch(t), meta, values, records: recordIds.length ? { ids: recordIds } : undefined, stepTimeoutMillis: 60000 })
         return outcome.values
       },
+      download: (reference) => downloadProcessFile(t.server, authenticatedFetch(t), reference),
     })
   }
 

packages/cli/src/program.ts

@@ -14,7 +14,7 @@ import { Command, CommanderError } from 'commander'
 import { Context, EXIT, describeError, io } from './context.js'
 import { versionText } from './version.js'
 
-export { buildDescription } from './version.js'
+export { buildDescription, CLI_VERSION } from './version.js'
 import { registerApi } from './commands/api.js'
 import { registerAudit } from './commands/audit.js'
 import { registerAuth } from './commands/auth.js'

packages/cli/src/test/browser-opener.test.ts

@@ -0,0 +1,33 @@
+/*
+ * Copyright 2026 QRun.IO, Inc.
+ * Licensed under the Apache License, Version 2.0 (see LICENSE).
+ */
+
+
+import assert from 'node:assert/strict'
+import { test } from 'node:test'
+import childProcess from 'node:child_process'
+import { syncBuiltinESMExports } from 'node:module'
+import { EventEmitter } from 'node:events'
+import { openInBrowser } from '../browser-login.js'
+
+test('Windows browser opener preserves OAuth query parameters without shell interpretation', { skip: process.platform !== 'win32' }, () => {
+  const original = childProcess.spawn
+  const url = 'https://example.invalid/authorize?response_type=code&client_id=fixture-native&state=fake%20state&redirect_uri=http%3A%2F%2F127.0.0.1%3A4567%2Fcallback'
+  let captured: unknown[] = []
+  childProcess.spawn = ((...args: unknown[]) => {
+    captured = args
+    return Object.assign(new EventEmitter(), { unref() {} })
+  }) as typeof childProcess.spawn
+  syncBuiltinESMExports()
+  try { openInBrowser(url) } finally { childProcess.spawn = original; syncBuiltinESMExports() }
+  const [command, args, options] = captured as [string, string[], { env: NodeJS.ProcessEnv; windowsHide: boolean }]
+  assert.notEqual(command, 'cmd')
+  assert.equal(options.env.QQQ_BROWSER_URL, url)
+  assert.equal(options.windowsHide, true)
+  const script = Buffer.from(args.at(-1)!, 'base64').toString('utf16le')
+  const probe = 'function Start-Process { param([string]$FilePath) [Console]::Write($FilePath) }; ' + script
+  const result = childProcess.spawnSync(command, ['-NoProfile', '-NonInteractive', '-EncodedCommand', Buffer.from(probe, 'utf16le').toString('base64')], { env: options.env, encoding: 'utf8', windowsHide: true })
+  assert.equal(result.status, 0, result.stderr)
+  assert.equal(result.stdout, url)
+})

packages/cli/src/test/extensions.test.ts

@@ -41,4 +41,5 @@ test('presence lines say who is there and since when', () => {
   assert.equal(presenceLine({ available: true, scope: { table: 'person', pk: '1' }, count: 0, people: [], live: true }), 'nobody on person 1')
   assert.equal(presenceLine({ available: true, scope: { table: 'person' }, count: 2, people: [{ userId: 'a', name: 'Alice', mode: 'VIEWING', since }, { userId: 'b', name: 'Bob', mode: 'EDITING', fieldName: 'email', since }], live: true }), '2 on person: Alice (viewing since 17:50:01), Bob (editing email since 17:50:01)')
   assert.match(presenceLine({ available: false, scope: { table: 'person' }, count: 0, people: [], live: false }), /not installed/)
+  assert.equal(presenceLine({ available: true, scope: { table: 'person', pk: '1' }, count: 1, connections: 2, people: [{ userId: 'admin', name: 'Admin', mode: 'VIEWING', since, connections: 2 }], live: true }), '1 on person 1 (2 connections): Admin ×2 (viewing since 17:50:01)')
 })

packages/cli/src/test/golden/extensions.txt

@@ -4,7 +4,7 @@ esb             qqq esb             1.1.0      ok             1.1.0   1.1.0    5
 health          qqq health                     not installed  1.1.0   1.1.0    4
 alerts          qqq alerts                     not installed  1.2.0            6
 assistant       qqq assistant                  not installed  1.6.0            16
-collaboration   qqq collab                     not installed  1.1.0   1.1.0    45          record:{table}:{pk} table:{table} user:me
+collaboration   qqq collab                     not installed  1.2.0   1.1.0    45          record:{table}:{pk} table:{table} user:me
 data-analysis   qqq data-analysis              not installed  1.5.0            21
 db-performance  qqq db-performance             not installed  1.0.0            4
 edi             qqq edi                        not installed  1.1.0            4

packages/cli/src/test/presence-stub.test.ts

@@ -0,0 +1,68 @@
+/*
+ * Copyright 2026 QRun.IO, Inc.
+ * Licensed under the Apache License, Version 2.0 (see LICENSE).
+ */
+
+/**
+ * `qqq collab presence` against a stub: the connections column for two terminals of one user
+ * (collaboration 1.2.0), `--per-connection` rows, and a 1.1.0 server that sends no connections.
+ */
+
+import assert from 'node:assert/strict'
+import { after, before, describe, test } from 'node:test'
+import { runCli, sandbox } from './harness.js'
+import { startStub, type Stub } from './stub.js'
+
+describe('qqq collab presence against a stub', () => {
+  let stub: Stub
+  let box: ReturnType<typeof sandbox>
+  let version = '1.2.0'
+  const qqq = (args: string[]) => runCli(['--server', stub.url, ...args], { QQQ_TOKEN: 't', ...box.env })
+  const admin = { userId: 'admin', displayName: 'Admin', mode: 'VIEWING' }
+  before(async () => {
+    box = sandbox()
+    stub = await startStub([
+      [/^GET \/version$/, () => ({ apiVersion: '1.8.0', supportedMajorVersions: [1], features: [], extensions: [{ name: 'collaboration', version }] })],
+      [/^GET \/qbit\/collaboration\/presence$/, (r) => {
+        if (version === '1.1.0') return { table: 'person', viewers: [admin, { userId: 'bob', displayName: 'Bob', mode: 'EDITING' }] }
+        const leases = [
+          { ...admin, connections: 1, connectionId: 'c0000000000000001', sessionId: 's1', since: '2026-11-01T12:00:00Z' },
+          { ...admin, mode: 'EDITING', fieldName: 'name', connections: 1, connectionId: 'c0000000000000002', sessionId: 's2', since: '2026-11-01T12:00:05Z' },
+        ]
+        return { table: 'person', viewers: [{ ...admin, mode: 'EDITING', connections: 2 }], leaseCount: 2, ...(r.query.get('perConnection') === 'true' ? { leases } : {}) }
+      }],
+    ])
+  })
+  after(async () => {
+    await stub.close()
+    box.dispose()
+  })
+
+  test('two terminals of one user: one person with 2 connections', async () => {
+    version = '1.2.0'
+    const r = await qqq(['collab', 'presence', 'person', '-O', 'csv'])
+    assert.equal(r.code, 0, r.stderr)
+    assert.match(r.stdout, /^name,user,mode,field,connections\r?\nAdmin,admin,EDITING,,2/m)
+    const json = JSON.parse((await qqq(['collab', 'presence', 'person', '-O', 'json'])).stdout)
+    assert.deepEqual([json.count, json.connections, json.viewers[0].connections], [1, 2, 2])
+    assert.equal(stub.requests.filter((q) => q.path === '/qbit/collaboration/presence').at(-1)!.query.get('perConnection'), null)
+  })
+
+  test('--per-connection lists each terminal with its mode, field and start', async () => {
+    version = '1.2.0'
+    const r = await qqq(['collab', 'presence', 'person', '--per-connection', '-O', 'json'])
+    assert.equal(r.code, 0, r.stderr)
+    const json = JSON.parse(r.stdout)
+    assert.deepEqual(json.leases.map((l: { mode: string; field: string; connection: string }) => [l.mode, l.field, l.connection]), [['VIEWING', '', 'c0000000000000001'], ['EDITING', 'name', 'c0000000000000002']])
+    assert.equal(stub.requests.at(-1)!.query.get('perConnection'), 'true')
+  })
+
+  test('a collaboration 1.1.0 server without connections: each person counts once', async () => {
+    version = '1.1.0'
+    const r = await qqq(['collab', 'presence', 'person', '-O', 'csv'])
+    assert.equal(r.code, 0, r.stderr)
+    assert.match(r.stdout, /Admin,admin,VIEWING,,1\r?\nBob,bob,EDITING,,1/)
+    const per = JSON.parse((await qqq(['collab', 'presence', 'person', '--per-connection', '-O', 'json'])).stdout)
+    assert.deepEqual([per.count, per.connections, per.leases.length], [2, 2, 2])
+  })
+})

packages/cli/src/test/print.test.ts

@@ -14,9 +14,11 @@ import assert from 'node:assert/strict'
 import { createServer, type IncomingMessage, type ServerResponse } from 'node:http'
 import type { AddressInfo } from 'node:net'
 import { after, before, describe, test } from 'node:test'
-import { readFileSync } from 'node:fs'
+import { mkdtempSync, readFileSync, readdirSync } from 'node:fs'
+import { tmpdir } from 'node:os'
 import { join } from 'node:path'
 import { runCli, sandbox, startFakeServer, type FakeServer } from './harness.js'
+import { CLI_VERSION } from '../version.js'
 
 type J = Record<string, unknown>
 
@@ -24,6 +26,7 @@ interface PrintServer {
   url: string
   runs: { process: string; values: J; recordIds?: string }[]
   lists: { process: string; values: J; recordsParam?: string }[]
+  renders: J[]
   jobs: Map<string, { status: string[]; title: string; reads: number; message?: string }>
   close(): Promise<void>
 }
@@ -50,6 +53,7 @@ const CANCEL_META = { name: 'printingCancelSelectedJobs', label: 'Cancel queued
 async function startPrintServer(): Promise<PrintServer> {
   const runs: PrintServer['runs'] = []
   const lists: PrintServer['lists'] = []
+  const renders: PrintServer['renders'] = []
   const jobs: PrintServer['jobs'] = new Map()
   const state = new Map<string, { process: string; values: J; recordIds?: string }>()
   let next = 1
@@ -69,10 +73,22 @@ async function startPrintServer(): Promise<PrintServer> {
     let m: RegExpExecArray | null
     if (path === '/version') return send(res, 200, { apiVersion: '1.9.0', features: ['metaData', 'tables', 'processes', 'version', 'extensions'], extensions: [{ name: 'printing', version: '2.1.0', pathPrefix: '/qbit/printing' }] })
     if (path === '/metaData/authentication') return send(res, 200, { type: 'MOCK' })
-    if (path === '/metaData') return send(res, 200, { tables: { person: { name: 'person', label: 'Person' } }, processes: { printingPrintRecords_person: { name: 'printingPrintRecords_person', label: 'Print', tableName: 'person' }, printingCancelSelectedJobs: { name: 'printingCancelSelectedJobs', tableName: 'printing_job' }, printingPrintTableList: { name: 'printingPrintTableList' }, printingPrintText: { name: 'printingPrintText' } }, apps: {} })
+    if (path === '/metaData') return send(res, 200, { tables: { person: { name: 'person', label: 'Person' } }, processes: { printingPrintRecords_person: { name: 'printingPrintRecords_person', label: 'Print', tableName: 'person' }, printingCancelSelectedJobs: { name: 'printingCancelSelectedJobs', tableName: 'printing_job' }, printingPrintTableList: { name: 'printingPrintTableList' }, printingPrintText: { name: 'printingPrintText' }, printingRenderToPdf: { name: 'printingRenderToPdf' } }, apps: {} })
     if (path === '/metaData/process/printingPrintRecords_person') return send(res, 200, PRINT_META)
     if (path === '/metaData/process/printingCancelSelectedJobs') return send(res, 200, CANCEL_META)
     if (path === '/metaData/table/person') return send(res, 200, PERSON_META)
+    if (path === '/metaData/process/printingRenderToPdf') return send(res, 200, { name: 'printingRenderToPdf', label: 'Save as PDF', frontendSteps: [{ name: 'download', label: 'Download', components: [{ type: 'DOWNLOAD_FORM' }], viewFields: [{ name: 'downloadFileName', type: 'STRING', label: 'File' }] }] })
+    if (path === '/processes/printingRenderToPdf/init') {
+      const v = JSON.parse(field(body, 'values') ?? '{}') as J
+      renders.push(v)
+      const name = v.kind === 'RECORD' ? `Person-${v.recordId}` : v.kind === 'LIST' ? 'Person' : String(v.title).replace(/[^A-Za-z0-9]+/g, '-')
+      return send(res, 200, { processUUID: 'render', nextStep: 'download', type: 'COMPLETE', values: { downloadFileName: `${name}.pdf`, serverFilePath: `/tmp/r-${renders.length}.pdf`, ...(v.kind === 'LIST' ? { printingMessage: 'Saved the first 10000 of 12000 rows: the limit is 10000 rows. Narrow the filter to save the rest.' } : {}) } })
+    }
+    if (path.startsWith('/download/')) {
+      res.writeHead(200, { 'Content-Type': 'application/pdf' })
+      res.end(`%PDF-1.7 ${path}`)
+      return
+    }
     if ((m = /^\/metaData\/process\/(printingPrintTableList|printingPrintText)$/.exec(path))) return send(res, 200, LIST_META(m[1]!))
     if ((m = /^\/processes\/(printingPrintTableList|printingPrintText)\/init$/.exec(path))) {
       lists.push({ process: m[1]!, values: JSON.parse(field(body, 'values') ?? '{}') as J, recordsParam: field(body, 'recordsParam') })
@@ -132,6 +148,7 @@ async function startPrintServer(): Promise<PrintServer> {
     url: `http://127.0.0.1:${(server.address() as AddressInfo).port}`,
     runs,
     lists,
+    renders,
     jobs,
     close: () => new Promise<void>((resolve) => { server.closeAllConnections(); server.close(() => resolve()) }),
   }
@@ -249,6 +266,11 @@ describe('qqq print and qqq printer', () => {
     assert.deepEqual(filter.criteria, [{ fieldName: 'lastName', operator: 'EQUALS', values: ['Odd'] }])
     assert.deepEqual(filter.orderBys, [{ fieldName: 'id', isAscending: false }])
     assert.equal(run.values.filterDescription, 'lastName EQUALS Odd')
+    // the app header and footer
+    assert.equal(String(run.values.footerLeft).replace(/:\d+$/, ':PORT'), `qqq ${CLI_VERSION} · 127.0.0.1:PORT`)
+    assert.match(String(run.values.headerServer), /^127\.0\.0\.1:\d+$/)
+    assert.equal(run.values.headerTitle, 'Person')
+    assert.match(String(run.values.headerPrintedAt), /\d/)
   })
 
   test('print list --page prints one page; default columns skip hidden and binary fields; bad options are usage errors', async () => {
@@ -271,5 +293,40 @@ describe('qqq print and qqq printer', () => {
     const empty = await qqq(['print', 'text', '-', '--title', 'Nothing'], printServer.url, '  \n')
     assert.equal(empty.code, 2)
   })
+
+  test('--to-file saves record sheets instead of printing: a folder gets stamped names; no job is queued', async () => {
+    const folder = mkdtempSync(join(tmpdir(), 'qqq-cli-pdf-'))
+    const before = printServer.runs.length
+    const result = await qqq(['print', 'person', '1', '2', '--to-file', folder])
+    assert.equal(result.code, 0, result.stderr)
+    const files = readdirSync(folder).sort()
+    assert.equal(files.length, 2)
+    assert.match(files[0]!, /^Person-1_\d{4}-\d{2}-\d{2}_\d{6}\.pdf$/)
+    assert.match(readFileSync(join(folder, files[0]!), 'utf8'), /^%PDF-1\.7 \/download\/Person-1\.pdf/)
+    assert.match(result.stderr, /Saved .*Person-2_\d{4}/)
+    assert.equal(printServer.runs.length, before, 'no print job')
+    assert.deepEqual(printServer.renders.slice(-2).map((r) => [r.kind, r.tableName, r.recordId]), [['RECORD', 'person', '1'], ['RECORD', 'person', '2']])
+    assert.match(String(printServer.renders.at(-1)!.footerLeft), /^qqq \d/)
+    const two = await qqq(['print', 'person', '1', '2', '--to-file', join(folder, 'one.pdf')])
+    assert.equal(two.code, 2)
+    assert.match(two.stderr, /takes a folder/)
+  })
+
+  test('print list --to-file writes the named file as given and shows the limit note; without a path it goes to the download folder', async () => {
+    const folder = mkdtempSync(join(tmpdir(), 'qqq-cli-pdf-'))
+    const named = join(folder, 'people.pdf')
+    const result = await qqq(['print', 'list', 'person', '-w', 'lastName = Odd', '--to-file', named])
+    assert.equal(result.code, 0, result.stderr)
+    assert.match(readFileSync(named, 'utf8'), /^%PDF/)
+    assert.match(result.stderr, /Saved the first 10000 of 12000 rows/)
+    const render = printServer.renders.at(-1)!
+    assert.deepEqual([render.kind, render.scope, render.printingPrinterId], ['LIST', 'ALL', undefined])
+    const downloads = mkdtempSync(join(tmpdir(), 'qqq-cli-dl-'))
+    assert.equal((await qqq(['config', 'set', 'download-dir', downloads])).code, 0)
+    const text = await qqq(['print', 'text', '-', '--title', 'Build log', '--to-file'], printServer.url, 'hello\n')
+    assert.equal(text.code, 0, text.stderr)
+    assert.match(readdirSync(downloads)[0]!, /^Build-log_\d{4}-\d{2}-\d{2}_\d{6}\.pdf$/)
+    assert.equal((await qqq(['config', 'set', 'download-dir', ''])).code, 0)
+  })
 })
 

packages/cli/src/version.ts

@@ -18,7 +18,7 @@ declare const QQQ_BUILD_SHA: string | undefined
 declare const QQQ_BUILD_TARGET: string | undefined
 declare const QQQ_BUILD_UI: boolean | undefined
 
-export const CLI_VERSION = '1.0.0'
+export const CLI_VERSION = '1.0.1-rc.1'
 
 /** The oldest UI API a server may serve for this CLI (operationIds, clientCapabilities and traceId since 1.6.0). */
 export const UI_API_MIN_VERSION = '1.6.0'

packages/conformance/package.json

@@ -39,7 +39,7 @@
     "node": ">=20"
   },
   "publishConfig": {
-    "registry": "https://npm.pkg.github.com"
+    "registry": "https://git.kof22.com/api/packages/QRun-IO/npm/"
   },
   "scripts": {
     "build": "tsc -p tsconfig.json",

packages/conformance/src/test/auth.test.ts

@@ -30,7 +30,7 @@ test('on a MOCK server without a token, every authenticated check (jobs too) use
   const seen: Array<{ path: string; authorization?: string; cookie?: string }> = []
   const results = await runConformance({ baseUrl: 'http://fake', fetch: fakeServer(seen) })
   const jobs = results.find((r) => r.name === 'GET /qqq/v1/jobs validates')!
-  assert.equal(jobs.ok && !jobs.skipped, true, jobs.detail)
+  assert.equal(jobs.ok && !jobs.skipped, true, jobs.detail ?? 'jobs check did not pass')
   assert.equal(seen.find((s) => s.path === '/qqq/v1/metaData')?.cookie, 'sessionUUID=s-1')
   assert.equal(seen.find((s) => s.path === '/qqq/v1/jobs')?.cookie, 'sessionUUID=s-1')
   assert.match(results.find((r) => r.name === 'GET /qqq/v1/metaData validates')!.detail!, /authenticated with a server session/)

packages/core/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@qrun-io/qqq-core",
-  "version": "1.0.0",
+  "version": "1.0.1-rc.1",
   "description": "Client kernel for QQQ terminal clients: sessions, metadata, filter grammar, records, processes, jobs, render model and output formats. No terminal code.",
   "keywords": [
     "qqq",
@@ -42,7 +42,7 @@
     "node": ">=20"
   },
   "publishConfig": {
-    "registry": "https://npm.pkg.github.com"
+    "registry": "https://git.kof22.com/api/packages/QRun-IO/npm/"
   },
   "scripts": {
     "build": "tsc -p tsconfig.json",
@@ -50,7 +50,7 @@
     "prepack": "node ../../scripts/copy-license.mjs"
   },
   "dependencies": {
-    "@qrun-io/qqq-ui-api-client": "1.8.0",
+    "@qrun-io/qqq-ui-api-client": "1.8.1-rc.1",
     "jmespath": "0.16.0",
     "yaml": "2.9.1"
   },

packages/core/src/api/operations.ts

@@ -34,7 +34,7 @@ export const DOCUMENT_EXTENSIONS: DocumentExtension[] = [
   {"name":"health","version":"1.1.0","pathPrefix":"/health","description":"Central health summary, components, history and on-demand checks."},
   {"name":"alerts","version":"1.2.0","pathPrefix":"/alerts","description":"Alerts inbox and record panel"},
   {"name":"assistant","version":"1.6.0","pathPrefix":"/assistant","description":"QQQ Assistant: conversations, streamed turns, feedback, pending actions and data access explanations"},
-  {"name":"collaboration","version":"1.1.0","pathPrefix":"/qbit/collaboration","description":"Record collaboration: favorites, recents, attachments, tags, conversations, following, timeline, people and presence"},
+  {"name":"collaboration","version":"1.2.0","pathPrefix":"/qbit/collaboration","description":"Record collaboration: favorites, recents, attachments, tags, conversations, following, timeline, people and presence"},
   {"name":"data-analysis","version":"1.5.0","pathPrefix":"/qbit/data-analysis","description":"Profiles, pivots, comparisons, distribution shifts, correlations, scatter samples, crosstabs and anomaly watch previews as the signed-in user."},
   {"name":"db-performance","version":"1.0.0","pathPrefix":"/qbit/db-performance","description":"Database performance, live activity and audited query plans"},
   {"name":"edi","version":"1.1.0","pathPrefix":"/qbit/edi","description":"EDI sandbox and mapper, using the signed-in user's permissions."},
@@ -111,7 +111,7 @@ export const OPERATIONS: OperationInfo[] = [
   {"id":"getQbitCollaborationMyWork","method":"GET","path":"/qqq/v1/qbit/collaboration/my-work","summary":"Get my work summary","tag":"collaboration","pathParams":[],"queryParams":[],"bodyTypes":[],"extension":"collaboration"},
   {"id":"getQbitCollaborationPeople","method":"GET","path":"/qqq/v1/qbit/collaboration/people","summary":"Search the active people directory","tag":"collaboration","pathParams":[],"queryParams":["q","limit"],"bodyTypes":[],"extension":"collaboration"},
   {"id":"getQbitCollaborationPeopleByUserId","method":"GET","path":"/qqq/v1/qbit/collaboration/people/{userId}","summary":"Get an active directory person","tag":"collaboration","pathParams":["userId"],"queryParams":[],"bodyTypes":[],"extension":"collaboration"},
-  {"id":"getQbitCollaborationPresence","method":"GET","path":"/qqq/v1/qbit/collaboration/presence","summary":"Get presence snapshot","tag":"collaboration","pathParams":[],"queryParams":["table","pk"],"bodyTypes":[],"extension":"collaboration"},
+  {"id":"getQbitCollaborationPresence","method":"GET","path":"/qqq/v1/qbit/collaboration/presence","summary":"Get presence snapshot","tag":"collaboration","pathParams":[],"queryParams":["table","pk","perConnection"],"bodyTypes":[],"extension":"collaboration"},
   {"id":"getQbitCollaborationRecents","method":"GET","path":"/qqq/v1/qbit/collaboration/recents","summary":"List recent targets","tag":"collaboration","pathParams":[],"queryParams":["limit","cursor"],"bodyTypes":[],"extension":"collaboration"},
   {"id":"getQbitCollaborationRecordsByTableByPkAttachments","method":"GET","path":"/qqq/v1/qbit/collaboration/records/{table}/{pk}/attachments","summary":"List record attachments","tag":"collaboration","pathParams":["table","pk"],"queryParams":["limit","cursor"],"bodyTypes":[],"extension":"collaboration"},
   {"id":"getQbitCollaborationRecordsByTableByPkComments","method":"GET","path":"/qqq/v1/qbit/collaboration/records/{table}/{pk}/comments","summary":"Page record comment threads","tag":"collaboration","pathParams":["table","pk"],"queryParams":["limit","cursor"],"bodyTypes":[],"extension":"collaboration"},

packages/core/src/extensions/README.md

@@ -43,6 +43,7 @@ const presence = await collab.joinPresence({ table: 'person', pk: '1' }, {
   announce: true,           // false: watch without appearing
 })
 presence.count; presence.people; presence.state.live; presence.state.error
+presence.state.connections          // two terminals of one user count twice (collaboration 1.2.0)
 await presence.stop()       // DELETE /presence, stop the heartbeat, close the stream
 ```
 
@@ -55,6 +56,12 @@ await presence.stop()       // DELETE /presence, stop the heartbeat, close the s
 - `since` is when this client first saw the person; the qbit does not send join times.
 - The list includes the signed-in user when they hold a lease (tabs and clients merge per user;
   EDITING wins).
+- Collaboration 1.2.0: each person has `connections` (their live tabs and terminals) and
+  `state.connections` totals them. `perConnection: true` (option of `joinPresence` and
+  `presenceSnapshot`) also fills `person.leases`: each connection's mode, field, start and opaque
+  ids, this client's own marked `self` (the server's id is `c` + 16 hex digits of SHA-256 of
+  user id, newline, connection id; see `opaqueConnectionId`). Older servers send neither: each
+  person is then one connection and `leases` stays unset.
 - One stream per joinPresence. A TUI that already holds a stream for other channels can pass an
   `openStream` that fans out its own connection's events instead of opening another.
 - `state.error` holds a refused heartbeat (404 when presence is off for the table or the record is

packages/core/src/extensions/collaboration.ts

@@ -17,6 +17,7 @@
  * there) and the other calls throw ExtensionNotInstalledError.
  */
 
+import { createHash } from 'node:crypto'
 import type { RealtimeMessage } from '@qrun-io/qqq-ui-api-client'
 import type { CallInput, CallResult } from '../api/call.js'
 import type { ExtensionRegistry } from './registry.js'
@@ -104,6 +105,20 @@ export interface PresenceScope {
   pk?: string
 }
 
+/** One live connection (a tab or terminal) of a person, from collaboration 1.2.0's per-connection presence. */
+export interface PresenceConnection {
+  /** Opaque per-connection id from the server (never the client's own connection id). */
+  connectionId: string
+  mode: 'VIEWING' | 'EDITING' | string
+  fieldName?: string | null
+  /** When the lease started, as the server reports it. */
+  since?: Date
+  /** Opaque id of the signed-in session behind it (never the session itself). */
+  sessionId?: string
+  /** True for this client's own connection. */
+  self?: boolean
+}
+
 /** One person on the scope, merged across their tabs. */
 export interface PresencePerson {
   userId: string
@@ -112,6 +127,10 @@ export interface PresencePerson {
   fieldName?: string | null
   /** When this client first saw them there (the qbit does not send join times). */
   since: Date
+  /** Live connections (tabs, terminals) merged into this person; 1 from servers before collaboration 1.2.0 (always set by this module). */
+  connections?: number
+  /** Each connection, when the server sent per-connection presence (perConnection, or any 1.2.0 event). */
+  leases?: PresenceConnection[]
 }
 
 export interface PresenceState {
@@ -120,6 +139,8 @@ export interface PresenceState {
   scope: PresenceScope
   count: number
   people: PresencePerson[]
+  /** Live connections behind `people` (two terminals of one user count twice); equals `count` on older servers (always set by this module). */
+  connections?: number
   /** True while the realtime stream is connected and subscribed (else presence is polled). */
   live: boolean
   /** The last error (presence not enabled on the table, record not visible, ...), cleared on success. */
@@ -140,6 +161,8 @@ export interface PresenceOptions {
   announce?: boolean
   /** Delay before reconnecting a dropped stream; default 2000 ms, doubling to 30 s. */
   reconnectMs?: number
+  /** Ask for each connection's mode, field and start (collaboration 1.2.0; ignored by older servers). */
+  perConnection?: boolean
 }
 
 export interface PresenceHandle {
@@ -159,12 +182,64 @@ interface Viewer {
   displayName?: string
   mode?: string
   fieldName?: string | null
+  connections?: number
+  connectionId?: string
+  sessionId?: string
+  since?: string
 }
 
 interface Snapshot {
   table?: string
   pk?: string | null
   viewers?: Viewer[]
+  leaseCount?: number
+  leases?: Viewer[]
+}
+
+/**
+ * The opaque id the server gives a connection (collaboration 1.2.0): `c` and the first 16 hex
+ * digits of SHA-256 of the user id, a newline and the client's connection id.
+ */
+export function opaqueConnectionId(userId: string, connectionId: string): string {
+  return `c${createHash('sha256').update(`${userId}\n${connectionId}`).digest('hex').slice(0, 16)}`
+}
+
+/**
+ * People and connection totals from a snapshot or event. Servers before collaboration 1.2.0 send
+ * neither `connections` nor `leases`: each person then counts as one connection.
+ */
+export function presencePeople(snapshot: Snapshot, firstSeen: (userId: string) => Date, ownConnectionId?: string): { people: PresencePerson[]; connections: number } {
+  const viewers = (snapshot.viewers ?? []).filter((v) => v.userId !== undefined)
+  const leases = new Map<string, PresenceConnection[]>()
+  for (const l of snapshot.leases ?? []) {
+    if (l.userId === undefined || !l.connectionId) continue
+    const userId = String(l.userId)
+    const since = l.since ? new Date(l.since) : undefined
+    const entry: PresenceConnection = {
+      connectionId: l.connectionId, mode: l.mode ?? 'VIEWING', fieldName: l.fieldName ?? null,
+      ...(since && !Number.isNaN(since.getTime()) ? { since } : {}), ...(l.sessionId ? { sessionId: l.sessionId } : {}),
+      ...(ownConnectionId && l.connectionId === opaqueConnectionId(userId, ownConnectionId) ? { self: true } : {}),
+    }
+    leases.set(userId, [...(leases.get(userId) ?? []), entry])
+  }
+  const people = viewers.map((v) => {
+    const userId = String(v.userId)
+    const own = leases.get(userId)
+    const connections = typeof v.connections === 'number' && v.connections > 0 ? v.connections : own?.length || 1
+    return { userId, name: String(v.displayName ?? userId), mode: v.mode ?? 'VIEWING', fieldName: v.fieldName ?? null, since: firstSeen(userId), connections, ...(own ? { leases: own } : {}) }
+  })
+  const sum = people.reduce((n, p) => n + p.connections, 0)
+  return { people, connections: typeof snapshot.leaseCount === 'number' ? Math.max(snapshot.leaseCount, people.length) : sum }
+}
+
+/** ` ×2` after a person with more than one connection, else nothing. */
+export function connectionsSuffix(p: { connections?: number }): string {
+  return p.connections && p.connections > 1 ? ` ×${p.connections}` : ''
+}
+
+/** GET /presence query for a scope; `perConnection` only when asked (older servers ignore it). */
+function presenceQuery(scope: PresenceScope, perConnection?: boolean): Record<string, string | undefined> {
+  return { table: scope.table, pk: scope.pk, ...(perConnection ? { perConnection: 'true' } : {}) }
 }
 
 /** The channel presence events for a scope arrive on. */
@@ -281,13 +356,15 @@ export class Collaboration {
   }
 
   /** Who is on a table or record right now, without joining. Empty when the extension is absent. */
-  async presenceSnapshot(scope: PresenceScope): Promise<PresenceState> {
-    const state: PresenceState = { available: this.available, scope, count: 0, people: [], live: false }
+  async presenceSnapshot(scope: PresenceScope, options: { perConnection?: boolean } = {}): Promise<PresenceState> {
+    const state: PresenceState = { available: this.available, scope, count: 0, people: [], connections: 0, live: false }
     if (!state.available) return state
-    const snapshot = (await this.transport.call('getQbitCollaborationPresence', { query: { table: scope.table, pk: scope.pk } })).data as Snapshot
+    const snapshot = (await this.transport.call('getQbitCollaborationPresence', { query: presenceQuery(scope, options.perConnection) })).data as Snapshot
     const now = new Date()
-    state.people = (snapshot.viewers ?? []).map((v) => ({ userId: String(v.userId ?? ''), name: String(v.displayName ?? v.userId ?? ''), mode: v.mode ?? 'VIEWING', fieldName: v.fieldName ?? null, since: now }))
-    state.count = state.people.length
+    const { people, connections } = presencePeople(snapshot, () => now)
+    state.people = people
+    state.count = people.length
+    state.connections = connections
     return state
   }
 
@@ -297,7 +374,7 @@ export class Collaboration {
    * at once with a no-op handle when the extension is absent.
    */
   async joinPresence(scope: PresenceScope, options: PresenceOptions = {}): Promise<PresenceHandle> {
-    const state: PresenceState = { available: this.available, scope, count: 0, people: [], live: false }
+    const state: PresenceState = { available: this.available, scope, count: 0, people: [], connections: 0, live: false }
     const notify = () => options.onChange?.({ ...state, people: [...state.people] })
     if (!state.available) {
       return { state, get count() { return 0 }, get people() { return [] }, refresh: async () => {}, setMode: async () => {}, stop: async () => {} }
@@ -313,22 +390,22 @@ export class Collaboration {
 
     const apply = (snapshot: Snapshot) => {
       const now = new Date()
-      const viewers = (snapshot.viewers ?? []).filter((v) => v.userId !== undefined)
-      const ids = new Set(viewers.map((v) => String(v.userId)))
+      const ids = new Set((snapshot.viewers ?? []).filter((v) => v.userId !== undefined).map((v) => String(v.userId)))
       for (const id of [...firstSeen.keys()]) if (!ids.has(id)) firstSeen.delete(id)
-      state.people = viewers.map((v) => {
-        const userId = String(v.userId)
+      const { people, connections } = presencePeople(snapshot, (userId) => {
         if (!firstSeen.has(userId)) firstSeen.set(userId, now)
-        return { userId, name: String(v.displayName ?? userId), mode: v.mode ?? 'VIEWING', fieldName: v.fieldName ?? null, since: firstSeen.get(userId)! }
-      })
-      state.count = state.people.length
+        return firstSeen.get(userId)!
+      }, announce ? connectionId : undefined)
+      state.people = people
+      state.count = people.length
+      state.connections = connections
       state.error = undefined
       notify()
     }
 
     const refresh = async () => {
       try {
-        apply((await this.transport.call('getQbitCollaborationPresence', { query: { table: scope.table, pk: scope.pk } })).data as Snapshot)
+        apply((await this.transport.call('getQbitCollaborationPresence', { query: presenceQuery(scope, options.perConnection) })).data as Snapshot)
       } catch (error) {
         state.error = messageOf(error)
         notify()
@@ -341,8 +418,9 @@ export class Collaboration {
         try {
           const result = await this.transport.call('postQbitCollaborationPresence', { json: { connectionId, table: scope.table, pk: scope.pk, mode, fieldName } })
           const data = result.data as Snapshot | undefined
-          // The qbit answers the heartbeat with the snapshot; older builds answer {success}.
-          if (data && typeof data.table === 'string') {
+          // The qbit answers the heartbeat with the merged snapshot; older builds answer {success}.
+          // Per-connection detail only comes with GET, so re-read rather than drop it.
+          if (data && typeof data.table === 'string' && !options.perConnection) {
             apply(data)
             return
           }

packages/core/src/extensions/printing.ts

@@ -23,6 +23,8 @@
 
 import type { CallInput, CallResult } from '../api/call.js'
 import { readConfig, writeConfig } from '../session/profiles.js'
+import { downloadReference } from '../process/screen.js'
+import { exportFileName } from '../render/files.js'
 import type { ExtensionRegistry } from './registry.js'
 
 export const PRINTING = 'printing'
@@ -33,6 +35,8 @@ export const COPIES_FIELD = 'printingCopies'
 export const JOB_IDS_VALUE = 'printingJobIds'
 export const TABLE_LIST_PROCESS = 'printingPrintTableList'
 export const TEXT_PROCESS = 'printingPrintText'
+/** Renders a record sheet, table list or text page to a PDF download (Save as PDF). */
+export const RENDER_PROCESS = 'printingRenderToPdf'
 /** The most rows the server prints in one table list. */
 export const MAX_LIST_ROWS = 10_000
 /** "All rows" is the default list choice up to this many rows (or whenever the grid is filtered). */
@@ -95,6 +99,8 @@ export interface PrintingTransport {
   call(id: string, input: CallInput): Promise<CallResult>
   /** Runs a process to its end with these values and selected record ids; returns its final values. */
   runProcess(processName: string, options: { values: Record<string, unknown>; recordIds: string[] }): Promise<Record<string, unknown>>
+  /** Fetches a process download (GET /download/{file}); needed for Save as PDF. */
+  download?(reference: { fileName: string; query: Record<string, string> }): Promise<{ bytes: Uint8Array; contentType: string }>
 }
 
 interface QueryRecord {
@@ -203,6 +209,75 @@ export function canPrintLists(meta: { processes?: Record<string, unknown> } | un
   return Boolean(meta?.processes?.[TABLE_LIST_PROCESS]) && Boolean(meta?.processes?.[TEXT_PROCESS])
 }
 
+/**
+ * The header and footer every printed page carries (printing 0.4.1+ renderers): the app or
+ * instance name, the screen title or breadcrumb, the server, the user and the printed-at time in
+ * the user's date format on top; the client's footer (`qqq ui 1.0.1 · server`), a grid's filter and
+ * sort, and the page number at the bottom.
+ */
+export interface PrintChrome {
+  app?: string
+  title?: string
+  server?: string
+  user?: string
+  printedAt?: string
+  footerLeft?: string
+  footerNote?: string
+}
+
+/** The process values of a chrome (blank fields left out: the server's defaults apply). */
+export function chromeValues(chrome: PrintChrome | undefined): Record<string, string> {
+  if (!chrome) return {}
+  const out: Record<string, string> = {}
+  const put = (key: string, value: string | undefined) => {
+    if (value !== undefined && value.trim()) out[key] = value.trim()
+  }
+  put('headerApp', chrome.app)
+  put('headerTitle', chrome.title)
+  put('headerServer', chrome.server)
+  put('headerUser', chrome.user)
+  put('headerPrintedAt', chrome.printedAt)
+  put('footerLeft', chrome.footerLeft)
+  put('footerNote', chrome.footerNote)
+  return out
+}
+
+/** One section of a screen's content: a panel's title (blank for none) and its lines. */
+export interface ContentSection {
+  title: string
+  lines: string[]
+}
+
+/** Whether the server can render documents to a PDF download ("Save as PDF"). */
+export function canSaveAsPdf(meta: { processes?: Record<string, unknown> } | undefined): boolean {
+  return Boolean(meta?.processes?.[RENDER_PROCESS])
+}
+
+/** What Save as PDF renders: a record sheet, a table list, or a text page. */
+export type RenderRequest =
+  | { kind: 'record'; table: string; id: string }
+  | { kind: 'list'; list: Omit<TableListRequest, 'printer' | 'copies'> }
+  | { kind: 'text'; title: string; subtitle?: string; text: string; sections?: ContentSection[]; orientation?: 'PORTRAIT' | 'LANDSCAPE' }
+
+/** A PDF rendered for the client: the default file name (stamped), the server's name, the bytes, and a note. */
+export interface RenderedPdf {
+  fileName: string
+  serverName: string
+  bytes: Uint8Array
+  message?: string
+}
+
+/** The process values of a render request. */
+export function renderValues(request: RenderRequest, chrome?: PrintChrome): Record<string, unknown> {
+  const header = chromeValues(chrome)
+  if (request.kind === 'record') return { kind: 'RECORD', tableName: request.table, recordId: request.id, ...header }
+  if (request.kind === 'text') return { kind: 'TEXT', title: request.title, ...(request.subtitle ? { subtitle: request.subtitle } : {}), text: request.text, ...(request.sections?.length ? { sections: JSON.stringify(request.sections) } : {}), orientation: request.orientation ?? 'PORTRAIT', pageSize: 'LETTER', ...header }
+  const values = tableListValues({ ...request.list, printer: '' })
+  delete values[PRINTER_FIELD]
+  delete values[COPIES_FIELD]
+  return { kind: 'LIST', ...values, ...header }
+}
+
 /** What a grid print covers. */
 export type ListScope = { kind: 'all' } | { kind: 'page'; skip: number; limit: number } | { kind: 'selected'; ids: string[] } | { kind: 'sheets'; ids: string[] }
 
@@ -308,6 +383,7 @@ export interface PrintRequest {
   /** Printer row id. */
   printer: string
   copies?: number
+  chrome?: PrintChrome
 }
 
 export interface TableListRequest {
@@ -329,12 +405,16 @@ export interface TableListRequest {
   pageSize?: 'LETTER' | 'A4'
   /** The primary key field, for a selection. */
   primaryKeyField?: string
+  chrome?: PrintChrome
 }
 
 export interface TextRequest {
   title: string
   subtitle?: string
   text: string
+  /** A screen's content as sections (printed instead of the raw text when given). */
+  sections?: ContentSection[]
+  chrome?: PrintChrome
   printer: string
   copies?: number
   orientation?: 'PORTRAIT' | 'LANDSCAPE'
@@ -376,6 +456,7 @@ export function tableListValues(request: TableListRequest): Record<string, unkno
     pageSize: request.pageSize ?? 'LETTER',
     [PRINTER_FIELD]: request.printer,
     [COPIES_FIELD]: request.copies ?? 1,
+    ...chromeValues(request.chrome),
   }
 }
 
@@ -438,7 +519,7 @@ export class Printing {
     if (!request.ids.length) throw new Error('nothing to print: no record ids')
     const copies = request.copies ?? 1
     if (!Number.isInteger(copies) || copies < 1 || copies > 100) throw new Error('copies must be 1 to 100')
-    const values = await this.transport.runProcess(printProcessName(request.table), { values: { [PRINTER_FIELD]: request.printer, [COPIES_FIELD]: copies }, recordIds: request.ids })
+    const values = await this.transport.runProcess(printProcessName(request.table), { values: { [PRINTER_FIELD]: request.printer, [COPIES_FIELD]: copies, ...chromeValues(request.chrome) }, recordIds: request.ids })
     return jobIdsOf(values)
   }
 
@@ -453,10 +534,26 @@ export class Printing {
   async printText(request: TextRequest): Promise<PrintOutcome> {
     this.require()
     if (!request.text.trim()) throw new Error('nothing to print: the text is empty')
-    const values = await this.transport.runProcess(TEXT_PROCESS, { values: { title: request.title, ...(request.subtitle ? { subtitle: request.subtitle } : {}), text: request.text, orientation: request.orientation ?? 'PORTRAIT', pageSize: 'LETTER', [PRINTER_FIELD]: request.printer, [COPIES_FIELD]: request.copies ?? 1 }, recordIds: [] })
+    const values = await this.transport.runProcess(TEXT_PROCESS, { values: { ...chromeValues(request.chrome), title: request.title, ...(request.subtitle ? { subtitle: request.subtitle } : {}), text: request.text, ...(request.sections?.length ? { sections: JSON.stringify(request.sections) } : {}), orientation: request.orientation ?? 'PORTRAIT', pageSize: 'LETTER', [PRINTER_FIELD]: request.printer, [COPIES_FIELD]: request.copies ?? 1 }, recordIds: [] })
     return { jobIds: jobIdsOf(values) }
   }
 
+  /**
+   * Renders a record sheet, table list or text page to a PDF on the server (no printer, no job)
+   * and downloads it; the default name is the server's (the document title) with the date and
+   * time stamp downloads and exports use: `Customer-Ada-Lovelace_2026-11-01_120301.pdf`.
+   */
+  async renderToPdf(request: RenderRequest, now: Date = new Date(), chrome?: PrintChrome): Promise<RenderedPdf> {
+    this.require()
+    if (!this.transport.download) throw new Error('this client cannot download process files')
+    if (request.kind === 'text' && !request.text.trim()) throw new Error('nothing to save: the text is empty')
+    const values = await this.transport.runProcess(RENDER_PROCESS, { values: renderValues(request, chrome), recordIds: [] })
+    const reference = downloadReference(values)
+    if (!reference) throw new Error('the server rendered no PDF (no download in its answer)')
+    const { bytes } = await this.transport.download(reference)
+    return { fileName: exportFileName(reference.fileName, 'pdf', now), serverName: reference.fileName, bytes, message: values.printingMessage === undefined ? undefined : String(values.printingMessage) }
+  }
+
   /** Cancels jobs still queued in QQQ (jobs a device has taken must be handled at the device). */
   async cancel(ids: string[]): Promise<void> {
     this.require()

packages/core/src/session/keyring.ts

@@ -104,13 +104,31 @@ export class DpapiFileStore implements SecretStore {
   }
   private async ps(script: string, input: string): Promise<string> {
     const shell = process.env.QQQ_POWERSHELL ?? 'powershell'
-    const { stdout } = await run(shell, ['-NoProfile', '-NonInteractive', '-Command', script.replace('$INPUT', JSON.stringify(input))])
-    return stdout.trim()
+    const command = "$ErrorActionPreference = 'Stop'; [Console]::InputEncoding = [Text.UTF8Encoding]::new($false); "
+      + '[Console]::OutputEncoding = [Text.UTF8Encoding]::new($false); $qqqSecretInput = [Console]::In.ReadToEnd(); '
+      + '$qqqResult = & { ' + script.replace('$INPUT', '$qqqSecretInput') + ' }; '
+      + '[Console]::Write((ConvertTo-Json -InputObject $qqqResult -Compress))'
+    return new Promise<string>((resolve, reject) => {
+      const failed = () => reject(new Error('Windows credential protection failed; check PowerShell and your Windows profile'))
+      // Started from PowerShell 7, the inherited PSModulePath names PowerShell 7's modules, and Windows PowerShell 5.1
+      // then cannot load Microsoft.PowerShell.Security (ConvertTo-SecureString). Without it, each shell uses its own.
+      const env = Object.fromEntries(Object.entries(process.env).filter(([name]) => name.toUpperCase() !== 'PSMODULEPATH'))
+      const child = execFile(shell, ['-NoProfile', '-NonInteractive', '-Command', command], { timeout: 15000, env }, (error, stdout) => {
+        if (error) { failed(); return }
+        try {
+          const result: unknown = JSON.parse(stdout.trim())
+          if (typeof result !== 'string') { failed(); return }
+          resolve(result)
+        } catch { failed() }
+      })
+      child.stdin?.on('error', failed)
+      child.stdin?.end(input, 'utf8')
+    })
   }
   async get(account: string): Promise<string | undefined> {
     const blob = this.read()[account]
     if (!blob) return undefined
-    return this.ps('$s = ConvertTo-SecureString -String $INPUT; [System.Runtime.InteropServices.Marshal]::PtrToStringBSTR([System.Runtime.InteropServices.Marshal]::SecureStringToBSTR($s))', blob)
+    return this.ps('$s = ConvertTo-SecureString -String $INPUT; $p = [System.Runtime.InteropServices.Marshal]::SecureStringToBSTR($s); try { [System.Runtime.InteropServices.Marshal]::PtrToStringBSTR($p) } finally { [System.Runtime.InteropServices.Marshal]::ZeroFreeBSTR($p); $s.Dispose() }', blob)
   }
   async set(account: string, secret: string): Promise<void> {
     const blob = await this.ps('ConvertTo-SecureString -String $INPUT -AsPlainText -Force | ConvertFrom-SecureString', secret)

packages/core/src/session/profiles.ts

@@ -46,6 +46,8 @@ export interface UiSettings {
   childRows?: number
   /** The terminal UI copies a CLI equivalent to the clipboard as soon as it shows it (default off). */
   copyCliCommands?: boolean
+  /** The terminal UI's function-key bar: one row, two rows (with the Shift bank), or auto (two from 30 lines). */
+  fkeyBar?: 'one' | 'two' | 'auto'
   /** Date entry: display order, clock, week start, picker behaviour (forms/dates.ts). */
   dates?: import('../forms/dates.js').DateSettings
   /** Keyed by screen, e.g. `table:person`, `record:person`, `app:peopleApp`. */

packages/core/src/test/collaboration.test.ts

@@ -7,7 +7,7 @@ import assert from 'node:assert/strict'
 import { test } from 'node:test'
 import type { RealtimeMessage } from '@qrun-io/qqq-ui-api-client'
 import type { CallInput, CallResult } from '../api/call.js'
-import { Collaboration, presenceChannel, type CollaborationTransport, type PresenceState } from '../extensions/collaboration.js'
+import { Collaboration, connectionsSuffix, opaqueConnectionId, presenceChannel, presencePeople, type CollaborationTransport, type PresenceState } from '../extensions/collaboration.js'
 import { ExtensionNotInstalledError, ExtensionRegistry } from '../extensions/registry.js'
 
 const withCollab = ExtensionRegistry.fromVersion({ extensions: [{ name: 'collaboration', version: '1.1.0' }] })
@@ -164,3 +164,65 @@ test('tags: vocabulary search, create, record tags and apply call the qbit opera
   assert.deepEqual(calls[1]!.input.json, { table: 'person', label: 'New one', color: 'teal' })
   assert.deepEqual(calls[3]!.input, { path: { table: 'person', pk: '3' }, json: { add: [9] } })
 })
+
+test('two connections of one user: one person with connections 2, and per connection each mode, field and start', async () => {
+  const leases = [
+    { userId: 'admin', displayName: 'Admin', mode: 'VIEWING', connections: 1, connectionId: opaqueConnectionId('admin', 'cli-mine'), sessionId: 's1', since: '2026-11-01T12:00:00Z' },
+    { userId: 'admin', displayName: 'Admin', mode: 'EDITING', fieldName: 'name', connections: 1, connectionId: opaqueConnectionId('admin', 'cli-other'), sessionId: 's2', since: '2026-11-01T12:00:05Z' },
+  ]
+  const { calls, transport } = fake((id, input) => {
+    if (id === 'deleteQbitCollaborationPresence') return { success: true }
+    const per = (input.query as Record<string, string | undefined> | undefined)?.perConnection === 'true'
+    return { table: 'person', pk: '1', viewers: [{ userId: 'admin', displayName: 'Admin', mode: 'EDITING', fieldName: 'name', connections: 2 }], leaseCount: 2, ...(per ? { leases } : {}) }
+  })
+  const collab = new Collaboration(withCollab, transport)
+  const merged = await collab.presenceSnapshot({ table: 'person', pk: '1' })
+  assert.deepEqual([merged.count, merged.connections, merged.people[0]!.connections, merged.people[0]!.leases], [1, 2, 2, undefined])
+  assert.equal(connectionsSuffix(merged.people[0]!), ' ×2')
+  assert.equal((calls.at(-1)!.input.query as Record<string, unknown>).perConnection, undefined, 'merged by default')
+
+  const handle = await collab.joinPresence({ table: 'person', pk: '1' }, { perConnection: true, connectionId: 'cli-mine', heartbeatMs: 10000 })
+  try {
+    const admin = handle.people[0]!
+    assert.equal(admin.connections, 2)
+    assert.deepEqual(admin.leases!.map((l) => [l.mode, l.fieldName, l.since?.toISOString(), l.self ?? false]), [
+      ['VIEWING', null, '2026-11-01T12:00:00.000Z', true],
+      ['EDITING', 'name', '2026-11-01T12:00:05.000Z', false],
+    ])
+    assert.deepEqual(calls.filter((c) => c.id === 'getQbitCollaborationPresence').at(-1)!.input.query, { table: 'person', pk: '1', perConnection: 'true' })
+  } finally {
+    await handle.stop()
+  }
+})
+
+test('servers before collaboration 1.2.0 send no connections: each person is one connection', async () => {
+  const { transport } = fake(() => ({ table: 'person', viewers: [{ userId: 'admin', displayName: 'Admin', mode: 'VIEWING' }, { userId: 'bob', displayName: 'Bob' }] }))
+  const state = await new Collaboration(withCollab, transport).presenceSnapshot({ table: 'person' }, { perConnection: true })
+  assert.deepEqual([state.count, state.connections], [2, 2])
+  assert.deepEqual(state.people.map((p) => [p.connections, p.leases, connectionsSuffix(p)]), [[1, undefined, ''], [1, undefined, '']])
+  const fromEvent = presencePeople({ table: 'person', viewers: [{ userId: 'x', displayName: 'X', connections: 3 }], leaseCount: 3 }, () => new Date(0))
+  assert.deepEqual([fromEvent.connections, fromEvent.people[0]!.connections], [3, 3])
+})
+
+test('presence.changed with leases updates connections live', async () => {
+  const events: RealtimeMessage[] = [
+    { event: 'hello', data: { connectionId: 'sse-1' } },
+    { event: 'presence.changed', data: { table: 'person', pk: '1', viewers: [{ userId: 'admin', displayName: 'Admin', mode: 'VIEWING', connections: 2 }], leaseCount: 2,
+      leases: [{ userId: 'admin', displayName: 'Admin', mode: 'VIEWING', connections: 1, connectionId: 'c1', since: '2026-11-01T12:00:00Z' }, { userId: 'admin', displayName: 'Admin', mode: 'VIEWING', connections: 1, connectionId: 'c2', since: '2026-11-01T12:00:01Z' }] } },
+  ]
+  async function* stream(signal: AbortSignal): AsyncIterable<RealtimeMessage> {
+    let next = 0
+    while (!signal.aborted) {
+      await tick(2)
+      if (next < events.length) yield events[next++]!
+    }
+  }
+  const { transport } = fake((id, input) => (id === 'updateRealtimeSubscriptions' ? { active: (input.json as { add: string[] }).add } : { table: 'person', pk: '1', viewers: [] }), stream)
+  const handle = await new Collaboration(withCollab, transport).joinPresence({ table: 'person', pk: '1' }, { announce: false, heartbeatMs: 10000 })
+  try {
+    await until('the event with two connections', () => handle.state.connections === 2)
+    assert.equal(handle.people[0]!.leases?.length, 2)
+  } finally {
+    await handle.stop()
+  }
+})

packages/core/src/test/dpapi.test.ts

@@ -0,0 +1,37 @@
+/*
+ * Copyright 2026 QRun.IO, Inc.
+ * Licensed under the Apache License, Version 2.0 (see LICENSE).
+ */
+
+import assert from 'node:assert/strict'
+import { mkdtempSync, readFileSync, rmSync, writeFileSync } from 'node:fs'
+import { tmpdir } from 'node:os'
+import { join } from 'node:path'
+import { test } from 'node:test'
+import { DpapiFileStore } from '../session/keyring.js'
+
+test('Windows DPAPI preserves JSON, shell syntax, Unicode and whitespace without plaintext storage', { skip: process.platform !== 'win32' }, async () => {
+  const dir = mkdtempSync(join(tmpdir(), 'qqq-dpapi-fixture-'))
+  const file = join(dir, 'secrets.dpapi.json')
+  const secret = '  ' + JSON.stringify({ token: 'obviously-fake-credential', syntax: '\"\'`$(){}\\', text: 'héllo 世界\nsecond line' }) + '\n '
+  try {
+    const store = new DpapiFileStore(file)
+    await store.set('fixture', secret)
+    assert.equal(readFileSync(file, 'utf8').includes('obviously-fake-credential'), false)
+    assert.equal(await new DpapiFileStore(file).get('fixture'), secret)
+    assert.equal(await store.delete('fixture'), true)
+    assert.equal(await store.get('fixture'), undefined)
+  } finally { rmSync(dir, { recursive: true, force: true }) }
+})
+
+test('Windows credential failure does not expose subprocess arguments or credential material', { skip: process.platform !== 'win32' }, async () => {
+  const dir = mkdtempSync(join(tmpdir(), 'qqq-dpapi-failure-'))
+  const file = join(dir, 'secrets.dpapi.json')
+  try {
+    writeFileSync(file, JSON.stringify({ fixture: 'obviously-fake-invalid-dpapi-value' }))
+    await assert.rejects(new DpapiFileStore(file).get('fixture'), error => {
+      assert.equal(String(error), 'Error: Windows credential protection failed; check PowerShell and your Windows profile')
+      return true
+    })
+  } finally { rmSync(dir, { recursive: true, force: true }) }
+})

packages/core/src/test/printing.test.ts

@@ -10,7 +10,7 @@ import { join } from 'node:path'
 import { test } from 'node:test'
 import type { CallInput, CallResult } from '../api/call.js'
 import { ExtensionNotInstalledError, ExtensionRegistry, knownExtension } from '../extensions/registry.js'
-import { MAX_LIST_ROWS, Printing, canPrintLists, canPrintTo, listScopeChoices, tableListValues, isFinalJobState, jobIdsOf, jobOf, jobStateSummary, printProcessName, printerOf, readRememberedPrinter, resolvePrinter, tableHasPrint, whyNotPrintable, writeRememberedPrinter, type PrintingTransport } from '../extensions/printing.js'
+import { MAX_LIST_ROWS, Printing, canSaveAsPdf, chromeValues, renderValues, canPrintLists, canPrintTo, listScopeChoices, tableListValues, isFinalJobState, jobIdsOf, jobOf, jobStateSummary, printProcessName, printerOf, readRememberedPrinter, resolvePrinter, tableHasPrint, whyNotPrintable, writeRememberedPrinter, type PrintingTransport } from '../extensions/printing.js'
 import { readConfig, upsertProfile } from '../session/profiles.js'
 
 const withPrinting = ExtensionRegistry.fromVersion({ extensions: [{ name: 'printing', version: '2.0.0' }] })
@@ -201,3 +201,58 @@ test('grid print choices: all rows first when filtered or small, this page first
   assert.equal(canPrintLists({ processes: { printingPrintTableList: {}, printingPrintText: {} } }), true)
   assert.equal(canPrintLists({ processes: { printingPrintTableList: {} } }), false)
 })
+
+test('save as PDF: render values for a record, a list (no printer) and a text page', () => {
+  assert.deepEqual(renderValues({ kind: 'record', table: 'customer', id: '1' }), { kind: 'RECORD', tableName: 'customer', recordId: '1' })
+  const list = renderValues({ kind: 'list', list: { table: 'person', columns: ['id'], filter: { criteria: [], orderBys: [{ fieldName: 'id', isAscending: true }] }, scope: { kind: 'all' }, title: 'Person' } })
+  assert.equal(list.kind, 'LIST')
+  assert.equal(list.scope, 'ALL')
+  assert.equal(list.printingPrinterId, undefined)
+  assert.equal(list.printingCopies, undefined)
+  assert.deepEqual(renderValues({ kind: 'text', title: 'Home', text: 'x' }), { kind: 'TEXT', title: 'Home', text: 'x', orientation: 'PORTRAIT', pageSize: 'LETTER' })
+  assert.equal(canSaveAsPdf({ processes: { printingRenderToPdf: {} } }), true)
+  assert.equal(canSaveAsPdf({ processes: {} }), false)
+})
+
+test('save as PDF: renders on the server, downloads the file and names it with the download stamp', async () => {
+  const downloads: unknown[] = []
+  const { runs, transport } = fake(() => ({}), async () => ({ downloadFileName: 'Customer-Ada-Lovelace.pdf', serverFilePath: '/tmp/qqq-print-1.pdf', printingMessage: 'Saved the first 10000 of 12000 rows' }))
+  transport.download = async (reference) => {
+    downloads.push(reference)
+    return { bytes: new TextEncoder().encode('%PDF-1.7'), contentType: 'application/pdf' }
+  }
+  const printing = new Printing(withPrinting, transport)
+  const pdf = await printing.renderToPdf({ kind: 'record', table: 'customer', id: '1' }, new Date(2026, 10, 1, 12, 3, 1))
+  assert.equal(pdf.fileName, 'Customer-Ada-Lovelace_2026-11-01_120301.pdf')
+  assert.equal(pdf.serverName, 'Customer-Ada-Lovelace.pdf')
+  assert.equal(new TextDecoder().decode(pdf.bytes), '%PDF-1.7')
+  assert.equal(pdf.message, 'Saved the first 10000 of 12000 rows')
+  assert.deepEqual(runs[0], { name: 'printingRenderToPdf', values: { kind: 'RECORD', tableName: 'customer', recordId: '1' }, recordIds: [] })
+  assert.deepEqual(downloads, [{ fileName: 'Customer-Ada-Lovelace.pdf', query: { filePath: '/tmp/qqq-print-1.pdf' } }])
+  await assert.rejects(printing.renderToPdf({ kind: 'text', title: 't', text: ' ' }), /empty/)
+  delete transport.download
+  await assert.rejects(printing.renderToPdf({ kind: 'record', table: 'customer', id: '1' }), /cannot download/)
+  await assert.rejects(new Printing(without, transport).renderToPdf({ kind: 'record', table: 'customer', id: '1' }), ExtensionNotInstalledError)
+  const { transport: none } = fake(() => ({}), async () => ({}))
+  none.download = async () => ({ bytes: new Uint8Array(), contentType: '' })
+  await assert.rejects(new Printing(withPrinting, none).renderToPdf({ kind: 'record', table: 'customer', id: '1' }), /no PDF/)
+})
+
+test('the app header and footer travel with every request; blank fields are left to the server', async () => {
+  const chrome = { app: 'QQQ All', title: 'Sales › Customer › Ada Lovelace', server: 'local (localhost:8078)', user: 'Admin', printedAt: '2026-11-01 12:03', footerLeft: 'qqq ui 1.0.1 · local', footerNote: ' ' }
+  assert.deepEqual(chromeValues(chrome), { headerApp: 'QQQ All', headerTitle: 'Sales › Customer › Ada Lovelace', headerServer: 'local (localhost:8078)', headerUser: 'Admin', headerPrintedAt: '2026-11-01 12:03', footerLeft: 'qqq ui 1.0.1 · local' })
+  assert.deepEqual(chromeValues(undefined), {})
+  const sections = [{ title: 'Recently viewed', lines: ['Ada Lovelace'] }]
+  const text = renderValues({ kind: 'text', title: 'Home', text: 'raw', sections }, chrome)
+  assert.equal(text.sections, JSON.stringify(sections))
+  assert.equal(text.headerApp, 'QQQ All')
+  assert.equal(renderValues({ kind: 'record', table: 'customer', id: '1' }, chrome).headerTitle, 'Sales › Customer › Ada Lovelace')
+  const { runs, transport } = fake(() => ({}), async () => ({ printingJobIds: 'j1' }))
+  const printing = new Printing(withPrinting, transport)
+  await printing.print({ table: 'customer', ids: ['1'], printer: 'p1', chrome })
+  await printing.printText({ title: 'Home', text: 'raw', sections, printer: 'p1', chrome })
+  await printing.printTableList({ table: 'person', columns: ['id'], filter: {}, scope: { kind: 'all' }, printer: 'p1', chrome: { ...chrome, footerNote: 'Filter: x' } })
+  assert.equal(runs[0]!.values.headerUser, 'Admin')
+  assert.equal(runs[1]!.values.sections, JSON.stringify(sections))
+  assert.equal(runs[2]!.values.footerNote, 'Filter: x')
+})

packages/tui-spike/package.json

@@ -18,6 +18,6 @@
   "devDependencies": {
     "@types/bun": "1.4.4",
     "@types/react": "19.3.0",
-    "typescript": "5.8.3"
+    "typescript": "6.0.3"
   }
 }

packages/tui/README.md

@@ -15,15 +15,16 @@ says `binary with ui`. The npm package `@qrun-io/qqq-cli` does not carry it. Fro
 ```sh
 npm ci && npm run build                 # once, at the repo root (the kernel and CLI are used built)
 (cd packages/tui && bun install --frozen-lockfile)   # once
-qqq ui                                  # the default profile; or: qqq --profile sample ui
+qqq ui                                  # the splash, then the only profile (or a picker); or: qqq --profile sample ui
 qqq ui table query person -w "lastName STARTS_WITH S"     # open a screen directly (CLI grammar)
-qqq ui --theme light | --ascii | --linear | --no-mouse | --check | --no-check
+qqq ui --theme light | --ascii | --linear | --no-mouse | --no-splash | --check | --no-check
 bun run packages/tui/src/main.tsx --profile sample        # the same without the CLI
 ```
 
 Options: `--profile|-p <name>`, `--server|-s <url>` (a profile named after the host is made), `--theme
 <name>`, `--ascii` (ASCII glyphs), `--linear` (one region, no Apps pane), `--no-mouse` / `--mouse` (the
-mouse for this run; the saved Mouse setting is on by default, see [Mouse](#mouse)),
+mouse for this run; the saved Mouse setting is on by default, see [Mouse](#mouse)), `--no-splash` /
+`--splash` (the start-up splash for this run; see [Starting](#starting)),
 `--check` (the full terminal check, then exit), `--no-check` (skip the quick check at startup). Anything
 after the options is a route in the CLI grammar.
 
@@ -31,7 +32,36 @@ Environment: `QQQ_UI_LINEAR=1`, `QQQ_UI_ASCII=1` (as the options); `QQQ_UI_SIGN_
 OAUTH2 choice); `QQQ_UI_NO_BROWSER=1` (show the sign-in address without opening a browser);
 `QQQ_PROFILE`, `QQQ_SERVER`, `QQQ_TOKEN` (a bearer token instead of the stored sign-in), `QQQ_CONFIG_DIR`,
 `QQQ_STATE_DIR`, `QQQ_CACHE_DIR`, `QQQ_KEYRING=file` (keep sign-ins in a file instead of the OS keychain),
-shared with the CLI. `QQQ_UI_NO_QUIT=1` is for the soak test only.
+shared with the CLI. `QQQ_UI_NO_SPLASH=1` (as `--no-splash`). `QQQ_UI_NO_QUIT=1` is for the soak test only.
+
+## Starting
+
+`qqq ui` opens on a **splash**: Query (the qrun.io mascot) blinking, his tail wagging while it works, the
+`qqq` wordmark, "Terminal client for QQQ", the version (`qqq 1.0.0 · UI API client 1.8.0`) and one status
+line that follows the boot: reading profiles, connecting to the server, signing in, loading metadata (with
+the table count). The large Query needs about 34 rows; smaller terminals (80×24) get the small Query beside
+the wordmark, very small ones the text alone; `--ascii` draws it all in plain characters. Any key stops the
+animation (not the boot). The splash stays at least 600 ms so it never just flashes, then Home opens as
+before. `--no-splash`, `QQQ_UI_NO_SPLASH=1`, or F9 › Settings › **Splash on start: off** (`:splash off`,
+saved as `ui.splash: off`) skip it.
+
+Which server:
+
+- `--profile`, `QQQ_PROFILE`, `--server` or `QQQ_SERVER` names one: it connects straight away. So does a
+  config with exactly one profile.
+- Several profiles and none named: the **Servers picker** opens over the splash (the rows of the Servers
+  dialog, [Servers](#servers): name, short name, server, status, last used; who is signed in, the sign-in,
+  the description), with the last used profile selected. Enter connects; `n` adds a profile, `e` edits, typing
+  filters; the status column fills in as the servers answer (the picker never waits for them). Esc quits and
+  prints how to skip the picker (`--profile NAME` or `QQQ_PROFILE`).
+- No profile at all (the first run): the add form opens directly; saving connects to the new profile. Esc
+  closes it; then `n` opens it again and Esc quits.
+
+The sign-in runs as before (a MOCK or anonymous session, the OAuth2 browser or device flow with the address
+or code on the splash, the username and password dialog). A failure stays on the splash with the reason:
+Enter (or `r`) retries, `c` opens the picker to choose another profile (Esc there returns), `n` adds one,
+Esc quits. Ctrl+O opens the picker too. With `--no-splash` the sign-in screen comes first, as in 1.0.0,
+and the picker or the add form opens over it in the same cases.
 
 ## Keys
 
@@ -55,6 +85,47 @@ shared with the CLI. `QQQ_UI_NO_QUIT=1` is for the soak test only.
 | `t` | tags of a record (collaboration extension) | Esc then 1..0, Ctrl+1..0 | F1..F10 when the terminal takes the F-keys |
 | Ctrl+P, `p`, PrtSc | print what you see: record sheet, table list (all rows or this page), or the screen (printing extension; else save as a file) | | |
 
+### Shift bank (Shift+F1…F10)
+
+A second row of ten function keys, like Norton Commander's Shift bar. Keys that do not apply on the screen
+are dimmed; pressing one says why.
+
+| Key | Label | Does |
+|---|---|---|
+| Shift+F1 | Keys | the keyboard reference (as `?`) |
+| Shift+F2 | Servers | the Servers dialog (as Ctrl+O) |
+| Shift+F3 | SQL | the SQL Runner (sql-workbench extension) |
+| Shift+F4 | Bulk | bulk edit, bulk delete and processes on the grid selection (as `b`) |
+| Shift+F5 | Metadata | refresh the metadata from the server |
+| Shift+F6 | Views | saved views of the grid |
+| Shift+F7 | Copy | copy the record, or the grid row under the cursor, into a new record (as `c`) |
+| Shift+F8 | Export | export the grid to a file (as `x`) |
+| Shift+F9 | History | the History screen (as `:history`) |
+| Shift+F10 | Assistant | show or hide the Assistant panel (the same action as F12 and Ctrl+G; assistant extension) |
+
+The bar shows the Shift row under the primary one (prefixed `⇧`) when the terminal has 30 lines or more.
+`:fkeys one|two|auto` or F9 › Settings › F-key bar chooses: **auto** (two rows from 30 lines), **two** rows
+always, or **one** row, where the Shift row takes the primary row's place for 2 seconds after any Shift+F
+press (a terminal cannot report Shift being pressed and released on its own). A click on the Shift row runs
+that key. The assignments are one table (`src/keys/shift-bank.ts`), each naming an action in
+`src/keys/actions.ts`.
+
+What terminals send for Shift+F1…F12 is decoded in one place (`src/keys/fkeys.ts`):
+
+| Terminal | Shift+F1…F12 | Notes |
+|---|---|---|
+| tmux (any outer terminal) | `ESC [1;2P` … `ESC [1;2S`, `ESC [15;2~` … `ESC [24;2~` | verified live; tmux re-encodes the keys it knows |
+| iTerm2, Windows Terminal, xterm, VTE, Konsole, Alacritty | the same xterm forms | kitty-protocol terminals (kitty, WezTerm, Ghostty, iTerm2 with CSI u) send `ESC [13;2~` for F3 and may send `ESC [57364;2u`…; both read |
+| macOS Terminal.app | Shift+F5…F12 are `ESC [25~` … `ESC [34~` | Shift+F1…F4 have no code of their own by default: add them in Settings › Profiles › Keyboard (`\033[1;2P` …) or use the F9 menu |
+| rxvt, urxvt, Linux console | Shift+F3…F10 are `ESC [25~` … `ESC [34~`, Shift+F11/F12 `ESC [23$` / `ESC [24$` | Shift+F1/F2 send the same as F11/F12 there |
+
+Shift+F3 in the xterm form (`ESC [1;2R`) looks like a cursor position report, which OpenTUI drops; it and
+the legacy forms are rewritten on the input stream into the canonical `ESC [n;2~` (never in the first
+1.5 s after start or a resume, while the terminal answers OpenTUI's cursor queries). The legacy numbering is
+picked from `TERM_PROGRAM` and `TERM`; `QQQ_FKEYS=vt220|rxvt|apple|modern` overrides it (vt220: `ESC [25~`
+is Shift+F1; modern: legacy numbers are ignored, the default in tmux, iTerm2, Windows Terminal and kitty).
+Ctrl+F1…F12 are decoded too but have no bindings yet: Ctrl+F5 acts as F5.
+
 Keys on one screen:
 
 | Screen | Keys |
@@ -84,11 +155,19 @@ passes it on — most do not, so Ctrl+P is the key to rely on):
   selected row**. The server prints up to 10,000 rows (more prints the first 10,000 and says so), repeats
   the header on every page, turns the page landscape when the columns need it and puts the table, filter,
   sort, row count, user and time in the header and footer;
-- any other screen (home, dashboards, the developer view, SQL results, process results, output) prints the
-  **screen as text**: a monospace PDF of what is drawn, without the status line and F-key bar, sized so a
-  wide terminal keeps its lines.
+- any other screen (home, dashboards, the developer view, SQL results, process results, Search, History,
+  output) first asks **Print what?**: **Content** (the default) prints the screen's panels as a document —
+  each panel a section under its title, no Apps sidebar, title bar, key lines or borders, wrapped to the
+  page — and **Screen** prints the terminal as drawn (monospace, sized so a wide terminal keeps its lines).
 
-Then the printer picker: printers that can print now (approved, exposed by a connected print agent, PDF)
+Every page carries the app's **header** (the instance's name, the screen's breadcrumb such as `People ›
+Person › Ada Lovelace`, the server, you, and the time in your date format) and **footer** (`qqq ui 1.0.1 ·
+<server>`, a grid's filter and sort, page n of m).
+
+Then the printer picker, with **Save as PDF…** first: it renders the same document on the server and saves
+it the way downloads and exports are saved — the save dialog (or, with `download-mode silent`, straight to
+the download folder), the stamped name (`Customer-Ada-Lovelace_2026-11-01_120301.pdf`), never overwriting
+without asking. `:print pdf` saves without the picker. Then printers that can print now (approved, exposed by a connected print agent, PDF)
 come first, the others are listed with the reason and cannot be picked; the printer chosen is remembered
 per profile and preselected next time, marked "(last used)". `:print <printer>` skips the picker (name,
 unique prefix or id). The title bar and status line show `print 1/3 RECEIVED` while jobs run, and a flash
@@ -477,7 +556,7 @@ the plain sample server; one that fails shows `…`, then its last value dimmed
 
 | Tile | Needs | Shows |
 |------|-------|-------|
-| Online | collaboration | people in presence across a few tables per refresh (favourites and recents first), who and on what; the signed-in user's other sessions as "you elsewhere" |
+| Online | the session store, or collaboration | who is signed in: with the session store qbit, the sessions active in the last 10 minutes and their users ("3 sessions · 2 users (you ×2, bob)"; your own sessions count); otherwise you plus the people in presence across a few tables per refresh (favourites and recents first), who and on what. It never says "nobody around" while you are signed in. A server that stores no sessions (mock auth) or merges presence per user cannot tell two terminals of one user apart: both show "1 online · you". The saver keeps the presence lease of the screen under it, so others see you still viewing it, not gone |
 | Jobs | `durableJobs` | running, queued and recently failed jobs (all users with jobs_admin, else yours) |
 | Health | health | the summary status and up / degraded / down / unknown counts |
 | Database | db-performance | live sessions, connections of the maximum, cache hit ratio, blocking chains |
@@ -497,7 +576,7 @@ the other tiles under it as one centred stack, rotating every 8 s). In a tall na
 the tile panel under Query. The block letters say the profile's
 short name when it has 6 characters or fewer (else the profile name), with the server host in plain text
 beneath; letters, digits, `-`, `_` and `.` are drawn in block letters, anything else falls back to plain
-text. Query blinks, wags and hops every ten seconds and faces the way he drifts; the art (braille, with a
+text. Query blinks, wags and hops every ten seconds and faces the way he drifts. His art is Query's own drawing from https://www.qrun.io/query/ (one colour, indigo `#818cf8`) rasterised into braille at three sizes (42×22, 25×13 and 17×9 cells; the medium is used where there is room, from 100 columns) by `scripts/gen-query-art.mjs`; the art (braille, with a
 line-art version for `--ascii`) is in `src/saver/query-art.ts`.
 
 Burn-in guard (F9 › Settings › Screen saver burn-in guard, `:saver burnin on|off`, default on): nothing
@@ -532,7 +611,8 @@ Everything below is local to the machine and shared with the CLI; nothing is sen
     1.0.0-rc.1 `note`, `lastUsedAt` and `user` recorded by the UI, and `ui.theme` for that profile only)
     and `defaultProfile`. Fields are only ever added: a 1.0.0-rc.1 file loads unchanged.
     Sign-ins themselves are in the OS keychain (or the file keyring), one per profile.
-  - `ui.theme`: the theme for every profile without its own; `ui.mouse`: `false` when the mouse is off.
+  - `ui.theme`: the theme for every profile without its own; `ui.mouse`: `false` when the mouse is off;
+    `ui.splash`: `off` when `qqq ui` starts without the splash.
   - `ui.dates` (global, or in a profile's `ui`): date order (`YMD`, `MDY`, `DMY`), `clock` (`24h`, `12h`),
     `weekStart`, `weekNumbers`, `pickerOnEnter`, set with `:dates`. Without them the clock and the first day
     of the week follow the locale (`LC_ALL`, `LC_TIME`, `LANG`), else 24-hour and Monday; the order is ISO.
@@ -557,7 +637,7 @@ global choice. `--ascii` replaces box drawing and symbols. Colours come only fro
 
 The CLI equivalent dialog copies its command with `y` (or Enter); F9 › Settings can copy it automatically, and Shift+drag selects it with the terminal.
 
-F9 › Settings also holds the mouse on/off, single-key shortcuts on/off (default: the server preference
+F9 › Settings also holds the mouse on/off, the splash on start on/off, single-key shortcuts on/off (default: the server preference
 `keyboard.singleKeyShortcuts`), the download and upload folders, the PIN and idle lock, and the terminal check.
 
 ## Keys that your terminal may intercept
@@ -583,16 +663,19 @@ before any program sees it. `qqq ui --check` (and the quick check at startup) fi
   (System Settings › Keyboard), or hold fn.
 - Whatever the terminal does, Ctrl+F / Ctrl+B page and the F9 menu and `:` line reach every action; Esc then
   a digit (or Ctrl+digit) stands for F1..F10.
+- **Shift+F-keys** (the Shift bank): see [Shift bank](#shift-bank-shiftf1f10) for what each terminal sends;
+  `QQQ_FKEYS` overrides the legacy numbering.
 
 ## Tests
 
 ```sh
 cd packages/tui && bun test          # or npm run test:tui at the root: the whole TUI against a fake server in memory
 packages/tui/scripts/smoke.sh        # tmux against a running server (profile "sample"); captures kept
+                                     # --server URL: an isolated config with two profiles, through the start-up picker
 packages/tui/scripts/mouse-smoke.sh  # the mouse in tmux: SGR 1006 clicks, drags and wheel written into the pane
 packages/tui/scripts/smoke-widths.sh # fixed grid widths across pages (fake large-instance server)
 packages/tui/scripts/smoke-sql.sh [server]  # SQL Runner at 80x24 and 120x36 (default the enterprise server on 8078)
-packages/tui/scripts/overflow-sweep.sh [server]  # every screen and dialog at 80/100/120/200 x 24/50: no text past a border
+packages/tui/scripts/overflow-sweep.sh [server]  # every screen and dialog (the splash, its picker, failure and add form too) at 80/100/120/200 x 24/50: no text past a border
 packages/tui/scripts/perf-large-table.sh  # PRF-001: 10,000 rows x 40 columns, timings against a 2 s budget
 packages/tui/scripts/soak.sh [server] [minutes]  # random keys for 10 min; fails on an exit or an error boundary
 ```

packages/tui/bun.lock

@@ -12,7 +12,7 @@
       "devDependencies": {
         "@types/bun": "1.4.4",
         "@types/react": "19.3.0",
-        "typescript": "5.8.3",
+        "typescript": "6.0.3",
       },
     },
   },
@@ -73,7 +73,7 @@
 
     "strip-ansi": ["strip-ansi@7.2.0", "", { "dependencies": { "ansi-regex": "^6.2.2" } }, "sha512-yDPMNjp4WyfYBkHnjIRLfca1i6KMyGCtsVgoKe/z1+6vukgaENdgGBZt+ZmKPc4gavvEZ5OgHfHdrazhgNyG7w=="],
 
-    "typescript": ["typescript@5.8.3", "", { "bin": { "tsc": "bin/tsc", "tsserver": "bin/tsserver" } }, "sha512-p1diW6TqL9L07nNxvRMM7hMMw4c5XOo/1ibL4aAIGmSAt9slTE1Xgw5KWuof2uTOvCg9BY7ZRi+GaF+7sfgPeQ=="],
+    "typescript": ["typescript@6.0.3", "", { "bin": { "tsc": "bin/tsc", "tsserver": "bin/tsserver" } }, "sha512-y2TvuxSZPDyQakkFRPZHKFm+KKVqIisdg9/CZwm9ftvKXLP8NRWj38/ODjNbr43SsoXqNuAisEf1GdCxqWcdBw=="],
 
     "undici-types": ["undici-types@8.9.0", "", {}, "sha512-KTDyRTYX8sWmKXAikPHHSyc63CRPETMctyjKFupcC6OBLXT3xsN0e9aF7m+mIXutFWpUXuedtowG7iLOzp0kQg=="],
 

packages/tui/package.json

@@ -18,6 +18,6 @@
   "devDependencies": {
     "@types/bun": "1.4.4",
     "@types/react": "19.3.0",
-    "typescript": "5.8.3"
+    "typescript": "6.0.3"
   }
 }

packages/tui/scripts/gen-query-art.mjs

@@ -0,0 +1,71 @@
+#!/usr/bin/env node
+/*
+ * Copyright 2026 QRun.IO, Inc.
+ * Licensed under the Apache License, Version 2.0 (see LICENSE).
+ */
+
+// Generates the screen saver's Query art (src/saver/query-art.ts: LARGE, MEDIUM, SMALL and the dot
+// boxes of the eye and the tail) from Query's own drawing: the inline SVG on https://www.qrun.io/query/
+// (viewBox 0 0 331.41 348.44; the first path is the sitting dog, the second his eye). Needs `inkscape`
+// and ImageMagick (`magick`) on the PATH; run by hand when the drawing changes:
+//   node scripts/gen-query-art.mjs query-hero.svg [outdir]
+// Each size is the drawing rasterised at 8× the dot grid, averaged down to it (a box filter, so a thin
+// stroke keeps its weight as coverage) and thresholded per size (thinner strokes need a lower cut).
+import { execFileSync } from 'node:child_process'
+import { mkdtempSync, readFileSync, writeFileSync } from 'node:fs'
+import { tmpdir } from 'node:os'
+import { join } from 'node:path'
+
+const [svgPath, outDir = '.'] = process.argv.slice(2)
+if (!svgPath) throw new Error('usage: gen-query-art.mjs query-hero.svg [outdir]')
+const svg = readFileSync(svgPath, 'utf8').replaceAll('currentColor', '#ffffff')
+const paths = [...svg.matchAll(/<path[^>]*>/g)].map((m) => m[0])
+const wrap = (body) => `<svg viewBox="0 0 331.41 348.44" xmlns="http://www.w3.org/2000/svg"><rect width="331.41" height="348.44" fill="#000"/>${body}</svg>`
+const work = mkdtempSync(join(tmpdir(), 'query-art-'))
+
+/** Coverage 0…1 per dot of an SVG body, on a grid of w×h dots. */
+function raster(body, w, h) {
+  const file = join(work, 'in.svg')
+  writeFileSync(file, wrap(body))
+  const png = join(work, 'out.png')
+  execFileSync('inkscape', [file, '-o', png, '-w', String(w * 8), '-h', String(h * 8)], { stdio: 'ignore' })
+  const raw = execFileSync('magick', [png, '-colorspace', 'Gray', '-filter', 'Box', '-resize', `${w}x${h}!`, '-depth', '8', 'gray:-'], { maxBuffer: 1 << 24 })
+  return Array.from({ length: h }, (_, y) => Array.from({ length: w }, (_, x) => raw[y * w + x] / 255))
+}
+
+const DOT = [[0x01, 0x02, 0x04, 0x40], [0x08, 0x10, 0x20, 0x80]]
+function braille(bits) {
+  const rows = []
+  for (let cy = 0; cy < bits.length / 4; cy++) {
+    let line = ''
+    for (let cx = 0; cx < bits[0].length / 2; cx++) {
+      let code = 0
+      for (let dx = 0; dx < 2; dx++) for (let dy = 0; dy < 4; dy++) if (bits[cy * 4 + dy]?.[cx * 2 + dx]) code |= DOT[dx][dy]
+      line += code ? String.fromCodePoint(0x2800 + code) : ' '
+    }
+    rows.push(line)
+  }
+  return rows
+}
+
+const SIZES = { large: { w: 42, h: 22, cut: 0.42 }, medium: { w: 25, h: 13, cut: 0.28 }, small: { w: 17, h: 9, cut: 0.2 } }
+const out = {}
+for (const [name, { w, h, cut }] of Object.entries(SIZES)) {
+  const dw = w * 2
+  const dh = h * 4
+  const bits = raster(paths[0], dw, dh).map((r) => r.map((v) => v >= cut))
+  // his eye: the second path alone, any coverage at all
+  const eyeCov = raster(paths[1], dw, dh)
+  const eyeDots = []
+  eyeCov.forEach((r, y) => r.forEach((v, x) => { if (v >= 0.12) eyeDots.push([x, y]) }))
+  const eye = eyeDots.length ? [Math.min(...eyeDots.map((d) => d[0])), Math.min(...eyeDots.map((d) => d[1])), Math.max(...eyeDots.map((d) => d[0])), Math.max(...eyeDots.map((d) => d[1]))] : [0, 0, 0, 0]
+  // the eye is part of the dog path's raster too: keep the eye dots drawn
+  for (const [x, y] of eyeDots) bits[y][x] = true
+  // the tail: the low left corner of the drawing
+  const tail = [0, Math.round(dh * 0.62), Math.round(dw * 0.2), dh - 1]
+  out[name] = { rows: braille(bits), eye, tail, w, h }
+}
+const ts = Object.entries(out).map(([name, o]) => `/** ${name} Query, ${o.w}×${o.h} cells, facing right (generated by scripts/gen-query-art.mjs). */\nconst ${name.toUpperCase()} = [\n${o.rows.map((r) => `  ${JSON.stringify(r)},`).join('\n')}\n]\n`).join('\n')
+const parts = `const PARTS: Record<QuerySize, Parts> = {\n${Object.entries(out).map(([n, o]) => `  ${n}: { eye: [${o.eye}], tail: [${o.tail}] },`).join('\n')}\n}\n`
+writeFileSync(join(outDir, 'query-art.generated.txt'), `${ts}\n${parts}`)
+for (const [n, o] of Object.entries(out)) console.log(`--- ${n} ${o.w}x${o.h} eye ${o.eye} tail ${o.tail}\n${o.rows.join('\n')}`)

packages/tui/scripts/mouse-smoke.sh

@@ -74,9 +74,10 @@ expect 07-record 'record 2 of'
 keys Escape
 expect 08-back 'row 2 '
 right "$((hx + 1))" "$((hy + 4))"
-expect 09-actions 'row 3 ' 'Actions'
+expect 09-actions 'Actions'
 keys Escape
-cap 09b-before-drag
+# the grid's status line can sit under the dialog (the F-key bar takes two rows from 30 lines): checked after it closes
+expect 09b-before-drag 'row 3 '
 read -r x y < <(at 09b-before-drag 'First Name')
 read -r lx _ < <(at 09b-before-drag 'Last Name')
 drag "$((lx - 1))" "$y" "$((lx + 6))"
@@ -89,6 +90,12 @@ expect 11b-footer ' · ping '   # the flash from the resize has faded
 read -r x y < <(at 11b-footer ' · ping ')
 click 2 "$y"
 expect 12-footer-servers 'Servers'
+# the Shift row of the F-key bar (two rows from 30 lines): a click on Shift+F2 opens the same dialog
+keys Escape
+cap 12c-bar
+read -r x y < <(at 12c-bar '2Servers')
+click "$((x + 1))" "$y"
+expect 12d-shift-servers 'Servers  (Ctrl+O)'
 keys Escape F9 T:mouse
 expect 12b-menu 'Mouse: on'
 read -r x y < <(at 12b-menu 'Mouse: on')

packages/tui/scripts/overflow-sweep.sh

@@ -65,9 +65,22 @@ shot() {
   if [[ $bad == 0 ]]; then echo "ok   $name"; else fails=$((fails + 1)); fi
 }
 cmd() { keys T:: "T:$1" Enter; }
+# start_splash NAME CONFIG-JSON: a fresh TUI on its own config, no --server (the start-up splash, picker or add form)
+start_splash() {
+  tmux kill-session -t "$s" 2>/dev/null || true
+  mkdir -p "$cfg/$1/config"
+  printf '%s\n' "$2" > "$cfg/$1/config/config.json"
+  tmux new-session -d -s "$s" -x 120 -y 36 "cd '$pkg' && QQQ_CONFIG_DIR='$cfg/$1/config' QQQ_STATE_DIR='$cfg/$1/state' QQQ_KEYRING=file QQQ_CACHE_DIR='$cfg/$1/cache' bun run src/main.tsx --no-check; sleep 30"
+  tmux set-option -t "$s" window-size manual > /dev/null
+}
 long="$(printf 'Long value %.0s' $(seq 1 30))"
 shots=0
 
+# the start-up splash: the picker (two profiles), a failed connection (retry / choose another), the add form (no profile)
+start_splash picker "{\"profiles\":{\"sweep\":{\"server\":\"$server\",\"description\":\"the sweep server\"},\"other\":{\"server\":\"$server\"}}}"; shot 00a-splash-picker 'Connect to a server' 'Terminal client for QQQ'
+start_splash failed '{"profiles":{"down":{"server":"http://127.0.0.1:9"}}}'; shot 00b-splash-failed 'Enter retries' 'Terminal client for QQQ'
+start_splash add '{"profiles":{}}'; shot 00c-splash-add 'Add a server profile'
+keys Escape; shot 00d-splash-no-profile 'n adds a server profile'
 start; shot 01-home 'Quick actions' 'Recently viewed'
 keys T:?; shot 02-help 'Keys'
 start; keys T:/; shot 03-search 'Search'

packages/tui/scripts/smoke.sh

@@ -7,7 +7,9 @@
 #   packages/tui/scripts/smoke.sh [profile]                    a profile of your own config
 #   packages/tui/scripts/smoke.sh --server URL [--profile NAME]  any server, in an isolated config
 #                                                              (MOCK or anonymous sign-in; your
-#                                                              config, keyring and cache untouched)
+#                                                              config, keyring and cache untouched;
+#                                                              two profiles, so it starts at the
+#                                                              start-up picker and connects with Enter)
 #   OUT=dir WIDTH=160 HEIGHT=45
 set -euo pipefail
 here="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
@@ -26,11 +28,12 @@ done
 out="${OUT:-$(mktemp -d)}"
 env_prefix=""
 if [[ -n "$server" ]]; then
-  # an isolated config with one profile for the server, so the TUI signs in there instead of showing the picker
+  # an isolated config with two profiles: the start-up picker opens with this one (the last used) preselected
   profile="${profile:-smoke}"
   cfg="$(mktemp -d)"
   mkdir -p "$cfg/config"
-  printf '{"profiles":{"%s":{"server":"%s"}},"defaultProfile":"%s"}\n' "$profile" "${server%/}" "$profile" > "$cfg/config/config.json"
+  now="$(date -u +%Y-%m-%dT%H:%M:%SZ)"
+  printf '{"profiles":{"%s":{"server":"%s","lastUsedAt":"%s"},"smoke-other":{"server":"%s","lastUsedAt":"2020-01-01T00:00:00Z"}},"defaultProfile":"smoke-other"}\n' "$profile" "${server%/}" "$now" "${server%/}" > "$cfg/config/config.json"
   env_prefix="QQQ_CONFIG_DIR='$cfg/config' QQQ_CACHE_DIR='$cfg/cache' QQQ_STATE_DIR='$cfg/state' QQQ_KEYRING=file"
 fi
 profile="${profile:-sample}"
@@ -54,7 +57,13 @@ expect() { # name text...
   echo "FAIL $name (wanted: $*)"; fails=$((fails + 1))
 }
 echo "smoke: profile $profile${server:+ at $server (isolated config)}; captures in $out"
-tmux new-session -d -s "$s" -x "$w" -y "$h" "cd '$pkg' && $env_prefix bun run src/main.tsx --no-check --profile '$profile'; sleep 5"
+if [[ -n "$server" ]]; then
+  tmux new-session -d -s "$s" -x "$w" -y "$h" "cd '$pkg' && $env_prefix bun run src/main.tsx --no-check; sleep 5"
+  expect 00-picker 'Connect to a server' 'Enter connects' 'Esc quits' 'Terminal client for QQQ' "$profile"
+  keys Enter
+else
+  tmux new-session -d -s "$s" -x "$w" -y "$h" "cd '$pkg' && $env_prefix bun run src/main.tsx --no-check --profile '$profile'; sleep 5"
+fi
 expect 01-home 'Apps' 'UI API' 'Recently viewed' 'Quick actions'
 keys T:: 'T:table query person' Enter
 expect 02-grid 'records ·' 'First Name'

packages/tui/src/app.tsx

@@ -5,11 +5,14 @@
 
 import { useKeyboard, usePaste, useTerminalDimensions } from '@opentui/react'
 import { Component, useEffect, useReducer, type ReactNode } from 'react'
-import type { AppTreeNode } from './client'
 import { FKeyZone, PaneZone, StatusZone, useMouseDispatcher } from './mouse/app-zones'
 import { MouseCapture, MouseLayer, MouseRoot } from './mouse/zone'
 import { presenceText, usePresence } from './presence'
+import { ShiftRow, barRows } from './keys/shift-row'
 import type { AppStore } from './store'
+import { breadcrumbs } from './breadcrumbs'
+
+export { appPath, breadcrumbs } from './breadcrumbs'
 import { glyphs, theme } from './theme'
 import { pad, trunc } from './util/text'
 
@@ -39,32 +42,6 @@ export class ErrorBoundary extends Component<{ children: ReactNode; resetKey: st
   }
 }
 
-/** The apps above a table, process or app in the app tree (labels, outermost first). */
-export function appPath(nodes: AppTreeNode[], name: string, type: string, path: string[] = []): string[] | undefined {
-  for (const n of nodes) {
-    if (n.name === name && n.type === type) return path
-    if (n.children) {
-      const found = appPath(n.children, name, type, [...path, n.label])
-      if (found) return found
-    }
-  }
-  return undefined
-}
-
-/** The title-bar path of the top screen: its apps, the table, then the record or form. */
-export function breadcrumbs(store: AppStore): string[] {
-  const top = store.screen as (import('./types').Screen & { tableName?: string; processName?: string; appName?: string }) | undefined
-  if (!top) return []
-  const tree = (store.meta?.appTree ?? []) as AppTreeNode[]
-  const tableLabel = top.tableName ? store.meta?.tables?.[top.tableName]?.label ?? top.tableName : undefined
-  if (top.kind === 'table') return [...(appPath(tree, top.tableName!, 'TABLE') ?? []), top.title()]
-  if (top.kind === 'record') return [...(appPath(tree, top.tableName!, 'TABLE') ?? []), tableLabel!, top.title()]
-  if (top.kind === 'form') return [...(appPath(tree, top.tableName!, 'TABLE') ?? []), top.title()]
-  if (top.kind === 'process') return [...(appPath(tree, top.processName!, 'PROCESS') ?? []), top.title()]
-  if (top.kind === 'app') return [...(appPath(tree, top.appName!, 'APP') ?? []), top.title()]
-  return [top.title()]
-}
-
 function TitleBar({ store, width }: { store: AppStore; width: number }) {
   const t = theme()
   const presence = usePresence(store.screen?.presenceScope?.())
@@ -156,7 +133,9 @@ export function App({ store }: { store: AppStore }) {
   const t = theme()
   const w = Math.max(20, width)
   const h = Math.max(8, height)
-  const bodyHeight = h - 3
+  // the F-key bar: the primary row, and the Shift row under it with two rows (keys/shift-row.tsx)
+  const rows = barRows(store, h)
+  const bodyHeight = h - 2 - rows
   const assistant = store.assistantLayout()
   const full = assistant?.mode === 'full'
   const sidebarWidth = store.showSidebar && !full ? (w >= 160 ? 32 : 28) : 0
@@ -164,6 +143,19 @@ export function App({ store }: { store: AppStore }) {
   const contentWidth = w - sidebarWidth - assistantWidth
   const screen = store.screen
   const top = store.overlays[store.overlays.length - 1]
+  const overlays = store.overlays.map((o, i) => <MouseLayer key={o.id} layer={i + 1}><ErrorBoundary resetKey={o.id} width={Math.min(60, w)} label="Dialog">{o.render(w, h)}</ErrorBoundary></MouseLayer>)
+  if (screen?.kind === 'splash') {
+    // the start-up splash has the whole terminal: no title bar, status line or key bar yet
+    return (
+      <MouseRoot dispatcher={mouse} press={store.pressKey}>
+      <box flexDirection="column" overflow="hidden" width={w} height={h}>
+        <ErrorBoundary resetKey={screen.id} width={w} label="Splash">{screen.render(w, h, !top)}</ErrorBoundary>
+        {overlays}
+        <MouseCapture width={w} height={h} />
+      </box>
+      </MouseRoot>
+    )
+  }
   return (
     <MouseRoot dispatcher={mouse} press={store.pressKey}>
     <box flexDirection="column" overflow="hidden" width={w} height={h}>
@@ -180,8 +172,9 @@ export function App({ store }: { store: AppStore }) {
         {assistantWidth > 0 && store.assistant && <ErrorBoundary resetKey={store.assistant.id} width={assistantWidth} label="Assistant">{store.assistant.render(assistantWidth, bodyHeight, store.focus === 'assistant' && !top)}</ErrorBoundary>}
       </box>
       <StatusLine store={store} width={w} />
-      <FKeyBar store={store} width={w} />
-      {store.overlays.map((o, i) => <MouseLayer key={o.id} layer={i + 1}><ErrorBoundary resetKey={o.id} width={Math.min(60, w)} label="Dialog">{o.render(w, h)}</ErrorBoundary></MouseLayer>)}
+      {rows === 1 && store.shiftRowShown() ? <ShiftRow store={store} width={w} slots={store.fkeys().length} /> : <FKeyBar store={store} width={w} />}
+      {rows === 2 && <ShiftRow store={store} width={w} slots={store.fkeys().length} />}
+      {overlays}
       {store.lock && <ErrorBoundary key="lock" resetKey="lock" width={w} label="Lock">{store.lock.render(w, h)}</ErrorBoundary>}
       <MouseCapture width={w} height={h} />
     </box>

packages/tui/src/boot-plan.ts

@@ -0,0 +1,104 @@
+/*
+ * Copyright 2026 QRun.IO, Inc.
+ * Licensed under the Apache License, Version 2.0 (see LICENSE).
+ */
+
+/**
+ * What `qqq ui` does first, decided from the options, the environment and config.json before
+ * anything is drawn: connect to one profile, ask which profile (several saved, none named), or add
+ * the first one (none saved). Also the Splash setting (`ui.splash`: on unless off) and its timing.
+ */
+
+import { readConfig, resolveProfile, writeConfig, type Config } from '@qrun-io/qqq-core'
+import type { Target } from './store'
+
+/** The splash stays up at least this long (ms) so it never just flashes. */
+export const SPLASH_MIN_MS = 600
+
+export type BootPlan =
+  /** A profile was named (--profile, QQQ_PROFILE, --server, QQQ_SERVER) or only one exists. */
+  | { kind: 'connect'; target: Target }
+  /** Several profiles and none named: the Servers picker, `select` preselected (the last used). */
+  | { kind: 'pick'; select?: string; note?: string }
+  /** No profile at all: the add form. */
+  | { kind: 'add'; note?: string }
+
+/** Whether a profile was named for this run (an option or the environment). */
+export function namedProfile(args: { profile?: string; server?: string }, env: NodeJS.ProcessEnv = process.env): boolean {
+  return Boolean(args.profile || args.server || env.QQQ_PROFILE || env.QQQ_SERVER)
+}
+
+/** The most recently used profile (config lastUsedAt), else the default, else the first. */
+export function lastUsedProfile(config: Config): string | undefined {
+  const names = Object.keys(config.profiles)
+  let best: string | undefined
+  let bestAt = -Infinity
+  for (const n of names) {
+    const at = Date.parse(config.profiles[n]!.lastUsedAt ?? '')
+    if (!Number.isNaN(at) && at > bestAt) {
+      best = n
+      bestAt = at
+    }
+  }
+  return best ?? (config.defaultProfile && config.profiles[config.defaultProfile] ? config.defaultProfile : names[0])
+}
+
+/** Decides the first step of a run (pure: config and environment are passed in by tests). */
+export function planBoot(args: { profile?: string; server?: string }, env: NodeJS.ProcessEnv = process.env, config: Config = readConfig(env)): BootPlan {
+  const names = Object.keys(config.profiles)
+  if (!namedProfile(args, env) && names.length === 1) return { kind: 'connect', target: { name: names[0]!, server: config.profiles[names[0]!]!.server } }
+  if (namedProfile(args, env)) {
+    try {
+      const r = resolveProfile({ profile: args.profile, server: args.server }, env, config)
+      return { kind: 'connect', target: { name: r.name, server: r.server } }
+    } catch (e) {
+      // a name that does not exist: choose from what there is (or add the first)
+      const note = e instanceof Error ? e.message : String(e)
+      return names.length ? { kind: 'pick', select: lastUsedProfile(config), note } : { kind: 'add', note }
+    }
+  }
+  if (!names.length) return { kind: 'add' }
+  return { kind: 'pick', select: lastUsedProfile(config) }
+}
+
+/** The Splash setting: on unless `ui.splash` is off (or false). */
+export function readSplash(env: NodeJS.ProcessEnv = process.env): boolean {
+  try {
+    const v = (readConfig(env).ui as { splash?: unknown } | undefined)?.splash
+    return !(v === false || v === 'off')
+  } catch {
+    return true
+  }
+}
+
+export function writeSplash(on: boolean, env: NodeJS.ProcessEnv = process.env): void {
+  const config = readConfig(env)
+  config.ui = { ...config.ui, splash: on ? 'on' : 'off' } as never
+  writeConfig(config, env)
+}
+
+/** Whether this run shows the splash: --no-splash (or QQQ_UI_NO_SPLASH=1) and the setting turn it off. */
+export function splashEnabled(args: { splash?: boolean }, env: NodeJS.ProcessEnv = process.env): boolean {
+  if (args.splash !== undefined) return args.splash
+  if (env.QQQ_UI_NO_SPLASH === '1') return false
+  return readSplash(env)
+}
+
+/** How long to wait before leaving the splash, given when it was shown. */
+export function splashWait(shownAt: number, now: number, minMs = SPLASH_MIN_MS): number {
+  return Math.max(0, shownAt + minMs - now)
+}
+
+/** The one line printed when the picker is closed without choosing. */
+export const PICK_HINT = 'qqq ui: no profile chosen; --profile NAME (or QQQ_PROFILE) skips the picker'
+
+/** Settings > Splash on start and `:splash on|off`: saved for the next start. */
+export function setSplashSetting(store: { flash: (text: string) => void; error: (e: unknown) => void }, on: boolean): void {
+  try {
+    writeSplash(on)
+  } catch (e) {
+    store.error(e)
+    return
+  }
+  store.flash(on ? 'splash on (saved): the next qqq ui starts on the splash' : 'splash off (saved): the next qqq ui starts without it (--splash shows it once)')
+}

packages/tui/src/boot.ts

@@ -5,10 +5,15 @@
 
 /** Builds the store for a run: settings from options, config and environment; sign-in; the first route. */
 
-import { readConfig, readTheme, resolveProfile, writeTheme, defaultSecretStore, type SecretStore } from '@qrun-io/qqq-core'
+import { probeServer, readConfig, readTheme, writeTheme, defaultSecretStore, type SecretStore } from '@qrun-io/qqq-core'
+import { PICK_HINT, SPLASH_MIN_MS, planBoot, splashEnabled, type BootPlan } from './boot-plan'
 import { installCommands } from './commands'
 import { readMouse } from './mouse/settings'
+import { readFKeyBar } from './keys/shift-bank'
+import { ProfileFormOverlay, ServersOverlay } from './overlays/servers'
+import { ServersModel } from './servers'
 import { SignInScreen, type SignInDeps } from './screens/signin'
+import { SplashScreen } from './screens/splash'
 import { Sidebar } from './screens/sidebar'
 import { AppStore, setSecretStoreFactory, type Target } from './store'
 import { DEFAULT_THEME, THEMES } from './theme'
@@ -21,6 +26,8 @@ export interface CliArgs {
   linear: boolean
   /** --mouse / --no-mouse for this run; unset: the saved Mouse setting (on by default). */
   mouse?: boolean
+  /** --splash / --no-splash for this run; unset: the Splash setting (ui.splash, on by default). */
+  splash?: boolean
   check: 'startup' | 'full' | 'off'
   route: string[]
 }
@@ -40,6 +47,8 @@ export function parseArgs(argv: string[], env: NodeJS.ProcessEnv = process.env):
     else if (a === '--linear') out.linear = true
     else if (a === '--mouse') out.mouse = true
     else if (a === '--no-mouse') out.mouse = false
+    else if (a === '--splash') out.splash = true
+    else if (a === '--no-splash') out.splash = false
     else if (a === '--check') out.check = 'full'
     else if (a === '--no-check') out.check = 'off'
     else out.route.push(a)
@@ -54,25 +63,29 @@ export interface BootOptions {
   secrets?: () => SecretStore
   fetch?: typeof fetch
   timers?: boolean
+  /** Shows the splash; unset: --no-splash, QQQ_UI_NO_SPLASH=1 and the Splash setting decide. */
+  splash?: boolean
+  /** The splash's minimum display time; unset: 600 ms with timers (a real run), else none. */
+  splashMinMs?: number
+  /** Prints a line once the terminal is restored (the picker closed without a choice). */
+  hint?: (text: string) => void
 }
 
-/** Creates the store and starts sign-in (or connects straight away with a stored sign-in). */
+/**
+ * Creates the store and starts the boot: the splash (unless switched off), then the profile named
+ * or the only one; with several the Servers picker, with none the add form (boot-plan.ts).
+ */
 export function boot(options: BootOptions): AppStore {
   const { args } = options
-  let target: Target | undefined
-  let note: string | undefined
-  try {
-    const r = resolveProfile({ profile: args.profile, server: args.server })
-    target = { name: r.name, server: r.server }
-  } catch (e) {
-    note = e instanceof Error ? e.message : String(e)
-  }
+  const plan: BootPlan = planBoot(args)
+  const target: Target | undefined = plan.kind === 'connect' ? plan.target : undefined
+  let note = plan.kind === 'connect' ? undefined : plan.note
   if (args.theme) {
     if (THEMES[args.theme]) writeTheme(args.theme)
     else note = `unknown theme "${args.theme}"; themes: ${Object.keys(THEMES).join(', ')}`
   }
   const theme = (args.theme && THEMES[args.theme] ? args.theme : undefined) ?? readTheme(target?.name) ?? DEFAULT_THEME
-  const store = new AppStore({ settings: { theme, ascii: args.ascii, linear: args.linear, mouse: args.mouse ?? readMouse(), singleKeys: true, copyCli: readConfig().ui?.copyCliCommands === true }, quit: options.quit, build: options.build, target, timers: options.timers })
+  const store = new AppStore({ settings: { theme, ascii: args.ascii, linear: args.linear, mouse: args.mouse ?? readMouse(), singleKeys: true, copyCli: readConfig().ui?.copyCliCommands === true, fkeyBar: readFKeyBar() }, quit: options.quit, build: options.build, target, timers: options.timers })
   let secrets: SecretStore | undefined
   const secretsFn = options.secrets ?? (() => (secrets ??= defaultSecretStore()))
   setSecretStoreFactory(secretsFn)
@@ -92,9 +105,29 @@ export function boot(options: BootOptions): AppStore {
     },
   }
   store.signInDeps = deps
+  const exit = (hint: string) => {
+    store.quit()
+    if (hint) options.hint?.(hint)
+  }
+  if (options.splash ?? splashEnabled(args)) {
+    const splash = new SplashScreen(store, { plan, deps, exit, minMs: options.splashMinMs ?? (options.timers ? SPLASH_MIN_MS : 0), animate: Boolean(options.timers) })
+    store.push(splash)
+    splash.start()
+    return store
+  }
+  // --no-splash: the sign-in screen, with the same first step
   const screen = new SignInScreen(store, deps, target, note)
   store.push(screen)
   if (target) screen.choose(target)
+  else {
+    const model = new ServersModel({ secrets: secretsFn, probe: (server) => probeServer(server, { fetch: options.fetch }), onChange: () => store.bump() })
+    if (plan.kind === 'pick') store.open(new ServersOverlay(store, (row) => screen.choose({ name: row.name, server: row.server }), model, { title: 'Connect to a server', enterLabel: 'Enter connects', escLabel: 'Esc quits', select: plan.select, onEscape: () => exit(PICK_HINT) }))
+    else store.open(new ProfileFormOverlay(store, model, undefined, (name) => {
+      const p = readConfig().profiles[name]
+      screen.build()
+      if (p) screen.choose({ name, server: p.server })
+    }))
+  }
   return store
 }
 

packages/tui/src/breadcrumbs.ts

@@ -0,0 +1,35 @@
+/*
+ * Copyright 2026 QRun.IO, Inc.
+ * Licensed under the Apache License, Version 2.0 (see LICENSE).
+ */
+
+/** The title-bar path of a screen (apps, table, record), shared by the title bar and printed headers. */
+
+import type { AppTreeNode } from './client'
+import type { AppStore } from './store'
+
+/** The apps above a table, process or app in the app tree (labels, outermost first). */
+export function appPath(nodes: AppTreeNode[], name: string, type: string, path: string[] = []): string[] | undefined {
+  for (const n of nodes) {
+    if (n.name === name && n.type === type) return path
+    if (n.children) {
+      const found = appPath(n.children, name, type, [...path, n.label])
+      if (found) return found
+    }
+  }
+  return undefined
+}
+
+/** The title-bar path of the top screen: its apps, the table, then the record or form. */
+export function breadcrumbs(store: AppStore): string[] {
+  const top = store.screen as (import('./types').Screen & { tableName?: string; processName?: string; appName?: string }) | undefined
+  if (!top) return []
+  const tree = (store.meta?.appTree ?? []) as AppTreeNode[]
+  const tableLabel = top.tableName ? store.meta?.tables?.[top.tableName]?.label ?? top.tableName : undefined
+  if (top.kind === 'table') return [...(appPath(tree, top.tableName!, 'TABLE') ?? []), top.title()]
+  if (top.kind === 'record') return [...(appPath(tree, top.tableName!, 'TABLE') ?? []), tableLabel!, top.title()]
+  if (top.kind === 'form') return [...(appPath(tree, top.tableName!, 'TABLE') ?? []), top.title()]
+  if (top.kind === 'process') return [...(appPath(tree, top.processName!, 'PROCESS') ?? []), top.title()]
+  if (top.kind === 'app') return [...(appPath(tree, top.appName!, 'APP') ?? []), top.title()]
+  return [top.title()]
+}

packages/tui/src/collab.ts

@@ -210,10 +210,10 @@ export class RecordCollaboration {
 }
 
 /** Who is on the record (the actions entry): everyone the server reports, this user marked "(you)". */
-export function viewingText(everyone: Array<{ name: string; self?: boolean }> | undefined): string {
+export function viewingText(everyone: Array<{ name: string; self?: boolean; connections?: number }> | undefined): string {
   if (!everyone) return 'Viewing now: …'
   if (!everyone.length) return 'Viewing now: no one else'
-  const names = everyone.map((p) => (p.self ? `${p.name} (you)` : p.name))
+  const names = everyone.map((p) => `${p.name}${p.connections && p.connections > 1 ? ` ×${p.connections}` : ''}${p.self ? ' (you)' : ''}`)
   const others = everyone.filter((p) => !p.self).length
   return `Viewing now: ${names.slice(0, 3).join(', ')}${names.length > 3 ? ` +${names.length - 3}` : ''}${others ? ` · ${others} other${others === 1 ? '' : 's'}` : ''}`
 }

packages/tui/src/commands.ts

@@ -11,6 +11,7 @@
 
 import { createProgram, runCli } from '@qrun-io/qqq-cli/program'
 import { setMouseSetting } from './mouse/settings'
+import { readSplash, setSplashSetting } from './boot-plan'
 import { THEMES } from './theme'
 import { metaHelp, processHelp, tableHelp, applyLiveFix, checkEnvironment, formatReport, buildFilter, readFilePreferences, startDirForSave, startDirForUpload, writeFilePreferences, hasPin, readConfig, readRecents, removePin, setPin, writeConfig, writeIdleMinutes, writeTheme, readIdleMinutes, type QueryFilter } from '@qrun-io/qqq-core'
 import { openApp, openForm, openProcess, openRecord, openTable } from './nav'
@@ -39,6 +40,7 @@ import { withPrintEntry } from './overlays/actions'
 import { openHistory } from './history/screen'
 import { searchLines } from './history/reverse-search'
 import { changeEvent, commandEvent, history } from './history/record'
+import { FKEY_BAR_MODES, describeFKeyBar, runShiftKey, setFKeyBar, shiftBankHelp, type FKeyBarMode } from './keys/shift-bank'
 
 const NOUNS: Record<string, string[]> = {
   table: ['list', 'describe', 'query', 'count', 'get', 'create', 'update', 'delete', 'export'],
@@ -53,7 +55,7 @@ const NOUNS: Record<string, string[]> = {
   apps: [], whoami: [], search: [], 'help-search': [],
 }
 
-const TUI_COMMANDS = ['quit', 'home', 'reset', 'tags', 'audits', 'dev', 'actions', 'back', 'help', 'menu', 'goto', 'view', 'theme', 'ascii', 'linear', 'mouse', 'shortcuts', 'lock', 'saver', 'pin', 'idle', 'refresh', 'filter', 'export', 'jobs', 'printjobs', 'print', 'profile', 'servers', 'server', 'signout', 'connection', 'open', 'record', 'app', 'sql', 'ask', 'dates', 'history']
+const TUI_COMMANDS = ['quit', 'home', 'reset', 'tags', 'audits', 'dev', 'actions', 'back', 'help', 'menu', 'goto', 'view', 'theme', 'ascii', 'linear', 'mouse', 'splash', 'shortcuts', 'lock', 'saver', 'pin', 'idle', 'refresh', 'filter', 'export', 'jobs', 'printjobs', 'print', 'profile', 'servers', 'server', 'signout', 'connection', 'open', 'record', 'app', 'sql', 'ask', 'dates', 'history', 'fkeys']
 
 /** One line on each TUI command, for the `:` line's completion popup. */
 export const TUI_COMMAND_HELP: Record<string, string> = {
@@ -63,7 +65,7 @@ export const TUI_COMMAND_HELP: Record<string, string> = {
   shortcuts: 'single-key shortcuts on or off', lock: 'lock the screen', pin: 'set or remove the lock PIN', idle: 'screen saver after idle minutes', refresh: 'reload this screen',
   filter: 'filter the grid (grammar)', export: 'export the grid or result', jobs: 'your jobs', printjobs: 'print jobs', print: 'print what you see (or :print <printer>)', profile: 'switch profile', servers: 'saved servers (Ctrl+O)',
   history: 'everything you did (CLI and TUI)', server: 'connect to a server URL', signout: 'sign out', connection: 'connection details', open: 'open a table', record: 'open a record by key', app: 'open an app',
-  sql: 'SQL Runner (statement to run, open <notebook id>)', ask: 'show or hide the Assistant panel (F12, Ctrl+G); with a question, asks it about this screen', saver: 'the screen saver', doctor: 'check the terminal', views: 'saved views of this table', share: 'share this record', helpkeys: 'help-authoring mode',
+  sql: 'SQL Runner (statement to run, open <notebook id>)', ask: 'show or hide the Assistant panel (F12, Ctrl+G); with a question, asks it about this screen', saver: 'the screen saver', doctor: 'check the terminal', views: 'saved views of this table', share: 'share this record', helpkeys: 'help-authoring mode', fkeys: 'F-key bar: one row, two rows (with the Shift bank) or auto',
 }
 
 /** CLI commands the `:` line does not offer (they make no sense inside the TUI). */
@@ -95,7 +97,10 @@ export class Commands implements CommandsLike {
     // keys only: the screen's own key rows and shortcuts from its actions (label and key), never the actions themselves
     const panelKeys = s.focus === 'assistant' && s.assistantOpen && s.assistant ? s.assistant.helpKeys() : []
     const screenKeys: KeyRow[] = [...panelKeys, ...(screen?.helpKeys?.() ?? []), ...(screen?.menu?.() ?? []).filter((e) => e.key && !e.disabled).map((e): KeyRow => [e.key!, e.label.replace(/…$/, '').replace(/\s*\([^)]*\d[^)]*\)$/, '')])]
-    s.open(new HelpOverlay(s, helpKeyGroups(screen?.kind, s.singleKeys, screenKeys), topicHelp))
+    const help = new HelpOverlay(s, helpKeyGroups(screen?.kind, s.singleKeys, screenKeys), topicHelp)
+    // the Shift bank (Shift+F1…F10) after the screen's help
+    help.after = [{ title: 'Shift bank (Shift+F1…F10; the second row of the F-key bar)', keys: shiftBankHelp(s) }]
+    s.open(help)
     // help for this screen: the kernel's help entries for the screen's roles; in help-authoring mode
     // (:helpkeys) every slot shows its key, with or without content, so authors see where help goes
     const authoring = s.helpKeys
@@ -230,6 +235,10 @@ export class Commands implements CommandsLike {
   }
 
   /** The Servers dialog: saved profiles, probed in the background; Enter switches. */
+  shiftKey(n: number): void {
+    runShiftKey(this.store, n)
+  }
+
   servers(): void {
     const s = this.store
     if (s.overlays.some((o) => o instanceof ServersOverlay)) return
@@ -349,6 +358,7 @@ export class Commands implements CommandsLike {
         case 'linear': s.settings.linear = rest[0] !== 'off'; s.bump(); return s.flash(`linear layout ${s.settings.linear ? 'on' : 'off'}`)
         case 'shortcuts': return this.setShortcuts(rest[0] !== 'off')
         case 'mouse': return setMouseSetting(s, rest[0] === undefined ? !s.settings.mouse : rest[0] !== 'off')
+        case 'splash': return setSplashSetting(s, rest[0] === undefined ? !readSplash() : rest[0] !== 'off')
         case 'idle': {
           const m = Number(rest[0])
           if (!Number.isFinite(m)) return fail('idle <minutes>: 0 turns the screen saver timeout off')
@@ -418,6 +428,12 @@ export class Commands implements CommandsLike {
         case 'doctor': case 'check': return this.doctor()
         case 'profile': return rest[0] ? this.switchProfile(rest[0]) : this.chooseProfile()
         case 'servers': return this.servers()
+        case 'fkeys': {
+          const mode = rest[0] as FKeyBarMode | undefined
+          if (!mode) return s.flash(`F-key bar: ${describeFKeyBar(s.settings.fkeyBar ?? 'auto')} · :fkeys one|two|auto`)
+          if (!FKEY_BAR_MODES.includes(mode)) return fail('fkeys one|two|auto')
+          return setFKeyBar(s, mode)
+        }
         case 'server': return rest[0] ? this.switchServer(rest[0]) : fail('server <url>')
         case 'signout': return this.signOut()
         case 'connection': return this.connection()
@@ -749,6 +765,9 @@ export class Commands implements CommandsLike {
     out.push({ section: 'Settings', label: `Single-key shortcuts: ${s.settings.singleKeys ? 'on' : 'off'}`, command: `shortcuts ${s.settings.singleKeys ? 'off' : 'on'}`, run: () => this.setShortcuts(!s.settings.singleKeys) })
     out.push({ section: 'Settings', label: `Linear layout: ${s.settings.linear ? 'on' : 'off'}`, command: `linear ${s.settings.linear ? 'off' : 'on'}`, run: () => { s.settings.linear = !s.settings.linear; s.bump() } })
     out.push({ id: 'settings:mouse', section: 'Settings', label: `Mouse: ${s.settings.mouse ? 'on' : 'off'}`, command: `mouse ${s.settings.mouse ? 'off' : 'on'}`, detail: s.settings.mouse ? 'off restores plain terminal text selection' : undefined, run: () => setMouseSetting(s, !s.settings.mouse) })
+    out.push({ id: 'settings:fkeys', section: 'Settings', label: `F-key bar: ${s.settings.fkeyBar ?? 'auto'}`, command: 'fkeys one|two|auto', detail: describeFKeyBar(s.settings.fkeyBar ?? 'auto'), run: () => s.open(new ChoiceOverlay<FKeyBarMode>(s, 'F-key bar', FKEY_BAR_MODES.map((m) => ({ label: m, value: m, detail: describeFKeyBar(m) })), (m) => setFKeyBar(s, m), 'Enter chooses')) })
+    const splash = readSplash()
+    out.push({ id: 'settings:splash', section: 'Settings', label: `Splash on start: ${splash ? 'on' : 'off'}`, command: `splash ${splash ? 'off' : 'on'}`, detail: 'Query and the boot steps while qqq ui starts', run: () => setSplashSetting(s, !splash) })
     out.push({ section: 'Settings', label: `ASCII glyphs: ${s.settings.ascii ? 'on' : 'off'}`, command: `ascii ${s.settings.ascii ? 'off' : 'on'}`, run: () => s.setAscii(!s.settings.ascii) })
     out.push({ section: 'Settings', label: 'Screen saver / lock', command: 'lock', run: () => this.lock() })
     let idle = 0

packages/tui/src/history/record.ts

@@ -30,7 +30,7 @@ function sameAction(command: string | undefined): string | undefined {
  * `:` commands the TUI does itself (theme, lock, the Servers dialog …): logged as `:…`, re-run on
  * the `:` line only. Everything else on the `:` line is a CLI command (`qqq …`).
  */
-const TUI_ONLY = new Set(['quit', 'q', 'exit', 'home', 'reset', 'tags', 'audits', 'audit', 'dev', 'developer', 'actions', 'back', 'help', 'menu', 'goto', 'palette', 'view', 'theme', 'ascii', 'linear', 'mouse', 'shortcuts', 'lock', 'saver', 'pin', 'idle', 'refresh', 'filter', 'export', 'jobs', 'printjobs', 'print', 'profile', 'servers', 'server', 'signout', 'connection', 'open', 'record', 'app', 'sql', 'dates', 'helpkeys', 'views', 'share', 'doctor', 'check', 'history'])
+const TUI_ONLY = new Set(['quit', 'q', 'exit', 'home', 'reset', 'tags', 'audits', 'audit', 'dev', 'developer', 'actions', 'back', 'help', 'menu', 'goto', 'palette', 'view', 'theme', 'ascii', 'linear', 'mouse', 'splash', 'shortcuts', 'lock', 'saver', 'pin', 'idle', 'refresh', 'filter', 'export', 'jobs', 'printjobs', 'print', 'profile', 'servers', 'server', 'signout', 'connection', 'open', 'record', 'app', 'sql', 'dates', 'helpkeys', 'views', 'share', 'doctor', 'check', 'history'])
 
 let last: { action?: string; at: number; words?: string[] } = { at: 0 }
 

packages/tui/src/keys/actions.ts

@@ -0,0 +1,133 @@
+/*
+ * Copyright 2026 QRun.IO, Inc.
+ * Licensed under the Apache License, Version 2.0 (see LICENSE).
+ */
+
+/**
+ * Named actions that keys bind to: the Shift bank (shift-bank.ts) binds by name, and so can any other
+ * key (F12 and Ctrl+G bind `assistant.toggle`). Each action says whether it applies on the current
+ * screen; one that does not says why, and the bar dims its key.
+ */
+
+import { openForm, permits } from '../nav'
+import { openHistory } from '../history/screen'
+import { openSqlRunner, sqlWorkbenchInstalled } from '../sql/entry'
+import type { AppStore } from '../store'
+import type { MenuEntry } from '../types'
+
+export interface NamedAction {
+  /** Why it does not apply here; undefined when it does. */
+  unavailable(store: AppStore): string | undefined
+  run(store: AppStore): void
+}
+
+/** The parts of the table grid the actions use (screens/table.tsx). */
+interface GridLike {
+  kind: string
+  tableName: string
+  meta?: unknown
+  currentRecord?: unknown
+  keyOf?(record: unknown): string | undefined
+  bulkActions?(): void
+  bulkEntries?(): MenuEntry[]
+  tableProcesses?(): unknown[]
+  savedViews?(): void
+  exportDialog?(): void
+  variant?: unknown
+}
+
+/** The parts of the record view the actions use (screens/record.tsx). */
+interface RecordLike {
+  kind: string
+  tableName: string
+  primaryKey?: string
+  meta?: unknown
+  tableVariant?: string
+}
+
+function grid(store: AppStore): GridLike | undefined {
+  const s = store.screen as unknown as GridLike | undefined
+  return s?.kind === 'table' ? s : undefined
+}
+
+function record(store: AppStore): RecordLike | undefined {
+  const s = store.screen as unknown as RecordLike | undefined
+  return s?.kind === 'record' ? s : undefined
+}
+
+/** The record to copy: the record on screen, or the grid row under the cursor. */
+function copySource(store: AppStore): { table: string; key: string; meta: unknown; tableVariant?: string } | undefined {
+  const r = record(store)
+  if (r?.primaryKey !== undefined) return { table: r.tableName, key: r.primaryKey, meta: r.meta, tableVariant: r.tableVariant }
+  const g = grid(store)
+  const key = g?.keyOf?.(g.currentRecord)
+  return g && key !== undefined ? { table: g.tableName, key, meta: g.meta } : undefined
+}
+
+export const ACTIONS = {
+  'help.keys': {
+    unavailable: () => undefined,
+    run: (s) => s.commands().help(),
+  },
+  servers: {
+    unavailable: () => undefined,
+    run: (s) => s.commands().servers(),
+  },
+  'sql.open': {
+    unavailable: (s) => sqlWorkbenchInstalled(s) ? undefined : 'needs the sql-workbench extension',
+    run: (s) => openSqlRunner(s),
+  },
+  'grid.bulk': {
+    unavailable: (s) => {
+      const g = grid(s)
+      if (!g) return 'bulk actions work on a table grid'
+      return (g.bulkEntries?.().length ?? 0) + (g.tableProcesses?.().length ?? 0) ? undefined : 'this table has no bulk actions or processes'
+    },
+    run: (s) => grid(s)?.bulkActions?.(),
+  },
+  'meta.refresh': {
+    unavailable: (s) => s.client ? undefined : 'not connected',
+    run: (s) => s.run(s.client!.metaData(true), (m) => {
+      s.setMeta(m)
+      s.client!.clearCaches()
+      s.flash('metadata refreshed')
+    }),
+  },
+  'grid.views': {
+    unavailable: (s) => grid(s) ? undefined : 'saved views work on a table grid',
+    run: (s) => grid(s)?.savedViews?.(),
+  },
+  'record.copy': {
+    unavailable: (s) => {
+      const src = copySource(s)
+      if (!src) return 'copy works on a record or a grid row'
+      return permits(src.meta as never, 'insert') ? undefined : 'copying needs permission to create records'
+    },
+    run: (s) => {
+      const src = copySource(s)
+      if (src) openForm(s, src.table, { mode: 'copy', primaryKey: src.key, ...(src.tableVariant ? { tableVariant: src.tableVariant } : {}) })
+    },
+  },
+  export: {
+    unavailable: (s) => grid(s) ? undefined : 'export works on a table grid',
+    run: (s) => grid(s)?.exportDialog?.(),
+  },
+  history: {
+    unavailable: () => undefined,
+    run: (s) => openHistory(s),
+  },
+  'assistant.toggle': {
+    unavailable: (s) => s.extensions.has('assistant') ? undefined : 'needs the assistant extension',
+    run: (s) => s.toggleAssistant(),
+  },
+} satisfies Record<string, NamedAction>
+
+export type ActionName = keyof typeof ACTIONS
+
+/** Runs a named action, or says why it does not apply here. */
+export function runAction(store: AppStore, name: ActionName, label: string = name): void {
+  const action: NamedAction = ACTIONS[name]
+  const why = action.unavailable(store)
+  if (why) return store.flash(`${label}: ${why}`)
+  action.run(store)
+}

packages/tui/src/keys/fkeys.ts

@@ -0,0 +1,214 @@
+/*
+ * Copyright 2026 QRun.IO, Inc.
+ * Licensed under the Apache License, Version 2.0 (see LICENSE).
+ */
+
+/**
+ * The one decoder for function keys with modifiers (Shift+F1…F12, Ctrl+F-keys, Alt), across the
+ * forms terminals send:
+ *
+ *  - xterm modifier forms: `CSI 1;m P|Q|R|S` (F1–F4), `SS3 m P…S`, `CSI n;m ~` (F5–F12; also
+ *    `CSI 11..14;m ~` and kitty's `CSI 13;m ~` for F3), m = 1 + shift + 2·alt + 4·ctrl
+ *    (tmux, iTerm2, Windows Terminal, xterm, VTE, Konsole, Alacritty);
+ *  - the kitty keyboard protocol: the same forms with `:event` sub-parameters, and `CSI 57364..57375;m u`;
+ *  - legacy numbered forms with no modifier parameter, which mean different keys per terminal:
+ *    `CSI 25~ … CSI 34~` is Shift+F1…F8 with the VT220 numbering (F13 = Shift+F1), Shift+F3…F10 on
+ *    rxvt and the Linux console (F11 = Shift+F1), Shift+F5…F12 on macOS Terminal.app;
+ *  - rxvt's suffixes: `CSI n $` Shift, `CSI n ^` Ctrl, `CSI n @` Ctrl+Shift;
+ *  - the Linux console's `CSI [ A…E` (F1–F5).
+ *
+ * OpenTUI 0.8 reads the xterm and kitty forms itself, except Shift+F3 (`CSI 1;2R`) and the other
+ * modified F3s: they look like a cursor position report, so OpenTUI takes them as one and drops them.
+ * It reads none of the legacy or rxvt forms. `rewriteFKeyInput` turns exactly those into the
+ * canonical `CSI n;m ~` form before OpenTUI sees the bytes (stdin-rewrite.ts), so every terminal
+ * ends up as one OpenTUI key event (name `f3`, shift true), which `bankKey` names `shift+f3`.
+ */
+
+import type { Key } from '../keys'
+
+/** A function key with its modifiers. */
+export interface FKeyChord {
+  /** 1..12 */
+  n: number
+  shift: boolean
+  ctrl: boolean
+  alt: boolean
+  /** A kitty key-release event (nothing to do). */
+  release?: boolean
+}
+
+/** Which sequence family a chord was read from. */
+export type FKeyFamily = 'ss3' | 'csi-letter' | 'csi-f3-cpr' | 'csi-tilde' | 'kitty-u' | 'legacy-number' | 'rxvt-suffix' | 'linux-console'
+
+/**
+ * How a terminal numbers its legacy shifted F-keys (`CSI 25~` and up): `vt220` (F13 = Shift+F1),
+ * `rxvt` (rxvt, urxvt, the Linux console: F11 = Shift+F1), `apple` (macOS Terminal.app: Shift+F5 is
+ * `CSI 25~`), `modern` (the terminal only sends the xterm forms; legacy numbers mean nothing).
+ */
+export type LegacyProfile = 'vt220' | 'rxvt' | 'apple' | 'modern'
+
+export const LEGACY_PROFILES: LegacyProfile[] = ['vt220', 'rxvt', 'apple', 'modern']
+
+/** The `CSI n ~` number of F1..F12. */
+const TILDE_CODE = [0, 11, 12, 13, 14, 15, 17, 18, 19, 20, 21, 23, 24]
+const TILDE_TO_N: Record<number, number> = Object.fromEntries(TILDE_CODE.map((code, n) => [code, n]).filter(([, n]) => n > 0))
+const LETTER_TO_N: Record<string, number> = { P: 1, Q: 2, R: 3, S: 4 }
+const LINUX_TO_N: Record<string, number> = { A: 1, B: 2, C: 3, D: 4, E: 5 }
+/** kitty's private-use code points for F1..F12 (F13 and up are real keys of their own). */
+const KITTY_F1 = 57364
+
+/** Legacy numbers (no modifier) that stand for Shift+F-keys, per profile. */
+const LEGACY_SHIFT: Record<LegacyProfile, Record<number, number>> = {
+  vt220: { 25: 1, 26: 2, 28: 3, 29: 4, 31: 5, 32: 6, 33: 7, 34: 8 },
+  rxvt: { 25: 3, 26: 4, 28: 5, 29: 6, 31: 7, 32: 8, 33: 9, 34: 10 },
+  apple: { 25: 5, 26: 6, 28: 7, 29: 8, 31: 9, 32: 10, 33: 11, 34: 12 },
+  modern: {},
+}
+
+/** The profile for this terminal: QQQ_FKEYS overrides; otherwise from TERM_PROGRAM, TERM and friends. */
+export function legacyProfile(env: NodeJS.ProcessEnv = process.env): LegacyProfile {
+  const forced = env.QQQ_FKEYS?.trim().toLowerCase()
+  if (forced && (LEGACY_PROFILES as string[]).includes(forced)) return forced as LegacyProfile
+  const program = env.TERM_PROGRAM ?? ''
+  const term = env.TERM ?? ''
+  if (program === 'Apple_Terminal') return 'apple'
+  // tmux re-encodes the keys it knows in the xterm forms; Windows Terminal sends CSI 29~ for the Menu key
+  if (env.TMUX || env.WT_SESSION || /^(iTerm\.app|WezTerm|ghostty|vscode|tmux)$/.test(program) || /kitty|ghostty|alacritty|foot/.test(term)) return 'modern'
+  if (/^(rxvt|linux)/.test(term)) return 'rxvt'
+  return 'vt220'
+}
+
+function modifiers(m: number): Pick<FKeyChord, 'shift' | 'ctrl' | 'alt'> {
+  const bits = Math.max(0, m - 1)
+  return { shift: Boolean(bits & 1), alt: Boolean(bits & 2), ctrl: Boolean(bits & 4) }
+}
+
+/** `m` or `m:event` → modifier number and whether it is a kitty release. */
+function modParam(p: string | undefined): { m: number; release: boolean } {
+  if (!p) return { m: 1, release: false }
+  const [m, event] = p.split(':')
+  return { m: Number(m) || 1, release: event === '3' }
+}
+
+function chord(n: number, m: number, release = false, alt = false): FKeyChord | undefined {
+  if (!(n >= 1 && n <= 12)) return undefined
+  const mods = modifiers(m)
+  const out: FKeyChord = { n, ...mods, alt: mods.alt || alt }
+  if (release) out.release = true
+  return out
+}
+
+/** Reads one whole sequence; undefined when it is not a function key. */
+export function decodeFKey(seq: string, profile: LegacyProfile = 'vt220'): { chord: FKeyChord; family: FKeyFamily } | undefined {
+  // an extra ESC in front is Alt (meta) on terminals that send it that way
+  let s = seq
+  let alt = false
+  if (s.startsWith('\x1b\x1b')) {
+    alt = true
+    s = s.slice(1)
+  }
+  let m: RegExpExecArray | null
+  if ((m = /^\x1bO(\d*)([PQRS])$/.exec(s))) {
+    const c = chord(LETTER_TO_N[m[2]!]!, Number(m[1]) || 1, false, alt)
+    return c && { chord: c, family: 'ss3' }
+  }
+  if ((m = /^\x1b\[(?:1;)?(\d+(?::\d+)?)?([PQRS])$/.exec(s))) {
+    const { m: mod, release } = modParam(m[1])
+    const c = chord(LETTER_TO_N[m[2]!]!, mod, release, alt)
+    return c && { chord: c, family: m[2] === 'R' ? 'csi-f3-cpr' : 'csi-letter' }
+  }
+  if ((m = /^\x1b\[(\d+)(?:;(\d+(?::\d+)?))?~$/.exec(s))) {
+    const code = Number(m[1])
+    const { m: mod, release } = modParam(m[2])
+    if (TILDE_TO_N[code]) {
+      const c = chord(TILDE_TO_N[code]!, mod, release, alt)
+      return c && { chord: c, family: 'csi-tilde' }
+    }
+    const shifted = LEGACY_SHIFT[profile][code]
+    if (shifted && !m[2]) {
+      const c = chord(shifted, 2, false, alt)
+      return c && { chord: c, family: 'legacy-number' }
+    }
+    return undefined
+  }
+  if ((m = /^\x1b\[(\d+)([$^@])$/.exec(s))) {
+    // rxvt: $ Shift, ^ Ctrl, @ Ctrl+Shift; 25..34 are the shifted F3..F10 there
+    const code = Number(m[1])
+    const suffix = m[2]!
+    const base = TILDE_TO_N[code] ?? LEGACY_SHIFT.rxvt[code]
+    if (!base) return undefined
+    const shift = suffix !== '^' || LEGACY_SHIFT.rxvt[code] !== undefined
+    const ctrl = suffix !== '$'
+    const c = chord(base, 1 + (shift ? 1 : 0) + (ctrl ? 4 : 0), false, alt)
+    return c && { chord: c, family: 'rxvt-suffix' }
+  }
+  if ((m = /^\x1b\[(\d+)(?:;(\d+(?::\d+)?))?u$/.exec(s))) {
+    const { m: mod, release } = modParam(m[2])
+    const c = chord(Number(m[1]) - KITTY_F1 + 1, mod, release, alt)
+    return c && { chord: c, family: 'kitty-u' }
+  }
+  if ((m = /^\x1b\[\[([A-E])$/.exec(s))) {
+    const c = chord(LINUX_TO_N[m[1]!]!, 1, false, alt)
+    return c && { chord: c, family: 'linux-console' }
+  }
+  return undefined
+}
+
+/** `shift+f2`, `ctrl+f5`, `ctrl+shift+f1`, `alt+f3`, `f4`. */
+export function chordName(c: FKeyChord): string {
+  return `${c.ctrl ? 'ctrl+' : ''}${c.alt ? 'alt+' : ''}${c.shift ? 'shift+' : ''}f${c.n}`
+}
+
+/** The canonical xterm form OpenTUI reads for every modifier: `CSI n;m ~`. */
+export function canonicalSequence(c: FKeyChord): string {
+  const m = 1 + (c.shift ? 1 : 0) + (c.alt ? 2 : 0) + (c.ctrl ? 4 : 0)
+  return `\x1b[${TILDE_CODE[c.n]}${m > 1 ? `;${m}` : ''}~`
+}
+
+/** Families OpenTUI 0.8 does not read (or reads as something else); these are rewritten. */
+const NEEDS_REWRITE = new Set<FKeyFamily>(['csi-f3-cpr', 'legacy-number', 'rxvt-suffix'])
+
+/**
+ * Rewrites the function-key sequences OpenTUI cannot read into the canonical form, leaving every
+ * other byte alone. `cpr` false leaves `CSI 1;m R` alone: during startup (and after a resume) those
+ * bytes are real cursor position reports that OpenTUI's capability probe is waiting for. A chunk
+ * inside a bracketed paste is never touched.
+ */
+export function rewriteFKeyInput(chunk: string, profile: LegacyProfile, options: { cpr: boolean }): string {
+  if (!chunk.includes('\x1b') || chunk.includes('\x1b[200~')) return chunk
+  return chunk.replace(/\x1b{1,2}\[(?:1;\d+R|\d+[~$^@])/g, (seq) => {
+    if (seq.endsWith('R') && !options.cpr) return seq
+    const found = decodeFKey(seq, profile)
+    if (!found || !NEEDS_REWRITE.has(found.family)) return seq
+    // Shift+F3 and friends only with a modifier: CSI 1;1R is always a cursor report
+    if (found.family === 'csi-f3-cpr' && !found.chord.shift && !found.chord.ctrl && !found.chord.alt) return seq
+    return canonicalSequence(found.chord)
+  })
+}
+
+/** The chord of a key event from OpenTUI (or a test), when it is a function key. */
+export function fkeyChord(key: Key, profile: LegacyProfile = 'vt220'): FKeyChord | undefined {
+  const named = /^f(\d{1,2})$/.exec(key.name)
+  if (named) {
+    const n = Number(named[1])
+    return n >= 1 && n <= 12 ? { n, shift: Boolean(key.shift), ctrl: Boolean(key.ctrl), alt: Boolean(key.meta) } : undefined
+  }
+  if (key.name && key.name !== 'menu') return undefined
+  return key.sequence?.startsWith('\x1b') ? decodeFKey(key.sequence, profile)?.chord : undefined
+}
+
+/**
+ * The key the store dispatches: Shift+F1…F12 (no Ctrl, no Alt) become `shift+f1`…`shift+f12` (the
+ * Shift bank); everything else is left as it is (Ctrl+F5 still acts as F5: no Ctrl bank yet).
+ */
+export function bankKey(key: Key, profile: LegacyProfile = 'vt220'): Key {
+  const c = fkeyChord(key, profile)
+  if (!c || c.release || !c.shift || c.ctrl || c.alt) return key
+  return { name: `shift+f${c.n}`, sequence: key.sequence ?? '', shift: true }
+}
+
+/** The Shift bank number of a dispatched key (`shift+f2` → 2), or undefined. */
+export function shiftNumber(key: Key): number | undefined {
+  const m = /^shift\+f(\d{1,2})$/.exec(key.name)
+  return m ? Number(m[1]) : undefined
+}

packages/tui/src/keys/shift-bank.ts

@@ -0,0 +1,140 @@
+/*
+ * Copyright 2026 QRun.IO, Inc.
+ * Licensed under the Apache License, Version 2.0 (see LICENSE).
+ */
+
+/**
+ * The Shift bank: Shift+F1…F10, a second row of ten function keys (like Norton Commander's Shift
+ * bar). The assignments are this one table; each key names an action (actions.ts), so changing a key
+ * is changing a row here. Like the primary bar, a key that does not apply on the screen is dimmed
+ * and pressing it says why.
+ */
+
+import { readConfig, writeConfig } from '@qrun-io/qqq-core'
+import type { AppStore } from '../store'
+import { ACTIONS, runAction, type ActionName, type NamedAction } from './actions'
+
+export interface ShiftKey {
+  n: number
+  /** The bar label (and the help's). */
+  label: string
+  /** At most 5 characters, for narrow terminals. */
+  short: string
+  action: ActionName
+  /** What it does, for the `?` help. */
+  help: string
+}
+
+export const SHIFT_BANK: ShiftKey[] = [
+  { n: 1, label: 'Keys', short: 'Keys', action: 'help.keys', help: 'Keys: this reference (as ?)' },
+  { n: 2, label: 'Servers', short: 'Servr', action: 'servers', help: 'Servers dialog (as Ctrl+O)' },
+  { n: 3, label: 'SQL', short: 'SQL', action: 'sql.open', help: 'SQL Runner' },
+  { n: 4, label: 'Bulk', short: 'Bulk', action: 'grid.bulk', help: 'Bulk actions on the grid (as b)' },
+  { n: 5, label: 'Metadata', short: 'Meta', action: 'meta.refresh', help: 'Refresh the metadata' },
+  { n: 6, label: 'Views', short: 'Views', action: 'grid.views', help: 'Saved views of the grid' },
+  { n: 7, label: 'Copy', short: 'Copy', action: 'record.copy', help: 'Copy into a new record (as c)' },
+  { n: 8, label: 'Export', short: 'Exprt', action: 'export', help: 'Export the grid (as x)' },
+  { n: 9, label: 'History', short: 'Hist', action: 'history', help: 'History screen' },
+  { n: 10, label: 'Assistant', short: 'Asst', action: 'assistant.toggle', help: 'Assistant panel (as F12, Ctrl+G)' },
+]
+
+/** The bank key for a number, if bound. */
+export function shiftKey(n: number): ShiftKey | undefined {
+  return SHIFT_BANK.find((k) => k.n === n)
+}
+
+/** One slot of the Shift row as drawn: a label, or null where the key does nothing here (dimmed). */
+export interface ShiftSlot {
+  n: number
+  label: string | null
+  global: string
+  short: string
+  why?: string
+}
+
+/**
+ * The Shift row for the current screen, `slots` keys wide (the primary row's count, so both rows line
+ * up; unbound keys are blank).
+ */
+export function shiftSlots(store: AppStore, slots = 10): ShiftSlot[] {
+  const out: ShiftSlot[] = []
+  for (let n = 1; n <= Math.max(10, slots); n++) {
+    const k = shiftKey(n)
+    if (!k) {
+      out.push({ n, label: null, global: '', short: '' })
+      continue
+    }
+    const action: NamedAction = ACTIONS[k.action]
+    let why: string | undefined
+    try {
+      why = action.unavailable(store)
+    } catch {
+      why = 'not available'
+    }
+    out.push({ n, label: why ? null : k.label, global: k.label, short: k.short, why })
+  }
+  return out
+}
+
+/** Shift+Fn pressed: runs its action (or says why not) and, in one-row mode, shows the Shift row for a moment. */
+export function runShiftKey(store: AppStore, n: number): void {
+  store.showShiftRow(SHIFT_ROW_MS)
+  const k = shiftKey(n)
+  if (!k) return store.flash(`Shift+F${n} does nothing`)
+  runAction(store, k.action, `Shift+F${n} ${k.label}`)
+}
+
+/** The keys for the `?` help's Shift bank group. */
+export function shiftBankHelp(store: AppStore): Array<[string, string]> {
+  return shiftSlots(store).filter((s) => shiftKey(s.n)).map((s) => {
+    const k = shiftKey(s.n)!
+    return [`Shift+F${s.n}`, `${k.help}${s.why ? ' · not here' : ''}`]
+  })
+}
+
+// ---- the F-key bar setting ----
+
+export type FKeyBarMode = 'one' | 'two' | 'auto'
+export const FKEY_BAR_MODES: FKeyBarMode[] = ['auto', 'one', 'two']
+/** From this height `auto` draws both rows. */
+export const TWO_ROW_MIN_HEIGHT = 30
+/** How long one-row mode shows the Shift row after a Shift+F press. */
+export const SHIFT_ROW_MS = 2000
+
+export function readFKeyBar(env: NodeJS.ProcessEnv = process.env): FKeyBarMode {
+  try {
+    const v = readConfig(env).ui?.fkeyBar
+    return v === 'one' || v === 'two' ? v : 'auto'
+  } catch {
+    return 'auto'
+  }
+}
+
+export function writeFKeyBar(mode: FKeyBarMode, env: NodeJS.ProcessEnv = process.env): void {
+  const config = readConfig(env)
+  config.ui = { ...config.ui, fkeyBar: mode }
+  writeConfig(config, env)
+}
+
+/** Settings › F-key bar and `:fkeys one|two|auto`: applies now and saves it. */
+export function setFKeyBar(store: AppStore, mode: FKeyBarMode): void {
+  store.settings.fkeyBar = mode
+  store.bump()
+  try {
+    writeFKeyBar(mode)
+  } catch (e) {
+    return store.error(e)
+  }
+  store.flash(`F-key bar: ${describeFKeyBar(mode)} (saved)`)
+}
+
+export function describeFKeyBar(mode: FKeyBarMode): string {
+  return mode === 'one' ? 'one row (Shift row for 2 s after Shift+F)' : mode === 'two' ? 'two rows' : `auto (two rows from ${TWO_ROW_MIN_HEIGHT} lines)`
+}
+
+/** How many rows the bar takes at this terminal height. */
+export function fkeyBarRows(mode: FKeyBarMode | undefined, height: number): 1 | 2 {
+  if (mode === 'two') return 2
+  if (mode === 'one') return 1
+  return height >= TWO_ROW_MIN_HEIGHT ? 2 : 1
+}

packages/tui/src/keys/shift-row.tsx

@@ -0,0 +1,70 @@
+/*
+ * Copyright 2026 QRun.IO, Inc.
+ * Licensed under the Apache License, Version 2.0 (see LICENSE).
+ */
+
+/**
+ * The Shift row of the F-key bar: under the primary row when the bar has two rows, or in its place
+ * for a moment after a Shift+F press in one-row mode. It uses the primary row's arithmetic (mouse/hit.ts
+ * fkeyAt), so the keys line up and a click hits the key drawn there; the first number carries the ⇧.
+ */
+
+import type { AppStore } from '../store'
+import { fkeyAt } from '../mouse/hit'
+import { key } from '../mouse/keys'
+import { Zone } from '../mouse/zone'
+import { glyphs, theme } from '../theme'
+import { pad } from '../util/text'
+import { fkeyBarRows, shiftSlots, type ShiftSlot } from './shift-bank'
+
+/** The cells of each slot, as the primary row lays them out: max(7, width / count), the last takes the rest. */
+export function slotWidths(width: number, count: number): number[] {
+  const cell = Math.max(7, Math.floor(width / count))
+  const out: number[] = []
+  let used = 0
+  for (let i = 0; i < count; i++) {
+    const w = i === count - 1 ? Math.max(0, width - used) : cell
+    out.push(w)
+    used += w
+  }
+  return out
+}
+
+/** The text of each slot (number, then the label padded to the slot), clipped to the width. */
+export function shiftRowCells(slots: ShiftSlot[], width: number, ascii = false): Array<{ n: number; num: string; label: string; active: boolean }> {
+  const widths = slotWidths(width, slots.length)
+  const narrow = width < 100
+  return slots.map((s, i) => {
+    const w = widths[i]!
+    const num = i === 0 ? `${ascii ? 'S' : '⇧'}${s.n}` : String(s.n).padStart(2)
+    const base = s.label ?? s.global
+    const label = narrow || base.length > w - 2 ? s.short : base
+    return { n: s.n, num: num.slice(0, w), label: pad(label, Math.max(0, w - 2)).slice(0, Math.max(0, w - 2)), active: s.label !== null }
+  })
+}
+
+export function ShiftRow({ store, width, slots }: { store: AppStore; width: number; slots: number }) {
+  const t = theme()
+  const shift = shiftSlots(store, slots)
+  const cells = shiftRowCells(shift, width, glyphs().border !== undefined)
+  return (
+    <Zone global onClick={(e) => {
+      const n = fkeyAt(e.x, width, shift.map((s) => s.n))
+      if (n !== undefined) store.handleKey(key(`shift+f${n}`, { shift: true }))
+    }}>
+      <text flexShrink={0} wrapMode="none">
+        {cells.map((c) => (
+          <span key={c.n}>
+            <span fg={t.keyNum}>{c.num}</span>
+            <span fg={c.active ? t.keyLabelFg : t.dim} bg={c.active ? t.keyLabelBg : undefined}>{c.label}</span>
+          </span>
+        ))}
+      </text>
+    </Zone>
+  )
+}
+
+/** How many rows the bar takes now (the body is that much shorter). */
+export function barRows(store: AppStore, height: number): 1 | 2 {
+  return fkeyBarRows(store.settings.fkeyBar, height)
+}

packages/tui/src/keys/stdin-rewrite.ts

@@ -0,0 +1,44 @@
+/*
+ * Copyright 2026 QRun.IO, Inc.
+ * Licensed under the Apache License, Version 2.0 (see LICENSE).
+ */
+
+/**
+ * Feeds the renderer canonical function-key sequences: every `data` chunk of the input stream goes
+ * through rewriteFKeyInput before any listener (OpenTUI's stdin parser) sees it. OpenTUI's own input
+ * handlers run after its parser, which already took Shift+F3 for a cursor report, so the bytes are
+ * rewritten on the stream itself.
+ */
+
+import { rewriteFKeyInput, type LegacyProfile } from './fkeys'
+
+/** Cursor reports are expected for this long after start and after a resume (the capability probe). */
+export const CPR_QUIET_MS = 1500
+
+export interface FKeyRewrite {
+  /** Call after renderer.resume(): the probe runs again, so CSI 1;m R is a cursor report for a while. */
+  quiet(): void
+  /** Restores the stream. */
+  dispose(): void
+}
+
+export function installFKeyRewrite(stream: NodeJS.EventEmitter, profile: LegacyProfile, clock: () => number = Date.now): FKeyRewrite {
+  const original = stream.emit
+  let quietUntil = clock() + CPR_QUIET_MS
+  const patched = function (this: NodeJS.EventEmitter, event: string | symbol, ...args: unknown[]): boolean {
+    if (event === 'data' && args.length) {
+      const chunk = args[0]
+      const text = typeof chunk === 'string' ? chunk : Buffer.isBuffer(chunk) ? chunk.toString('latin1') : undefined
+      if (text !== undefined && text.includes('\x1b')) {
+        const out = rewriteFKeyInput(text, profile, { cpr: clock() >= quietUntil })
+        if (out !== text) args[0] = typeof chunk === 'string' ? out : Buffer.from(out, 'latin1')
+      }
+    }
+    return original.call(this, event, ...args)
+  }
+  stream.emit = patched as typeof stream.emit
+  return {
+    quiet: () => { quietUntil = clock() + CPR_QUIET_MS },
+    dispose: () => { if (stream.emit === patched) stream.emit = original },
+  }
+}

packages/tui/src/main.tsx

@@ -19,6 +19,8 @@ import { App } from './app'
 import { boot, parseArgs } from './boot'
 import { runDoctor } from './doctor'
 import { isShutdownNoise, quietShutdownNoise } from './exit'
+import { legacyProfile } from './keys/fkeys'
+import { installFKeyRewrite } from './keys/stdin-rewrite'
 
 const args = parseArgs(process.argv.slice(2))
 if (args.check === 'full') {
@@ -49,6 +51,10 @@ const renderer = await createCliRenderer({
   targetFps: 30,
 })
 
+// Shift+F3 (CSI 1;2R, which OpenTUI takes for a cursor report) and the legacy and rxvt Shift/Ctrl+F
+// forms reach OpenTUI as the canonical CSI n;m ~ (keys/fkeys.ts)
+const fkeyRewrite = installFKeyRewrite(process.stdin, legacyProfile())
+
 let destroyed = false
 function restore(): void {
   if (destroyed) return
@@ -71,8 +77,14 @@ renderer.on('destroy', () => {
   setTimeout(() => process.exit(0), 10)
 })
 
+// a line for the normal screen once the alternate screen is gone (the picker closed without a choice)
+let exitHint: string | undefined
+process.on('exit', () => {
+  if (exitHint) process.stderr.write(`${exitHint}\n`)
+})
+
 // QQQ_UI_NO_QUIT=1 (the soak test): quitting from a menu is ignored, so only a crash ends the program
-const store = boot({ args, quit: process.env.QQQ_UI_NO_QUIT === '1' ? () => store.flash('quit is off (QQQ_UI_NO_QUIT)') : restore, build: process.env.QQQ_UI_BUILD ?? 'dev', timers: true })
+const store = boot({ args, quit: process.env.QQQ_UI_NO_QUIT === '1' ? () => store.flash('quit is off (QQQ_UI_NO_QUIT)') : restore, build: process.env.QQQ_UI_BUILD ?? 'dev', timers: true, hint: (text) => { exitHint = text } })
 process.on('unhandledRejection', (reason) => {
   if (destroyed && isShutdownNoise([reason])) return
   store.error(reason)
@@ -93,7 +105,10 @@ store.editExternal = async (text: string) => {
     spawnSync(editor, [file], { stdio: 'inherit', shell: process.platform === 'win32' })
     return readFileSync(file, 'utf8')
   } finally {
+    // the resume probes the terminal again: its cursor reports are not Shift+F3
+    fkeyRewrite.quiet()
     await renderer.resume()
+    fkeyRewrite.quiet()
     rmSync(dir, { recursive: true, force: true })
   }
 }

packages/tui/src/overlays/center.tsx

@@ -169,6 +169,9 @@ export class HelpOverlay implements Overlay {
   readonly id = overlayId('help')
   top = 0
 
+  /** Key groups shown after the screen's help (the Shift bank), before the mouse. */
+  after: KeyGroup[] = []
+
   constructor(private store: AppStore, readonly groups: KeyGroup[], readonly topicHelp: string[], readonly pointer = HELP_POINTER) {}
 
   onKey(key: Key): void {
@@ -190,6 +193,7 @@ export class HelpOverlay implements Overlay {
       body.push({ text: ' About this screen', fg: t.acc })
       for (const p of this.topicHelp) for (const l of wrap(p, inner - 4)) body.push({ text: `   ${l}` })
     }
+    if (this.after.length) this.keyLines(this.after, body, half)
     if (this.store.settings.mouse) this.keyLines([MOUSE_KEYS], body, half)
     return body
   }

packages/tui/src/overlays/saver.tsx

@@ -72,6 +72,11 @@ export class SaverOverlay implements Overlay {
       features: s.version?.features ?? [],
       status: () => s.status,
       events: realtimeEvents,
+      sessionTable: () => {
+        // the session store qbit's table (storedSession)
+        const t = Object.values(tables).find((x) => /^(stored_?)?sessions?$/i.test(x.name))
+        return t && t.readPermission !== false ? t.name : undefined
+      },
       favouriteTables: favourites,
       tableLabel: (name) => tables[name]?.label ?? name,
       intervalMs: () => this.model.intervalMs,

packages/tui/src/overlays/servers.tsx

@@ -33,6 +33,21 @@ function hint(tokens: KeyToken[], width: number): string {
 /** Command keys while the filter is empty; any other character starts the filter (/ starts it too). */
 const COMMAND_KEYS = new Set(['n', 'e', 'd', '*', 'r', '/'])
 
+/** The dialog as the start-up profile picker (over the splash): its title, Enter and Esc, the preselected row. */
+export interface ServersOverlayOptions {
+  title?: string
+  /** The Enter hint (`Enter connects`). */
+  enterLabel?: string
+  /** The Esc hint (`Esc quits`). */
+  escLabel?: string
+  /** Esc with an empty filter: instead of closing. */
+  onEscape?: () => void
+  /** The profile the cursor starts on (else the one in use). */
+  select?: string
+  /** The frame's first row for a screen height (below the splash's header), and only as tall as its rows need. */
+  top?: (screenHeight: number) => number
+}
+
 export class ServersOverlay implements Overlay {
   readonly id = overlayId('servers')
   readonly filter = new LineEditor('')
@@ -45,9 +60,9 @@ export class ServersOverlay implements Overlay {
   /** `/` was pressed: every character goes to the filter. */
   private filtering = false
 
-  constructor(private store: AppStore, private switchTo: (row: ServerRow) => void, model?: ServersModel) {
+  constructor(private store: AppStore, private switchTo: (row: ServerRow) => void, model?: ServersModel, readonly options: ServersOverlayOptions = {}) {
     this.model = model ?? new ServersModel({ current: store.target?.name, secrets: store.signInDeps?.secrets, probe: (server) => probeServer(server, { fetch: store.signInDeps?.fetch }), onChange: () => store.bump() })
-    const at = this.model.rows.findIndex((r) => r.isCurrent)
+    const at = options.select !== undefined && this.model.rows.some((r) => r.name === options.select) ? this.model.rows.findIndex((r) => r.name === options.select) : this.model.rows.findIndex((r) => r.isCurrent)
     this.index = Math.max(0, at)
     void this.model.probeAll()
     void this.model.readSignIns()
@@ -81,7 +96,8 @@ export class ServersOverlay implements Overlay {
         this.filter.set('')
         this.filtering = false
         this.index = 0
-      } else this.store.closeOverlay(this)
+      } else if (this.options.onEscape) this.options.onEscape()
+      else this.store.closeOverlay(this)
     } else if (key.name === 'down') this.index = Math.min(Math.max(0, list.length - 1), this.index + 1)
     else if (key.name === 'up') this.index = Math.max(0, this.index - 1)
     else if (key.name === 'pagedown') this.index = Math.min(Math.max(0, list.length - 1), this.index + 5)
@@ -152,7 +168,9 @@ export class ServersOverlay implements Overlay {
     const t = theme()
     const g = glyphs()
     const width = Math.max(30, Math.min(sw - 2, 120))
-    const height = Math.max(10, Math.min(sh - 2, 30))
+    const top = this.options.top ? this.options.top(sh) : 1
+    // under the splash header: as tall as the profiles need, else up to the screen's foot
+    const height = this.options.top ? Math.max(10, Math.min(sh - top - 1, 30, this.model.rows.length * 2 + 6)) : Math.max(10, Math.min(sh - 2, 30))
     const inner = width - 2
     const list = this.list()
     if (this.index >= list.length) this.index = Math.max(0, list.length - 1)
@@ -186,12 +204,13 @@ export class ServersOverlay implements Overlay {
     const more = list.length > visibleRows ? ` ${this.scroll > 0 ? g.up : ' '}${this.scroll + visibleRows < list.length ? g.down : ' '}` : ''
     const header = `    ${pad('Name', nameW)}${pad('Short', shortW)}${pad('Server', serverW)}${pad('Status', statusW)}${pad('Last used', lastW)}`
     const commands = !this.filter.value && !this.filtering
+    const enter = this.options.enterLabel ?? 'Enter switches'
     const keys = commands
-      ? [{ text: 'Enter switches' }, { text: 'n add' }, { text: 'e edit' }, { text: 'd remove', drop: 1 }, { text: '* default', drop: 1 }, { text: 'r probe', drop: 3 }, { text: 'type to filter', drop: 2 }, { text: 'Esc closes' }]
-      : [{ text: `${list.length} of ${this.model.rows.length}` }, { text: 'Enter switches' }, { text: 'F7 add', drop: 2 }, { text: 'F4 edit', drop: 2 }, { text: 'F8 remove', drop: 3 }, { text: 'Esc clears' }]
+      ? [{ text: enter }, { text: 'n add' }, { text: 'e edit' }, { text: 'd remove', drop: 1 }, { text: '* default', drop: 1 }, { text: 'r probe', drop: 3 }, { text: 'type to filter', drop: 2 }, { text: this.options.escLabel ?? 'Esc closes' }]
+      : [{ text: `${list.length} of ${this.model.rows.length}` }, { text: enter }, { text: 'F7 add', drop: 2 }, { text: 'F4 edit', drop: 2 }, { text: 'F8 remove', drop: 3 }, { text: 'Esc clears' }]
     const legend = `* default  ${g.mark} in use`
     return (
-      <Frame title="Servers  (Ctrl+O)" width={width} height={height} screenWidth={sw} screenHeight={sh} top={1}>
+      <Frame title={this.options.title ?? 'Servers  (Ctrl+O)'} width={width} height={height} screenWidth={sw} screenHeight={sh} top={top}>
         <box paddingLeft={1}><EditorLine editor={this.filter} width={inner - 2} focused={!commands || undefined} placeholder="type to filter by name, short name, description or server · / then any letter" /></box>
         <Line text={pad(header, inner - more.length) + more} width={inner} fg={t.acc} />
         {lines}

packages/tui/src/presence.ts

@@ -20,6 +20,24 @@ export interface PresencePerson {
   /** VIEWING or EDITING (the server's mode), and the field being edited when it says. */
   mode?: string
   fieldName?: string | null
+  /** Live connections (tabs, terminals) of this person; absent or 1 before collaboration 1.2.0. */
+  connections?: number
+  /** Each connection's mode, field and start when the server sends them (collaboration 1.2.0). */
+  terminals?: PresenceTerminal[]
+}
+
+/** One connection of a person: what that tab or terminal does. */
+export interface PresenceTerminal {
+  mode?: string
+  fieldName?: string | null
+  since?: string
+  /** This terminal. */
+  self?: boolean
+}
+
+/** ` ×2` after a person with more than one connection. */
+export function timesText(p: { connections?: number }): string {
+  return p.connections && p.connections > 1 ? ` ×${p.connections}` : ''
 }
 
 export interface Presence {
@@ -64,7 +82,7 @@ export function usePresence(scope: string | undefined): Presence {
 /** Title-bar text for presence, empty when nobody else is there. */
 export function presenceText(p: Presence): string {
   if (!p.count) return ''
-  const names = p.people.slice(0, 3).map((x) => x.name).join(', ')
+  const names = p.people.slice(0, 3).map((x) => `${x.name}${timesText(x)}`).join(', ')
   return `${p.count} other${p.count === 1 ? '' : 's'} viewing${names ? `: ${names}${p.count > 3 ? ', …' : ''}` : ''}`
 }
 
@@ -94,8 +112,13 @@ export function collaborationPresence(registry: ExtensionRegistry, client: TuiCl
       const entry: { scope: string; handle?: PresenceHandle; value: Presence } = { scope, value: NONE }
       current = entry
       collab.joinPresence(kind === 'record' ? { table, pk: pk.join(':') } : { table }, {
+        perConnection: true,
         onChange: (state) => {
-          const everyone = state.people.map((p) => ({ name: p.name, since: p.since.toISOString(), mode: p.mode, fieldName: p.fieldName, self: p.name === selfName }))
+          const everyone = state.people.map((p) => ({
+            name: p.name, since: p.since.toISOString(), mode: p.mode, fieldName: p.fieldName, self: p.name === selfName,
+            ...(p.connections && p.connections > 1 ? { connections: p.connections } : {}),
+            ...(p.leases?.length ? { terminals: p.leases.map((l) => ({ mode: l.mode, fieldName: l.fieldName, since: l.since?.toISOString(), ...(l.self ? { self: true } : {}) })) } : {}),
+          }))
           const people = everyone.filter((p) => !p.self).map(({ self: _self, ...person }) => person)
           entry.value = { count: people.length, people, everyone }
           notify()

packages/tui/src/printing.ts

@@ -17,12 +17,16 @@
  */
 
 import { writeFileSync } from 'node:fs'
-import { exportFileName, FAILED_JOB_STATES, MAX_LIST_ROWS, Printing, canPrintLists, isFinalJobState, listScopeChoices, readRememberedPrinter, resolvePrinter, runProcess, tableHasPrint, whyNotPrintable, writeRememberedPrinter, type ListScope, type Printer, type PrintJob, type PrintOutcome, type ProcessMeta } from '@qrun-io/qqq-core'
+import { dirname, join } from 'node:path'
+import { canSaveAsPdf, downloadProcessFile, formatDateValue, profileNameForServer, readConfig, saveDownload, type ContentSection, type PrintChrome, type RenderRequest, exportFileName, FAILED_JOB_STATES, MAX_LIST_ROWS, Printing, canPrintLists, isFinalJobState, listScopeChoices, readRememberedPrinter, resolvePrinter, runProcess, tableHasPrint, whyNotPrintable, writeRememberedPrinter, type ListScope, type Printer, type PrintJob, type PrintOutcome, type ProcessMeta } from '@qrun-io/qqq-core'
 import { ChoiceOverlay, type Choice } from './overlays/basic'
 import type { AppStore } from './store'
 import type { Screen } from './types'
 import { errorText } from './util/text'
 import { saveFile } from './overlays/files-helpers'
+import { breadcrumbs } from './breadcrumbs'
+import { dateSettingsFor } from './controls/date-settings'
+import { CLI_VERSION } from '@qrun-io/qqq-cli/program'
 import { history } from './history/record'
 
 /** The printing module of the store's server, or undefined without a client or the extension. */
@@ -35,6 +39,7 @@ export function printingOf(store: AppStore): Printing | undefined {
       const meta = await client.processMeta(processName) as unknown as ProcessMeta
       return (await runProcess({ baseUrl: client.server, fetch: client.fetch, meta, values, records: recordIds.length ? { ids: recordIds } : undefined, stepTimeoutMillis: 60000 })).values
     },
+    download: (reference) => downloadProcessFile(client.server, client.fetch, reference),
   })
 }
 
@@ -66,17 +71,26 @@ export function printerChoices(printers: Printer[], rememberedId: string | undef
   return { choices, initial: remembered >= 0 ? remembered : Math.max(0, firstPrintable) }
 }
 
+/** The first entry of the printer picker when the server can render to a PDF download. */
+export const SAVE_AS_PDF = 'Save as PDF…'
+
 /**
- * The printer picker: printable printers first, the last used one on this profile preselected.
- * With `hint` (`:print <printer>`) the printer is chosen by name, id or unique prefix without the
- * picker. The choice is remembered for the profile, then `send` queues the print.
+ * The printer picker: "Save as PDF…" first (when the server can render to a download and the
+ * caller says what to render), then the printers, printable ones first, the last used one on this
+ * profile preselected. With `hint` (`:print <printer>`) the printer is chosen by name, id or unique
+ * prefix without the picker; `:print pdf` saves. A printer choice is remembered for the profile,
+ * then `send` queues the print.
  */
-export function pickPrinter(store: AppStore, title: string, send: (printing: Printing, printer: Printer) => void, hint?: string): void {
+export function pickPrinter(store: AppStore, title: string, send: (printing: Printing, printer: Printer) => void, hint?: string, renders?: RenderRequest[]): void {
   const printing = printingOf(store)
   if (!printing) return store.flash(`Printing needs ${store.client ? 'the printing extension' : 'a server connection'}.`, 'error')
+  const canSave = Boolean(renders?.length) && canSaveAsPdf(store.meta as never)
+  if (hint && /^(pdf|file)$/i.test(hint.trim())) {
+    return canSave ? savePdfs(store, printing, renders!) : store.flash('This server cannot render to PDF (it needs the printingRenderToPdf process of qbit-printing).', 'error')
+  }
   const profile = store.status.profile
   store.run(printing.printers(), (printers) => {
-    if (!printers.length) return store.message('No printers: no print agent has exposed a printer to this server yet.', 'info', 'Print')
+    if (!printers.length && !canSave) return store.message('No printers: no print agent has exposed a printer to this server yet.', 'info', 'Print')
     const go = (printer: Printer) => {
       writeRememberedPrinter(profile, { id: printer.id, name: printer.name })
       send(printing, printer)
@@ -92,7 +106,44 @@ export function pickPrinter(store: AppStore, title: string, send: (printing: Pri
       return why ? store.flash(`"${printer.name}" cannot print now: ${why}.`, 'error') : go(printer)
     }
     const { choices, initial } = printerChoices(printers, readRememberedPrinter(profile)?.id)
-    store.open(new ChoiceOverlay<Printer>(store, title, choices, go, 'printers that cannot print now are shown with the reason; the choice is remembered for this profile', initial))
+    const anyPrintable = choices.some((c) => !c.disabled)
+    const all: Choice<Printer | 'pdf'>[] = [
+      ...(canSave ? [{ label: SAVE_AS_PDF, value: 'pdf' as const, detail: 'render it and save it like a download: download folder, file dialog' }] : []),
+      ...choices,
+    ]
+    const first = canSave && !anyPrintable ? 0 : initial + (canSave ? 1 : 0)
+    store.open(new ChoiceOverlay<Printer | 'pdf'>(store, title, all, (choice) => (choice === 'pdf' ? savePdfs(store, printing, renders!) : go(choice)),
+      'Save as PDF saves where downloads go; printers that cannot print now are shown with the reason; the printer is remembered for this profile', first))
+  })
+}
+
+/**
+ * Save as PDF: renders each document on the server and saves it as downloads and exports are
+ * saved: the save dialog (or, with silent downloads, the download folder), the stamped default
+ * name (`Customer-Ada-Lovelace_2026-11-01_120301.pdf`), no silent overwrite. More than one
+ * document go next to the first, each with its own stamped name.
+ */
+export function savePdfs(store: AppStore, printing: Printing, renders: RenderRequest[]): void {
+  store.flash(`Rendering ${renders.length === 1 ? 'the PDF' : `${renders.length} PDFs`}…`)
+  const chrome = chromeOf(store)
+  store.run(printing.renderToPdf(renders[0]!, new Date(), chrome), (first) => {
+    saveFile(store, renders.length === 1 ? 'Save as PDF' : `Save ${renders.length} PDFs (the others go next to this one)`, first.fileName, (path) => {
+      const saved = [saveDownload(path, first.bytes, { explicit: true })]
+      const notes = first.message ? [first.message] : []
+      const done = () => {
+        history.record(store, { kind: 'print', summary: `Saved ${saved.length === 1 ? saved[0] : `${saved.length} PDFs to ${dirname(saved[0]!)}`}` })
+        store.message([`Saved ${saved.length === 1 ? saved[0] : `${saved.length} PDFs to ${dirname(saved[0]!)}`} (${first.bytes.length.toLocaleString('en-US')} bytes${saved.length > 1 ? ' for the first' : ''}).`, ...notes].join('\n'), 'info', 'Save as PDF')
+      }
+      const rest = renders.slice(1)
+      if (!rest.length) return done()
+      store.run((async () => {
+        for (const request of rest) {
+          const pdf = await printing.renderToPdf(request, new Date(), chrome)
+          if (pdf.message) notes.push(pdf.message)
+          saved.push(saveDownload(join(dirname(path), pdf.fileName), pdf.bytes, { explicit: false }))
+        }
+      })(), done)
+    })
   })
 }
 
@@ -114,7 +165,7 @@ export function openPrintDialog(store: AppStore, table: string, ids: string[], w
   const unavailable = printUnavailable(store, table)
   if (!printingOf(store) || unavailable) return store.flash(`Print ${unavailable ?? 'needs a server connection'}.`, 'error')
   if (!ids.length) return store.flash('Nothing to print: select records first (Space).', 'error')
-  pickPrinter(store, `Print ${what} on…`, (printing, printer) => queued(store, printing, printer, what, printing.print({ table, ids, printer: printer.id }).then((jobIds) => ({ jobIds }))), hint)
+  pickPrinter(store, `Print ${what} on…`, (printing, printer) => queued(store, printing, printer, what, printing.print({ table, ids, printer: printer.id, chrome: chromeOf(store) }).then((jobIds) => ({ jobIds }))), hint, ids.map((id) => ({ kind: 'record' as const, table, id })))
 }
 
 // ---------------------------------------------------------------------------------------------
@@ -161,8 +212,8 @@ export function printTargetOf(screen: Screen | undefined): PrintTarget {
  * The text of the screen as drawn (the renderer's character frame), without the status line and
  * the function-key bar, trailing spaces and trailing blank lines removed.
  */
-export function captureScreenText(store: AppStore): string {
-  const frame = store.captureScreen?.() ?? ''
+export function captureScreenText(store: AppStore, captured?: string): string {
+  const frame = captured ?? store.captureScreen?.() ?? ''
   const lines = frame.replace(/\r/g, '').split('\n')
   while (lines.length && !lines[lines.length - 1]!.trim()) lines.pop()
   const body = lines.slice(0, Math.max(0, lines.length - 2)).map((l) => l.replace(/\s+$/, ''))
@@ -182,31 +233,198 @@ export function printScreen(store: AppStore, hint?: string): void {
   if (target.kind === 'record') {
     if (tableHasPrint(store.meta as never, target.table)) return openPrintDialog(store, target.table, target.ids, target.what, hint)
     if (!canPrintLists(store.meta as never)) return saveInstead(store, target)
-    return printText(store, target.what, hint)
+    return askWhat(store, target.what, hint)
   }
-  if (target.kind === 'text') return printText(store, target.title, hint)
+  if (target.kind === 'text') return askWhat(store, target.title, hint)
   const grid = target.grid
   const choices = listScopeChoices({ total: grid.total, pageIndex: grid.pageIndex, pageSize: grid.pageSize, pageRows: grid.pageRows, selected: grid.selected, filtered: Boolean(grid.filterText), recordSheets: tableHasPrint(store.meta as never, grid.table) })
   const scoped = (scope: ListScope) => {
     if (scope.kind === 'sheets') return openPrintDialog(store, grid.table, scope.ids, `${scope.ids.length} ${grid.label} records`, hint)
     const what = scope.kind === 'all' ? `${grid.label}: ${grid.total === undefined ? 'all' : Math.min(grid.total, MAX_LIST_ROWS).toLocaleString('en-US')} rows` : scope.kind === 'page' ? `${grid.label}: page ${grid.pageIndex + 1}` : `${grid.label}: ${scope.ids.length} selected rows`
-    pickPrinter(store, `Print ${what} on…`, (p, printer) => queued(store, p, printer, what, p.printTableList({
+    const list = {
       table: grid.table, columns: grid.columns.map((c) => c.name), widths: grid.columns.every((c) => c.width) ? grid.columns.map((c) => c.width!) : undefined,
-      filter: grid.filter, scope, title: grid.label, filterDescription: grid.filterText || undefined, printer: printer.id, primaryKeyField: grid.primaryKeyField,
-    })), hint)
+      filter: grid.filter, scope, title: grid.label, filterDescription: grid.filterText || undefined, primaryKeyField: grid.primaryKeyField,
+    }
+    pickPrinter(store, `Print ${what} on…`, (p, printer) => queued(store, p, printer, what, p.printTableList({ ...list, printer: printer.id, chrome: chromeOf(store) })), hint, [{ kind: 'list', list }])
   }
   if (grid.selectAll) return scoped({ kind: 'all' })
   store.open(new ChoiceOverlay<ListScope>(store, `Print ${grid.label}: what?`, choices.map((c) => ({ label: c.label, value: c.value, detail: c.detail })), scoped, 'the table list uses the columns, filter and sort you see; the header repeats on every page'))
 }
 
 /** Prints the screen's text (monospace PDF). */
-function printText(store: AppStore, title: string, hint?: string): void {
-  const text = captureScreenText(store)
-  if (!text.trim()) return store.flash('There is nothing on the screen to print.', 'error')
-  const wide = text.split('\n').some((l) => l.length > 110)
-  pickPrinter(store, `Print this screen (${title}) on…`, (p, printer) => queued(store, p, printer, `screen ${title}`, p.printText({ title, subtitle: `qqq ui · ${store.status.server.replace(/^https?:\/\//, '')}`, text, printer: printer.id, orientation: wide ? 'LANDSCAPE' : 'PORTRAIT' })), hint)
+function printText(store: AppStore, title: string, text: string, sections?: ContentSection[], hint?: string): void {
+  const wide = !sections && text.split('\n').some((l) => l.length > 110)
+  const page = { title, text, sections, orientation: wide ? 'LANDSCAPE' as const : 'PORTRAIT' as const }
+  const chrome = chromeOf(store)
+  const what = sections ? `${title} (content)` : `screen ${title}`
+  pickPrinter(store, `Print ${sections ? 'the content of' : 'this screen'} (${title}) on…`, (p, printer) => queued(store, p, printer, what, p.printText({ ...page, printer: printer.id, chrome })), hint, [{ kind: 'text', ...page }])
 }
 
+// ---------------------------------------------------------------------------------------------
+// the app's header and footer, and a screen's content as sections
+// ---------------------------------------------------------------------------------------------
+
+/**
+ * The header and footer every printed page carries: the app (instance branding, else the
+ * profile), the breadcrumb of the screen, the server (profile and host), the user, the time in
+ * the profile's date format; the footer `qqq ui <version> · <server>` and, for grids, the filter.
+ */
+export function chromeOf(store: AppStore, footerNote?: string, now: Date = new Date()): PrintChrome {
+  const branding = (store.meta as { branding?: { appName?: string } } | undefined)?.branding
+  let host = store.status.server
+  try {
+    host = new URL(store.status.server).host
+  } catch {
+    host = store.status.server.replace(/^https?:\/\//, '')
+  }
+  const profile = store.status.profile
+  const server = profile && profile !== host && profile !== profileNameForServer(store.status.server) ? `${profile} (${host})` : host
+  let printedAt = now.toISOString()
+  try {
+    printedAt = formatDateValue(now.toISOString(), 'DATE_TIME', dateSettingsFor(store), { withSeconds: false })
+  } catch {
+    printedAt = now.toISOString()
+  }
+  return {
+    app: branding?.appName ?? profileNote(profile) ?? 'QQQ',
+    title: breadcrumbs(store).join(' › '),
+    server,
+    user: store.status.user,
+    printedAt,
+    footerLeft: `qqq ui ${CLI_VERSION} · ${server}`,
+    footerNote,
+  }
+}
+
+/** The profile's description (its note in config.json), if it has one. */
+function profileNote(profile: string): string | undefined {
+  try {
+    return readConfig().profiles[profile]?.note || undefined
+  } catch {
+    return undefined
+  }
+}
+
+const TOP_LEFT = new Set(['┌', '╭'])
+const TOP_RIGHT = new Set(['┐', '╮'])
+const BOTTOM_LEFT = new Set(['└', '╰'])
+const BOX = /[─│┌┐└┘├┤┬┴┼╭╮╰╯═║╔╗╚╝╟╢╠╣▏▕]/g
+
+interface Box { top: number; left: number; bottom: number; right: number; title: string }
+
+/** Boxes drawn with single lines in a character grid (their title from the top edge). */
+function boxesOf(grid: string[][]): Box[] {
+  const out: Box[] = []
+  for (let r = 0; r < grid.length; r++) {
+    const row = grid[r]!
+    for (let c = 0; c < row.length; c++) {
+      if (!TOP_LEFT.has(row[c]!)) continue
+      let right = -1
+      for (let x = c + 1; x < row.length; x++) {
+        if (TOP_RIGHT.has(row[x]!)) { right = x; break }
+        if (TOP_LEFT.has(row[x]!)) break
+      }
+      if (right < 0) continue
+      let bottom = -1
+      for (let y = r + 1; y <= grid.length; y++) {
+        // a panel cut off by the bottom of its region runs to the end
+        if (y === grid.length) { bottom = y; break }
+        const ch = grid[y]![c]
+        if (ch !== undefined && BOTTOM_LEFT.has(ch)) { bottom = y; break }
+        if (ch !== '│' && ch !== '║') { bottom = y; break }
+      }
+      if (bottom < 0) continue
+      const title = row.slice(c + 1, right).join('').replace(/^[─\s]+|[─\s]+$/g, '').trim()
+      out.push({ top: r, left: c, bottom, right, title })
+    }
+  }
+  return out
+}
+
+/** Text lines without box characters, trimmed; blank and border-only lines collapse. */
+function cleanLines(lines: string[]): string[] {
+  const out: string[] = []
+  for (const raw of lines) {
+    const line = raw.replace(BOX, ' ').replace(/\s+$/, '')
+    if (!line.trim()) {
+      if (out.length && out[out.length - 1] !== '') out.push('')
+      continue
+    }
+    out.push(line)
+  }
+  while (out.length && out[out.length - 1] === '') out.pop()
+  const indent = Math.min(...out.filter((l) => l.trim()).map((l) => l.length - l.trimStart().length))
+  return Number.isFinite(indent) && indent > 0 ? out.map((l) => l.slice(indent)) : out
+}
+
+/**
+ * A screen's content as sections, read from the drawn frame: the content panel only (not the
+ * Apps sidebar, the title bar, the status line or the key bar), each inner panel as a section
+ * with its title and lines, the text around them as untitled sections, in reading order, borders
+ * removed and the panel's key hint dropped.
+ */
+export function contentSections(frame: string): ContentSection[] {
+  const lines = frame.replace(/\r/g, '').split('\n')
+  while (lines.length && !lines[lines.length - 1]!.trim()) lines.pop()
+  const body = lines.slice(1, Math.max(1, lines.length - 2))
+  const grid = body.map((l) => Array.from(l))
+  // the Apps sidebar ("Apps (Tab)", "Apps · type to find") is navigation, not content
+  const boxes = boxesOf(grid).filter((b) => !/^Apps(\s+\(|\s+·|$)/.test(b.title))
+  if (!boxes.length) {
+    const text = cleanLines(body)
+    return text.length ? [{ title: '', lines: text }] : []
+  }
+  const area = (b: Box) => (b.bottom - b.top) * (b.right - b.left)
+  const panel = boxes.reduce((a, b) => (area(b) > area(a) ? b : a))
+  const inside = boxes.filter((b) => b !== panel && b.top > panel.top && b.bottom <= panel.bottom && b.left >= panel.left && b.right <= panel.right)
+  const children = inside.filter((b) => !inside.some((o) => o !== b && b.top > o.top && b.bottom < o.bottom && b.left > o.left && b.right < o.right))
+  const sections: ContentSection[] = []
+  let free: string[] = []
+  const flush = () => {
+    const text = cleanLines(free)
+    if (text.length) sections.push({ title: '', lines: text })
+    free = []
+  }
+  const freeRows: Array<{ row: number; text: string }> = []
+  for (let r = panel.top + 1; r < panel.bottom; r++) {
+    const cells = grid[r]!.slice(panel.left + 1, panel.right).map((ch, i) => (children.some((b) => r >= b.top && r <= b.bottom && panel.left + 1 + i >= b.left && panel.left + 1 + i <= b.right) ? ' ' : ch))
+    freeRows.push({ row: r, text: cells.join('') })
+  }
+  // the panel's last line is its key hint ("a actions · … · Esc back"): not content
+  const lastText = [...freeRows].reverse().find((f) => f.text.trim())
+  if (lastText && /(Esc|a actions| · )/.test(lastText.text) && /(Esc|actions|Enter)/.test(lastText.text)) lastText.text = ''
+  const starts = new Map<number, Box[]>()
+  for (const b of children) starts.set(b.top, [...(starts.get(b.top) ?? []), b].sort((x, y) => x.left - y.left))
+  for (const f of freeRows) {
+    const opening = starts.get(f.row)
+    if (opening) {
+      flush()
+      for (const b of opening) {
+        const text = cleanLines(grid.slice(b.top + 1, b.bottom).map((row) => row.slice(b.left + 1, b.right).join('')))
+        if (b.title || text.length) sections.push({ title: b.title, lines: text })
+      }
+    }
+    free.push(f.text)
+  }
+  flush()
+  return sections
+}
+
+/** Ctrl+P on a screen that is not a record or a grid: its content as a document, or the screen as drawn. */
+function askWhat(store: AppStore, title: string, hint?: string): void {
+  const frame = store.captureScreen?.() ?? ''
+  const sections = contentSections(frame)
+  const screen = captureScreenText(store, frame)
+  if (!screen.trim()) return store.flash('There is nothing on the screen to print.', 'error')
+  if (hint || !sections.length) return printText(store, title, screen, sections.length ? sections : undefined, hint)
+  store.open(new ChoiceOverlay<'content' | 'screen'>(store, 'Print what?', [
+    { label: 'Content', value: 'content', detail: "the screen's panels as a document: no navigation, no borders" },
+    { label: 'Screen', value: 'screen', detail: 'the terminal as you see it, line for line' },
+  ], (what) => printText(store, title, screen, what === 'content' ? sections : undefined), 'both carry the app header and footer'))
+}
+
+
+
 /** Without printing: the grid's export, else the screen text saved as a file. */
 function saveInstead(store: AppStore, target: PrintTarget): void {
   const screen = store.screen as { exportDialog?: () => void } | undefined

packages/tui/src/saver/layout.ts

@@ -24,7 +24,7 @@ import { pad, trunc } from '../util/text'
 import { Canvas, type Style } from './canvas'
 import { FONT_HEIGHT, blockText, blockWidth, canDraw } from './font'
 import { sparkline, type TileState } from './model'
-import { queryFrame, queryPoseAt, querySize, type QueryPose } from './query-art'
+import { QUERY_COLOR, queryFrame, queryPoseAt, querySize, type QueryPose, type QuerySize } from './query-art'
 import { SAVER_STYLES, type SaverStyle, type SaverStyleSetting } from './settings'
 
 export interface SaverTile {
@@ -226,7 +226,7 @@ function drawPin(c: Canvas, input: SaverInput): void {
 }
 
 function palette(t: ThemeTokens): string[] {
-  return [t.acc, t.acc2, t.ok, t.warn, t.markFg, t.err]
+  return [QUERY_COLOR, t.acc2, t.ok, t.warn, t.markFg, t.err]
 }
 
 /** The block-letter logo under Query: the profile's name, with the server host beneath. */
@@ -262,16 +262,18 @@ export interface Box {
 interface BounceSprite {
   w: number
   h: number
-  size: 'large' | 'small'
+  size: QuerySize
   logo: boolean
 }
 
 /** Query with the name logo under him when there is room (large Query only when it all fits). */
 function bounceSprite(bodyH: number, width: number, logo: NameLogo): BounceSprite {
   const large = querySize('large')
+  const medium = querySize('medium')
   const small = querySize('small')
   const extra = 2 + logo.rows.length
   if (bodyH >= large.height + extra && width >= Math.max(large.width, logo.w) + 4) return { w: Math.max(large.width, logo.w), h: large.height + extra, size: 'large', logo: true }
+  if (bodyH >= medium.height + extra && width >= Math.max(medium.width, logo.w) + 4) return { w: Math.max(medium.width, logo.w), h: medium.height + extra, size: 'medium', logo: true }
   if (bodyH >= small.height + extra) return { w: Math.min(width, Math.max(small.width, logo.w)), h: small.height + extra, size: 'small', logo: true }
   return { w: small.width, h: small.height, size: 'small', logo: false }
 }
@@ -301,7 +303,7 @@ export interface BounceLayout {
   /** The sprite is drawn (false in the panel half of the alternation). */
   showSprite: boolean
   panel?: Box
-  size: 'large' | 'small'
+  size: QuerySize
   showLogo: boolean
   dx: 1 | -1
   dy: 1 | -1
@@ -354,7 +356,7 @@ export function bounceLayout(input: SaverInput): BounceLayout {
   return { ...base, sprite: box, showSprite: true }
 }
 
-function drawQuery(c: Canvas, x: number, y: number, size: 'large' | 'small', pose: QueryPose, input: SaverInput, color: string): void {
+function drawQuery(c: Canvas, x: number, y: number, size: QuerySize, pose: QueryPose, input: SaverInput, color: string): void {
   c.block(x, y, queryFrame(size, pose, input.ascii), { fg: color, bold: true })
 }
 
@@ -420,13 +422,14 @@ function paintStarfield(c: Canvas, input: SaverInput): Box {
     c.put(sx, sy, chars[level]!, { fg: level >= 3 ? t.acc2 : level >= 2 ? t.fg : t.dim })
   }
   // Query drifts through left to right, bobbing
-  const q = querySize('small')
+  const gsize = guestSize(input.width, bodyH)
+  const q = querySize(gsize)
   const step = Math.floor(input.now / FRAME_MILLIS)
   const span = input.width + q.width * 2
   const qx = (step % span) - q.width
   const qy = Math.round(1 + bodyH * 0.25 + Math.sin(input.now / 1500) * 2)
   const pose = queryPoseAt(input.now, { dx: 1, dy: Math.cos(input.now / 1500) > 0 ? 1 : -1 })
-  drawQuery(c, qx, Math.max(1, qy + pose.dy), 'small', pose, input, t.acc2)
+  drawQuery(c, qx, Math.max(1, qy + pose.dy), gsize, pose, input, QUERY_COLOR)
   // the tiles float in the middle
   const hud = hudSize(input, input.width - 4, bodyH - 2)
   const ox = Math.round(Math.sin(input.now / 4000) * 2)
@@ -437,6 +440,11 @@ function paintStarfield(c: Canvas, input: SaverInput): Box {
   return { x: hx, y: hy, w: hud.w, h: hud.h }
 }
 
+/** Query's size where he is a guest (not the sprite): medium when the screen is wide and tall enough for him, else small. */
+function guestSize(width: number, bodyH: number): QuerySize {
+  return width >= 100 && bodyH >= 34 ? 'medium' : 'small'
+}
+
 /** Whether the flip clock is mid-flip (the first 500 ms of a minute). */
 function flipping(now: number): boolean {
   return now % 60_000 < 500
@@ -471,7 +479,8 @@ function paintFlip(c: Canvas, input: SaverInput): Box {
   const now = hhmm(input.now)
   const before = hhmm(input.now - (input.now % 60_000) - 1)
   const half = flipping(input.now) && input.now % 60_000 < 250
-  const q = querySize('small')
+  const qsize = guestSize(input.width, bodyH)
+  const q = querySize(qsize)
   const columns = input.tiles.length > 1 && input.width >= 100 ? 2 : 1
   const wantRows = Math.ceil(input.tiles.length / columns)
   // double-size digits when the screen has room for them and the tiles
@@ -488,7 +497,7 @@ function paintFlip(c: Canvas, input: SaverInput): Box {
   const date = trunc(new Date(input.now).toLocaleDateString('en-GB', { weekday: 'long', day: 'numeric', month: 'long', year: 'numeric' }), input.width - 4)
   const host = trunc(`${input.server} · ${input.profile}`, input.width - 4)
   // the tiles with Query beside them, bottom-aligned
-  const colW = Math.max(0, Math.min(columns === 2 ? 43 : 56, Math.floor((input.width - 6 - q.width - 3 - (columns - 1) * 3) / columns)))
+  const colW = Math.max(0, Math.min(columns === 2 ? 43 : 56, Math.floor((input.width - 6 - (queryBeside ? q.width + 3 : 0) - (columns - 1) * 3) / columns)))
   const tilesW = input.tiles.length ? columns * colW + (columns - 1) * 3 : 0
   const blockW = input.tiles.length ? (queryBeside ? tilesW + 3 + q.width : Math.max(tilesW, q.width)) : q.width
   const rowsCap = Math.max(1, bodyH - (cardH + 4) - (queryBeside ? 0 : q.height + 1))
@@ -537,12 +546,12 @@ function paintFlip(c: Canvas, input: SaverInput): Box {
   if (input.tiles.length) tileBlock(c, bx, y, input.tiles, columns, colW, tileRows, input)
   // Query peeks up beside the tiles: ears and eyes, all of him when he hops
   const pose = queryPoseAt(input.now, { dx: -1 })
-  const shown = Math.min(blockH, pose.action ? q.height : 3)
-  const frame = queryFrame('small', pose, input.ascii).slice(0, shown)
+  const shown = Math.min(blockH, pose.action ? q.height : qsize === 'medium' ? 5 : 3)
+  const frame = queryFrame(qsize, pose, input.ascii).slice(0, shown)
   const qx = input.tiles.length && queryBeside ? bx + tilesW + 3 : bx + Math.floor((blockW - q.width) / 2)
   const qy = y + blockH - shown
   c.fill(qx, qy, q.width, shown, {})
-  c.block(qx, qy, frame, { fg: t.acc2, bold: true })
+  c.block(qx, qy, frame, { fg: QUERY_COLOR, bold: true })
   return { x: gx, y: gy, w: groupW, h: groupH }
 }
 
@@ -562,7 +571,8 @@ function paintBig(c: Canvas, input: SaverInput): Box {
     .map((x, i) => ({ x, i }))
     .sort((a, b) => (b.x.state.value!.interest ?? 0) - (a.x.state.value!.interest ?? 0) || a.i - b.i)
     .map((e) => e.x)
-  const q = querySize('small')
+  const qsize = guestSize(input.width, bodyH)
+  const q = querySize(qsize)
   const rotation = Math.floor(input.now / 8000)
   // compact: the stack is at most about 90 columns wide, however wide the screen
   const avail = Math.min(input.width - 4, 90)
@@ -614,7 +624,7 @@ function paintBig(c: Canvas, input: SaverInput): Box {
   const color = tile ? (levelColor(t, tile) === t.fg ? t.acc2 : levelColor(t, tile)) : t.acc2
   const heroX = centred(heroW)
   if (!tile) {
-    drawQuery(c, heroX, y, 'small', queryPoseAt(input.now), input, t.acc2)
+    drawQuery(c, heroX, y, qsize, queryPoseAt(input.now), input, QUERY_COLOR)
   } else {
     const pose: QueryPose = { ...pose0, ...(asleep ? { blink: true, wag: false } : {}) }
     const numberAt = (x: number, ny: number) => {
@@ -622,12 +632,12 @@ function paintBig(c: Canvas, input: SaverInput): Box {
       else c.put(x, ny, big, { fg: color, bold: true })
     }
     if (beside) {
-      drawQuery(c, heroX, y, 'small', pose, input, t.acc2)
+      drawQuery(c, heroX, y, qsize, pose, input, QUERY_COLOR)
       if (asleep) c.put(heroX + q.width - 1, y - 1, input.now % 2000 < 1000 ? 'z' : 'zZ', { fg: t.dim })
       numberAt(heroX + q.width + 3, y + Math.floor((heroH - numH) / 2))
     } else {
       numberAt(heroX + Math.floor((heroW - numW) / 2), y)
-      drawQuery(c, heroX + Math.floor((heroW - q.width) / 2), y + numH + 1, 'small', pose, input, t.acc2)
+      drawQuery(c, heroX + Math.floor((heroW - q.width) / 2), y + numH + 1, qsize, pose, input, QUERY_COLOR)
       if (asleep) c.put(heroX + Math.floor((heroW + q.width) / 2) - 1, y + numH, input.now % 2000 < 1000 ? 'z' : 'zZ', { fg: t.dim })
     }
   }

packages/tui/src/saver/query-art.ts

@@ -7,57 +7,73 @@
  * Query, the qrun.io mascot, for the screen saver.
  *
  * Source: the sitting-dog line drawing on Query's page, https://www.qrun.io/query/ (the inline SVG,
- * viewBox 0 0 331.41 348.44, that the page's hero bounces). The large art is that drawing traced
- * into braille dots (2×4 dots per cell, 66×76 dots); the small art is hand-drawn on a 24×24 dot
- * grid after it. Each braille cell is a bitmap, so the frames are made from the art itself: blink
- * (the eye's dots cleared), tail wag (the tail's dots moved), mirrored to face the way he drifts,
- * eyes glancing up or down. The ASCII glyph set gets a plain line-art version of the same bitmap
- * (hand-drawn for the small size).
+ * viewBox 0 0 331.41 348.44, in one colour: indigo-400, #818cf8). All three sizes are that drawing
+ * rasterised and thresholded into braille dots (2×4 dots per cell) by scripts/gen-query-art.mjs, so
+ * they share its proportions: large 42×22 cells, medium 25×13, small 17×9. Each braille cell is a
+ * bitmap, so the frames are made from the art itself: blink (the eye's dots cleared), tail wag (the
+ * tail's dots moved), mirrored to face the way he drifts, eyes glancing up or down. The ASCII glyph
+ * set gets a plain line-art version of the same bitmap.
  */
 
-export type QuerySize = 'small' | 'large'
+/** The drawing's colour (the logo's own fill). */
+export const QUERY_COLOR = '#818cf8'
 
-/** Large Query, 33×19 cells, facing right. */
+export type QuerySize = 'small' | 'medium' | 'large'
+
+/** large Query, 42×22 cells, facing right (generated by scripts/gen-query-art.mjs). */
 const LARGE = [
-  "⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⣠⡴⠞⠛⠛⠛⠛⠳⢦⣄⠀⠀⠀⠀⠀",
-  "⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⢠⡾⠋⠀⠀⠀⠀⠀⠀⢀⡀⠹⣇⠀⠀⠀⠀",
-  "⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⢠⡟⠀⠀⢠⡆⠀⠀⠀⠀⠸⠗⠀⠻⣤⣤⣤⣀",
-  "⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⣿⠁⠀⠀⢸⡇⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⣿",
-  "⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⢸⡇⠀⠀⠀⠈⢿⡀⠀⠀⠀⠀⠀⠀⠀⢀⣀⡼⠋",
-  "⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠘⣧⠀⠀⠀⠀⢸⡇⠀⠀⠀⠘⣿⠛⠛⠋⠉⠀⠀",
-  "⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠙⢷⣤⣀⣤⡾⠁⠀⠀⠀⠀⣿⠀⠀⠀⠀⠀⠀",
-  "⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⣠⡟⠁⠉⠀⠀⠀⠀⠀⠀⠀⣿⡀⠀⠀⠀⠀⠀",
-  "⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⣠⡾⠋⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⢸⡇⠀⠀⠀⠀⠀",
-  "⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⢀⣴⠞⠁⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⣿⠀⠀⠀⠀⠀",
-  "⠀⠀⠀⠀⠀⠀⠀⠀⠀⣰⠟⠁⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⢻⡆⠀⠀⠀⠀",
-  "⠀⠀⠀⠀⠀⠀⠀⢀⡾⠃⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⣿⠁⠀⠀⠀⠀",
-  "⠀⣀⣀⠀⠀⠀⢀⡾⠁⠀⠀⠀⠀⣤⡴⠶⠶⠶⠶⣤⡀⠀⠀⠀⠀⠀⣰⠏⠀⠀⠀⠀⠀",
-  "⠀⠙⣿⣷⠀⠀⣼⠃⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⢹⣆⠀⠀⠀⢰⡏⠀⠀⠀⠀⠀⠀",
-  "⠀⠀⣿⣿⠃⠀⣿⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⢰⡏⠀⠀⠀⠈⣷⠀⠀⠀⠀⠀⠀",
-  "⠀⢠⡿⣿⠀⢸⡇⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⢀⣴⠟⠀⠀⡀⠀⠀⣿⡀⠀⠀⠀⠀⠀",
-  "⠀⣼⢻⡇⠀⢸⡇⠀⠀⠀⠀⠀⠀⠀⠀⠀⢀⣴⠟⠁⠀⠀⠀⢿⡀⠀⢸⡇⠀⠀⠀⠀⠀",
-  "⠀⣿⡈⠷⠶⠟⢁⠀⠀⠀⠀⠀⠀⠀⠀⠘⠛⠛⠛⠛⠛⠳⣦⡸⣧⠀⠈⠛⠳⣦⡀⠀⠀",
-  "⠀⠈⠳⣦⣤⡴⠛⢧⣤⣤⣤⣤⣤⣤⣤⣤⣤⣤⣤⣤⣤⣤⣼⡇⠹⣦⣤⣤⣤⣬⡗⠀⠀",
+  "                                          ",
+  "                        ⣀⣀⣄⣀⣀             ",
+  "                     ⢀⡴⠋⠁   ⠈⠙⢢⡀          ",
+  "                    ⣰⠋      ⢠⣦ ⣧          ",
+  "                   ⢰⠇  ⢸⠁    ⠉ ⠈⠓⠒⠲⡆      ",
+  "                   ⡟   ⢸⡄         ⢠⠇      ",
+  "                   ⡇    ⢷   ⢀⣀⣀⣤⡤⠴⠋       ",
+  "                   ⢻⡀   ⣼    ⢸            ",
+  "                    ⣹⠓⠒⠚⠁    ⢸            ",
+  "                  ⢀⡴⠃        ⠸⡆           ",
+  "                ⢀⡴⠋           ⢧           ",
+  "              ⢀⡴⠉             ⢸           ",
+  "             ⣰⠋               ⢸⠃          ",
+  "            ⡼⠁    ⢀⣀⣀⣀⡀       ⡼           ",
+  "      ⠰⣶⣄  ⢰⠃    ⠘⠉⠉ ⠈⠉⠓⣆    ⡼⠁           ",
+  "       ⢸⢹  ⡟            ⢸⠆   ⣷            ",
+  "       ⣼⣸ ⢠⡇           ⢀⡞    ⢸            ",
+  "      ⢠⡇⡏ ⢸⡇         ⢀⡴⠋  ⢰⡀ ⠸⡇           ",
+  "      ⢸ ⣇⣀⡼⠁       ⠠⣴⣯⣤⣤⣤⣄ ⣧  ⢧⣤⡀         ",
+  "      ⠘⢧⡀⠁⣀⢶⡀            ⠈⢳⠸⣄   ⠙⡆        ",
+  "        ⠉⠉⠁ ⠉⠉⠉⠉⠙⠛⠛⠛⠛⠛⠛⠛⠛⠋⠉ ⠈⠉⠉⠉⠉⠁        ",
+  "                                          ",
 ]
 
-/** Small Query, 12×6 cells, facing right (hand-drawn on 24×24 dots). */
+/** medium Query, 25×13 cells, facing right (generated by scripts/gen-query-art.mjs). */
+const MEDIUM = [
+  "                         ",
+  "            ⢀⠔⠋⠉⠉⠑⢆      ",
+  "           ⢠⠃ ⡆  ⠛⠘⠤⠤⡀   ",
+  "           ⣾  ⢧   ⢀⣀⡼⠁   ",
+  "           ⠹⣄⣀⡼  ⢹⠉      ",
+  "           ⡰⠃⠁   ⢸⡀      ",
+  "        ⢀⡴⠊       ⡇      ",
+  "       ⢠⠎         ⡇      ",
+  "    ⣦⡀⢠⠇  ⠐⠚⠙⠒⢦  ⣰⠁      ",
+  "    ⣸⡇⢸       ⡸  ⢹       ",
+  "    ⣿⠁⣸     ⣠⠞⠁⠐⡆⢸⡄      ",
+  "    ⢧⣉⡵⣄⣀⣀⣀⣈⣉⣉⣉⣱⢱⣀⣉⣳     ",
+  "                         ",
+]
+
+/** small Query, 17×9 cells, facing right (generated by scripts/gen-query-art.mjs). */
 const SMALL = [
-  '⠀⠀⠀⠀⢀⠤⠒⠒⠢⢄⠀⠀',
-  '⠀⠀⠀⠀⡇⢸⠀⠁⣀⣀⡩⠕',
-  '⠀⠀⠀⠀⡨⠃⠀⠀⢇⠀⠀⠀',
-  '⠀⡀⢠⠊⢀⠤⢄⠀⢸⠀⠀⠀',
-  '⠀⢇⡇⠀⠀⠀⡠⠃⢸⠀⠀⠀',
-  '⠀⠀⠣⠤⠤⠼⠶⠶⠮⠵⠀⠀',
-]
-
-/** Small Query for the ASCII glyph set, 12×6 cells, facing right. */
-const SMALL_ASCII = [
-  '     .--.   ',
-  '    /(  o`-.',
-  "    \\_)  .-'",
-  '  _ /    |  ',
-  ' ( |  _/ |  ',
-  "  `-'--'-'  ",
+  "         ⣀⣤⣀⡀    ",
+  "        ⡞⢡ ⠰⠹⣀⡀  ",
+  "       ⢸ ⢸⡀⢀⣀⠤⠃  ",
+  "       ⢈⡗⠚ ⠘⡇    ",
+  "     ⢀⡴⠋    ⣇    ",
+  "  ⢀⡀⢀⠎ ⡠⠤⣀  ⡏    ",
+  "   ⡷⡼    ⢨⠃⠸⡄    ",
+  "  ⢸⢧⢇   ⠴⠥⢜⡄⠧⡀   ",
+  "   ⠉⠉⠓⠒⠒⠒⠒⠊⠙⠒⠃   ",
 ]
 
 interface Parts {
@@ -67,8 +83,9 @@ interface Parts {
 }
 
 const PARTS: Record<QuerySize, Parts> = {
-  large: { eye: [51, 7, 53, 10], tail: [2, 51, 8, 68] },
-  small: { eye: [14, 4, 14, 4], tail: [2, 15, 3, 18] },
+  large: { eye: [57,13,59,16], tail: [0,55,17,87] },
+  medium: { eye: [34,8,35,9], tail: [0,32,10,51] },
+  small: { eye: [23,5,23,6], tail: [0,22,7,35] },
 }
 
 // braille dot bits by (column, row) inside a cell
@@ -158,11 +175,11 @@ export function mirrorAscii(row: string): string {
   return [...row].reverse().map((c) => MIRROR[c] ?? c).join('')
 }
 
-const BASE: Record<QuerySize, Bitmap> = { large: decodeBraille(LARGE), small: decodeBraille(SMALL) }
+const BASE: Record<QuerySize, Bitmap> = { large: decodeBraille(LARGE), medium: decodeBraille(MEDIUM), small: decodeBraille(SMALL) }
 
 /** Width and height in cells of Query at a size. */
 export function querySize(size: QuerySize): { width: number; height: number } {
-  return size === 'large' ? { width: 33, height: 19 } : { width: 12, height: 6 }
+  return size === 'large' ? { width: 42, height: 22 } : size === 'medium' ? { width: 25, height: 13 } : { width: 17, height: 9 }
 }
 
 export interface QueryPose {
@@ -178,12 +195,6 @@ export interface QueryPose {
 
 /** One frame of Query: rows of text (braille, or ASCII line art), all the same width. */
 export function queryFrame(size: QuerySize, pose: QueryPose = {}, ascii = false): string[] {
-  if (ascii && size === 'small') {
-    let rows = SMALL_ASCII.map((r) => (pose.blink ? r.replace('o', '-') : r))
-    if (pose.wag) rows = rows.map((r, i) => (i === 3 ? ` _${r.slice(2)}` : i === 4 ? `(  ${r.slice(3)}` : r))
-    if (pose.facing === 'left') rows = rows.map(mirrorAscii)
-    return rows
-  }
   const parts = PARTS[size]
   const bits = BASE[size].map((r) => [...r])
   const [ex0, ey0, ex1, ey1] = parts.eye

packages/tui/src/saver/sources.ts

@@ -8,7 +8,7 @@
  *
  * | tile    | needs                | reads                                                    |
  * |---------|----------------------|----------------------------------------------------------|
- * | people  | collaboration        | GET presence per table, a few tables per refresh          |
+ * | people  | session store, or collaboration | the session table (sessions active in the last 10 minutes), else GET presence per table, a few tables per refresh |
  * | jobs    | durableJobs feature  | GET /jobs?state=recent (scope all, else mine)            |
  * | health  | health               | GET /health/summary                                       |
  * | db      | db-performance       | GET overview + activity                                   |
@@ -34,6 +34,8 @@ export interface SaverContext {
   events: EventRate
   /** Tables to sample for presence, most likely first (favourites, recents, then the rest). */
   presenceTables(): string[]
+  /** The server's session table (the session store qbit's), when it has one the user can read. */
+  sessionTable?(): string | undefined
   /** The profile's favourite tables (count tiles). */
   favouriteTables: string[]
   tableLabel(name: string): string
@@ -49,24 +51,81 @@ interface Viewer {
   userId: string
   displayName: string
   mode?: string
+  /** Live connections (tabs, terminals) of this user on the table; absent before collaboration 1.2.0. */
+  connections?: number
 }
 
-/** Everyone seen in presence lately across the sampled tables (this terminal is not: it left). */
+/** Sessions that count as online: active in the last 10 minutes. */
+export const SESSION_ACTIVE_MILLIS = 10 * 60_000
+
+function userLabel(userId: string): string {
+  return userId.includes(':') ? userId.slice(userId.indexOf(':') + 1) : userId
+}
+
+/**
+ * Who is online: signed-in sessions from the session store's table when the server has one and it
+ * holds sessions active in the last 10 minutes (own sessions count: "2 sessions · 1 user (you ×2)"),
+ * else this terminal plus everyone seen in collaboration presence across a few tables per refresh
+ * (the saver keeps its lease, so the signed-in viewer is always one of them). Collaboration 1.2.0
+ * counts connections, so two terminals of one user are "2 online · you ×2"; older servers count each
+ * person once. Never "nobody around" while the viewer is signed in.
+ */
 export function presenceSource(ctx: SaverContext): TileSource {
-  const seen = new Map<string, { name: string; table: string; mode?: string; at: number }>()
+  // keyed by user and table: a user's terminals on different tables add up
+  const seen = new Map<string, { userId: string; name: string; table: string; mode?: string; connections?: number; self: boolean; at: number }>()
   const skip = new Set<string>()
   let cursor = 0
+  let sessionsGone = false
   const now = ctx.now ?? Date.now
+  const names = new Map<string, string>()
+
+  async function sessions(): Promise<TileValue | undefined> {
+    const table = ctx.sessionTable?.()
+    if (!table || sessionsGone) return undefined
+    const cutoff = new Date(now() - SESSION_ACTIVE_MILLIS).toISOString()
+    let rows: Array<{ values: Record<string, unknown> }>
+    try {
+      rows = await ctx.client.query(table, {
+        criteria: [{ fieldName: 'modifyDate', operator: 'GREATER_THAN', values: [cutoff] }, { fieldName: 'expiresAt', operator: 'GREATER_THAN', values: [new Date(now()).toISOString()] }],
+        booleanOperator: 'AND', limit: 500,
+      })
+    } catch (error) {
+      const status = (error as { status?: number }).status
+      if (status === 403 || status === 404) sessionsGone = true
+      return undefined
+    }
+    if (!rows.length) return undefined
+    const self = ctx.status()
+    const perUser = new Map<string, number>()
+    for (const r of rows) {
+      const id = String(r.values.userId ?? '')
+      if (id) perUser.set(id, (perUser.get(id) ?? 0) + 1)
+    }
+    const isSelf = (id: string) => id === self.userId || (Boolean(self.user) && (names.get(id) === self.user || userLabel(id).toLowerCase() === self.user.toLowerCase()))
+    const list = [...perUser.entries()].sort((a, b) => Number(isSelf(b[0])) - Number(isSelf(a[0])) || a[0].localeCompare(b[0]))
+    const who = list.map(([id, n]) => `${isSelf(id) ? 'you' : names.get(id) ?? userLabel(id)}${n > 1 ? ` ×${n}` : ''}`)
+    const total = rows.length
+    const users = perUser.size
+    return {
+      value: `${total} online`,
+      detail: `${total} session${total === 1 ? '' : 's'} · ${users} user${users === 1 ? '' : 's'} (${who.join(', ')})`,
+      big: String(total), interest: 50 + total, level: 'ok',
+    }
+  }
+
   return {
-    id: 'people', label: 'Online', needs: 'collaboration',
-    present: () => ctx.has('collaboration'),
+    id: 'people', label: 'Online', needs: 'collaboration or the session store',
+    present: () => ctx.has('collaboration') || Boolean(ctx.sessionTable?.()),
     async load(): Promise<TileValue> {
-      const all = ctx.presenceTables().filter((t) => !skip.has(t))
-      if (!all.length) throw new SourceAbsent('no tables to watch')
+      const bySession = await sessions()
+      if (bySession) return bySession
+      const self = ctx.status()
+      const signedIn = Boolean(self.userId || self.user)
+      const all = ctx.has('collaboration') ? ctx.presenceTables().filter((t) => !skip.has(t)) : []
+      if (!all.length && !signedIn) throw new SourceAbsent('no tables to watch')
       const batch: string[] = []
       for (let i = 0; i < Math.min(PRESENCE_TABLES_PER_REFRESH, all.length); i++) batch.push(all[(cursor + i) % all.length]!)
       cursor = (cursor + batch.length) % Math.max(1, all.length)
-      const self = ctx.status()
       let failures = 0
       await Promise.all(batch.map(async (table) => {
         try {
@@ -74,10 +133,10 @@ export function presenceSource(ctx: SaverContext): TileSource {
           const t = now()
           for (const [id, v] of seen) if (v.table === table) seen.delete(id)
           for (const v of snap.viewers ?? []) {
-            // this terminal left presence when the saver came up: the signed-in user seen here is
-            // another session of theirs (a browser tab, another terminal)
             const you = v.userId === self.userId || (Boolean(self.user) && v.displayName === self.user)
-            seen.set(v.userId, { name: you ? 'you elsewhere' : v.displayName || v.userId, table, mode: v.mode, at: t })
+            const connections = typeof v.connections === 'number' && v.connections > 0 ? v.connections : undefined
+            if (!you) names.set(v.userId, v.displayName || v.userId)
+            seen.set(`${v.userId}\u0000${table}`, { userId: v.userId, name: v.displayName || v.userId, table, mode: v.mode, connections, self: you, at: t })
           }
         } catch (error) {
           const status = (error as { status?: number }).status
@@ -85,16 +144,28 @@ export function presenceSource(ctx: SaverContext): TileSource {
           else failures++
         }
       }))
-      if (failures === batch.length) throw new Error('presence did not answer')
+      if (batch.length && failures === batch.length && !signedIn) throw new Error('presence did not answer')
       // a person not seen again within one sweep of the list (plus a lease) has left
-      const ttl = Math.ceil(all.length / PRESENCE_TABLES_PER_REFRESH) * ctx.intervalMs() + 45_000
+      const ttl = Math.ceil(Math.max(1, all.length) / PRESENCE_TABLES_PER_REFRESH) * ctx.intervalMs() + 45_000
       const t = now()
       for (const [id, v] of seen) if (t - v.at > ttl) seen.delete(id)
-      const people = [...seen.values()].sort((a, b) => a.name.localeCompare(b.name))
-      const detail = people.length
-        ? people.sort((a, b) => Number(a.name === 'you elsewhere') - Number(b.name === 'you elsewhere')).map((p) => `${p.name}${p.mode === 'EDITING' ? ' editing' : ''} · ${ctx.tableLabel(p.table)}`).join(', ')
-        : 'nobody around'
-      return { value: String(people.length), detail, big: String(people.length), interest: people.length ? 50 + people.length : 5 }
+      // one entry per person, their connections summed over the tables they are on; a server
+      // before collaboration 1.2.0 sends no connections, and then each person counts once
+      const people = new Map<string, { name: string; table: string; mode?: string; connections: number; counted: boolean; self: boolean }>()
+      for (const v of seen.values()) {
+        const p = people.get(v.userId)
+        if (!p) people.set(v.userId, { name: v.name, table: v.table, mode: v.mode, connections: v.connections ?? 1, counted: v.connections !== undefined, self: v.self })
+        else if (p.counted && v.connections !== undefined) p.connections += v.connections
+        else p.connections = 1, p.counted = false
+      }
+      const others = [...people.values()].filter((p) => !p.self).sort((a, b) => a.name.localeCompare(b.name))
+      // this terminal is you (it keeps its lease while the saver shows); your other terminals count too
+      const yours = signedIn ? Math.max(1, [...people.values()].filter((p) => p.self).reduce((n, p) => n + p.connections, 0)) : 0
+      const times = (n: number) => (n > 1 ? ` ×${n}` : '')
+      const total = others.reduce((n, p) => n + p.connections, 0) + yours
+      const parts = [...(signedIn ? [`you${times(yours)}`] : []), ...others.map((p) => `${p.name}${times(p.connections)}${p.mode === 'EDITING' ? ' editing' : ''} · ${ctx.tableLabel(p.table)}`)]
+      const detail = parts.length ? `${total} online · ${parts.join(', ')}` : 'nobody around'
+      return { value: String(total), detail, big: String(total), interest: total ? 50 + total : 5 }
     },
   }
 }

packages/tui/src/screens/record-collab.ts

@@ -12,7 +12,7 @@
 
 import type { TagEntry } from '@qrun-io/qqq-core'
 import type { CollabSummary } from '../collab'
-import type { PresencePerson } from '../presence'
+import { timesText, type PresencePerson } from '../presence'
 import { ago } from '../servers'
 import { KEY_SEP, cellWidth, pad, trunc } from '../util/text'
 
@@ -77,7 +77,7 @@ export function tagsText(tags: TagEntry[] | undefined): string {
 }
 
 /** What a person is doing on the record: "editing email", "editing", "viewing". */
-export function personState(p: PresencePerson): string {
+export function personState(p: Pick<PresencePerson, 'mode' | 'fieldName'>): string {
   return /edit/i.test(p.mode ?? '') ? `editing${p.fieldName ? ` ${p.fieldName}` : ''}` : 'viewing'
 }
 
@@ -92,11 +92,11 @@ function viewingParts(state: CollabState): StripPart[] {
   const others = othersOf(state)
   // others (with what they do) take the place of "(you)": the strip is about who else is here
   if (others.length) {
-    const named = others.slice(0, 2).map((p) => `${p.name} (${personState(p)})`).join(', ')
+    const named = others.slice(0, 2).map((p) => `${p.name}${timesText(p)} (${personState(p)})`).join(', ')
     return [{ text: 'viewing: ' }, { text: named + (others.length > 2 ? ` +${others.length - 2}` : ''), em: true }]
   }
   const self = everyone.find((p) => p.self)
-  return [{ text: 'viewing: ' }, { text: self ? self.name : 'you', em: true }, ...(self ? [{ text: ' (you)' }] : [])]
+  return [{ text: 'viewing: ' }, { text: self ? `${self.name}${timesText(self)}` : 'you', em: true }, ...(self ? [{ text: ' (you)' }] : [])]
 }
 
 const count = (n: number | undefined, one: string, many = `${one}s`): StripPart[] => [{ text: n === undefined ? '…' : String(n), em: true }, { text: ` ${n === 1 ? one : many}` }]
@@ -193,10 +193,21 @@ export function panelRows(state: CollabState, width: number, height: number, now
   else if (!everyone.length) add('  no one else', 'dim', 'viewing')
   // others first, with what they are doing; this user last
   const people: Array<PresencePerson & { self?: boolean }> = [...othersOf(state), ...(everyone ?? []).filter((x) => x.self)]
-  for (const p of people) add(`  ${p.name}${p.self ? ' (you)' : ''} · ${personState(p)}`, p.self ? 'fg' : 'accent', 'viewing')
+  for (const p of people) {
+    add(`  ${p.name}${timesText(p)}${p.self ? ' (you)' : ''} · ${personState(p)}`, p.self ? 'fg' : 'accent', 'viewing')
+    // with more than one terminal, what each does (this one first)
+    const terminals = p.terminals && p.terminals.length > 1 ? [...p.terminals].sort((a, b) => Number(Boolean(b.self)) - Number(Boolean(a.self))) : []
+    terminals.forEach((x, i) => add(`    ${x.self ? 'this terminal' : `#${i + 1}`} · ${personState(x)}${x.since ? ` · ${hhmm(x.since)}` : ''}`, 'dim', 'viewing'))
+  }
   return rows.slice(0, Math.max(0, height))
 }
 
+/** A lease start as local "17:50". */
+function hhmm(iso: string): string {
+  const at = new Date(iso)
+  return Number.isNaN(at.getTime()) ? iso : at.toTimeString().slice(0, 5)
+}
+
 /** A due date as "3 Nov" (and the year when it is not this one). */
 function dueText(iso: string): string {
   const at = new Date(iso)

packages/tui/src/screens/record.tsx

@@ -12,7 +12,7 @@ import { actionsOverlay } from '../overlays/actions'
 import { TagOverlay, collaborationOf } from '../overlays/tags'
 import { RecordCollaboration, uploadBlocked, viewingText, type CollabSummary } from '../collab'
 import { CollabScreen, sharePreview, toggleFollow, uploadAttachment, type CollabView } from './collab'
-import { presenceSource } from '../presence'
+import { presenceSource, timesText } from '../presence'
 import { canPrintTable, printScreen } from '../printing'
 import { AuditScreen } from './audits'
 import { DeveloperScreen } from './developer'
@@ -303,7 +303,9 @@ export class RecordScreen implements Screen {
   /** Who else is on the record, in a dialog. */
   showViewers(): void {
     const viewers = this.viewers()
-    this.store.message(viewers.length ? `Also viewing ${this.title()}:\n${viewers.join('\n')}` : `No one else is viewing ${this.title()}.`, 'info', 'Presence')
+    const self = presenceSource().get(this.presenceScope()).everyone?.find((p) => p.self)
+    const yours = self?.connections && self.connections > 1 ? `\n\nYou have it open in ${self.connections} terminals.` : ''
+    this.store.message((viewers.length ? `Also viewing ${this.title()}:\n${viewers.join('\n')}` : `No one else is viewing ${this.title()}.`) + yours, 'info', 'Presence')
   }
 
   build(): void {
@@ -609,7 +611,15 @@ export class RecordScreen implements Screen {
     const collab = collaborationOf(this.store)
     if (!collab) return this.store.flash(this.store.extensions.missing('collaboration'), 'error')
     if (this.primaryKey === undefined) return
-    this.store.open(new TagOverlay(this.store, collab, this.tableName, this.primaryKey, (t) => { this.tags = t; this.build() }))
+    const tableName = this.tableName
+    const primaryKey = this.primaryKey
+    this.store.client!.call('getRecordFeatures', { path: { tableName, primaryKey: String(primaryKey) } }).then((result) => {
+      if (this.tableName !== tableName || this.primaryKey !== primaryKey) return
+      const features = result.data as { features?: string[]; capabilities?: Record<string, boolean> }
+      if (!features?.features?.includes('TAGS')) return this.store.flash('Tags are not enabled for this table.', 'error')
+      if (features.capabilities?.tag !== true) return this.store.flash('Your role cannot tag this record.', 'error')
+      this.store.open(new TagOverlay(this.store, collab, tableName, primaryKey, (t) => { this.tags = t; this.build() }))
+    }).catch((error) => this.store.flash(errorText(error), 'error'))
   }
 
   /** Counts, follow state and the panel details of the strip and the panel (collaboration extension). */
@@ -644,7 +654,7 @@ export class RecordScreen implements Screen {
 
   /** The names of the others viewing this record (presence; this client is not counted). */
   viewers(): string[] {
-    return presenceSource().get(this.presenceScope()).people.map((p) => p.name)
+    return presenceSource().get(this.presenceScope()).people.map((p) => `${p.name}${timesText(p)}`)
   }
 
   /** Opens comments, attachments, the timeline or tasks. */

packages/tui/src/screens/signin.tsx

@@ -22,6 +22,10 @@ export interface SignInDeps {
   /** Runs after the home screen is shown (the route given on the command line). */
   afterConnect?: (store: AppStore) => void
   timers?: boolean
+  /** Boot steps as they happen (the splash's status line): connecting, loading metadata. */
+  progress?: (text: string) => void
+  /** Awaited once connected, before Home replaces the screens (the splash's minimum display time). */
+  beforeHome?: () => Promise<void>
 }
 
 /** Connects the store to a profile: the stored sign-in, a client, metadata; then the home screen. */
@@ -57,7 +61,9 @@ export async function connect(store: AppStore, target: Target, deps: SignInDeps)
     store.status.auth = 'QQQ_TOKEN'
   }
   try {
+    deps.progress?.('loading metadata…')
     await store.connect(client, { timers: deps.timers })
+    deps.progress?.(`loaded metadata (${Object.keys(store.meta?.tables ?? {}).length} tables)`)
   } catch (e) {
     if (e instanceof UiApiError && (e.status === 401 || e.status === 403)) throw new NeedsSignIn('your sign-in expired; sign in again')
     throw e
@@ -69,6 +75,7 @@ export async function connect(store: AppStore, target: Target, deps: SignInDeps)
     // config.json unreadable: not critical here
   }
   history.record(store, { kind: 'auth', summary: `Signed in to ${target.server}${store.status.user ? ` as ${store.status.user}` : ''} (${store.status.auth})` })
+  await deps.beforeHome?.()
   while (store.routes.length) store.routes.pop()?.dispose?.()
   store.push(new HomeScreen(store))
   deps.afterConnect?.(store)

packages/tui/src/screens/splash.tsx

@@ -0,0 +1,413 @@
+/*
+ * Copyright 2026 QRun.IO, Inc.
+ * Licensed under the Apache License, Version 2.0 (see LICENSE).
+ */
+
+/**
+ * The start-up splash of `qqq ui`: Query (the qrun.io mascot) blinking and wagging while the TUI
+ * boots, the `qqq` wordmark, the version, and one status line that follows the boot steps (reading
+ * profiles, connecting, signing in, loading metadata). It drives the boot (boot-plan.ts decides the
+ * first step): with several profiles and none named the Servers picker opens over it; with none the
+ * add form; a failure stays on the splash with Enter retrying and c choosing another profile.
+ * Any key stops the animation (not the boot); --no-splash and `ui.splash: off` skip the splash.
+ */
+
+import { useEffect, useReducer } from 'react'
+import { UI_API_VERSION } from '@qrun-io/qqq-ui-api-client'
+import { CLI_VERSION } from '@qrun-io/qqq-cli/program'
+import { probeServer, readConfig } from '@qrun-io/qqq-core'
+import { PICK_HINT, splashWait, type BootPlan } from '../boot-plan'
+import type { Key } from '../keys'
+import { charOf } from '../keys'
+import { ProfileFormOverlay, ServersOverlay } from '../overlays/servers'
+import { blockText, blockWidth } from '../saver/font'
+import { queryFrame, querySize } from '../saver/query-art'
+import { ServersModel } from '../servers'
+import type { AppStore, Target } from '../store'
+import { isAscii, theme, type ThemeTokens } from '../theme'
+import type { FKeyLabels, Screen } from '../types'
+import { cellWidth, errorText, trunc } from '../util/text'
+import { NeedsSignIn, SignInScreen, connect, type SignInDeps } from './signin'
+
+export type SplashPhase = 'starting' | 'picking' | 'adding' | 'connecting' | 'failed' | 'done'
+
+/** The colour a piece of the splash is drawn in (a theme token). */
+export type SplashTone = 'art' | 'mark' | 'fg' | 'dim' | 'status' | 'err' | 'key'
+
+export interface SplashSeg {
+  text: string
+  tone: SplashTone
+}
+
+export const SPLASH_TAGLINE = 'Terminal client for QQQ'
+
+/** `qqq 1.0.0 · UI API client 1.8.0` */
+export function versionLine(): string {
+  return `qqq ${CLI_VERSION} · UI API client ${UI_API_VERSION}`
+}
+
+/** Query's pose at a moment: a blink every 3 s; while the boot works, the tail wags (his wave). */
+export function splashPose(now: number, busy: boolean): { blink: boolean; wag: boolean } {
+  return { blink: now % 3000 < 200, wag: busy && Math.floor(now / 300) % 2 === 1 }
+}
+
+const SPINNER = ['⠋', '⠙', '⠹', '⠸', '⠼', '⠴', '⠦', '⠧', '⠇', '⠏']
+const SPINNER_ASCII = ['|', '/', '-', '\\']
+
+export interface SplashLayoutInput {
+  ascii: boolean
+  pose: { blink: boolean; wag: boolean }
+  status: SplashSeg
+  /** Lines under the status (a sign-in address, a device code). */
+  extra: SplashSeg[]
+  /** The key hint line, or ''. */
+  keys: string
+  /** `top`: the header only (the picker is drawn below it), from `headerTop`, keeping `reserve` rows under it. */
+  anchor: 'center' | 'top'
+  reserve?: number
+  headerTop?: number
+}
+
+/** Rows of the large header (Query, gap, wordmark, gap, tagline, version) and of the compact one. */
+const LARGE_HEADER = querySize('large').height + 9
+const COMPACT_HEADER = querySize('small').height + 1
+
+export type SplashLine = SplashSeg[]
+
+/** Which composition fits with `rowsBelow` rows under it: the large Query over the wordmark, the small one beside it, or text. */
+export function splashTier(width: number, height: number, rowsBelow: number): 'large' | 'compact' | 'text' {
+  // a free row to spare, so a header and the picker under it never meet the screen's foot
+  if (width >= 40 && height > LARGE_HEADER + rowsBelow) return 'large'
+  if (width >= 40 && height > COMPACT_HEADER + rowsBelow) return 'compact'
+  return 'text'
+}
+
+/**
+ * The splash as lines of coloured pieces, centred in `width` and clipped to `width` × `height`
+ * (pure: tests read it at 80×24 and in ASCII). Blank lines are empty arrays.
+ */
+export function splashLayout(width: number, height: number, input: SplashLayoutInput): SplashLine[] {
+  const below: SplashLine[] = [[{ ...input.status }], ...input.extra.map((s) => [{ ...s }]), ...(input.keys ? [[{ text: input.keys, tone: 'key' as const }]] : [])]
+  const header = input.anchor === 'top'
+  const rowsBelow = header ? input.reserve ?? 0 : below.length + 1
+  const tier = splashTier(width, height, rowsBelow)
+  const mark = blockText('qqq', input.ascii)
+  const lines: SplashLine[] = []
+  if (tier === 'large') {
+    for (const row of queryFrame('large', input.pose, input.ascii)) lines.push([{ text: row, tone: 'art' }])
+    lines.push([])
+    for (const row of mark) lines.push([{ text: row, tone: 'mark' }])
+    lines.push([])
+    lines.push([{ text: SPLASH_TAGLINE, tone: 'fg' }])
+    lines.push([{ text: versionLine(), tone: 'dim' }])
+  } else if (tier === 'compact') {
+    // the small Query beside the wordmark, the tagline under the wordmark
+    const art = queryFrame('small', input.pose, input.ascii)
+    const right = Math.max(blockWidth('qqq'), SPLASH_TAGLINE.length)
+    // the wordmark and the tagline (a row apart) centred against Query's height
+    const from = Math.max(0, Math.floor((art.length - mark.length - 2) / 2))
+    const taglineRow = Math.min(art.length - 1, from + mark.length + 1)
+    art.forEach((row, i) => {
+      const inMark = i >= from && i < from + mark.length
+      const text = inMark ? mark[i - from]! : i === taglineRow ? SPLASH_TAGLINE : ''
+      lines.push([{ text: row, tone: 'art' }, { text: '   ', tone: 'fg' }, { text: text.padEnd(right), tone: inMark ? 'mark' : 'fg' }])
+    })
+    lines.push([{ text: versionLine(), tone: 'dim' }])
+  } else {
+    if (width >= blockWidth('qqq') && height >= 7 + rowsBelow) for (const row of mark) lines.push([{ text: row, tone: 'mark' }])
+    else lines.push([{ text: 'qqq', tone: 'mark' }])
+    lines.push([{ text: SPLASH_TAGLINE, tone: 'fg' }])
+    lines.push([{ text: versionLine(), tone: 'dim' }])
+  }
+  if (!header) {
+    lines.push([])
+    lines.push(...below)
+  }
+  // the ASCII glyph set (no UTF-8 locale): the middle dot and the ellipsis too
+  if (input.ascii) for (const line of lines) for (const seg of line) seg.text = seg.text.replace(/·/g, '-').replace(/…/g, '...')
+  const shown = lines.slice(0, Math.max(0, height))
+  const top = header ? input.headerTop ?? 1 : Math.max(0, Math.floor((height - shown.length) / 2))
+  const out: SplashLine[] = Array.from({ length: Math.min(top, height) }, () => [])
+  for (const line of shown) {
+    if (out.length >= height) break
+    out.push(centerSegs(line, width))
+  }
+  return out
+}
+
+/** Centres a line of pieces in `width` cells, cutting the last pieces with an ellipsis when it is wider. */
+export function centerSegs(line: SplashLine, width: number): SplashLine {
+  const total = line.reduce((w, s) => w + cellWidth(s.text), 0)
+  if (total <= width) {
+    const left = Math.floor((width - total) / 2)
+    return left > 0 ? [{ text: ' '.repeat(left), tone: 'fg' }, ...line] : line
+  }
+  const out: SplashLine = []
+  let room = width
+  for (const s of line) {
+    if (room <= 0) break
+    const w = cellWidth(s.text)
+    if (w <= room) {
+      out.push(s)
+      room -= w
+    } else {
+      out.push({ text: trunc(s.text, room), tone: s.tone })
+      room = 0
+    }
+  }
+  return out
+}
+
+/** The plain text of a laid-out splash (tests, the overflow sweep). */
+export function splashText(lines: SplashLine[]): string {
+  return lines.map((l) => l.map((s) => s.text).join('')).join('\n')
+}
+
+function toneColor(t: ThemeTokens, tone: SplashTone): string {
+  return tone === 'art' ? t.acc : tone === 'mark' ? t.acc2 : tone === 'dim' || tone === 'key' ? t.dim : tone === 'err' ? t.err : tone === 'status' ? t.acc : t.fg
+}
+
+export interface SplashOptions {
+  plan: BootPlan
+  /** How to connect and sign in (the store's signInDeps). */
+  deps: SignInDeps
+  /** Ends the program and prints a line (the picker closed without a choice). */
+  exit: (hint: string) => void
+  /** The splash stays at least this long (0 in tests). */
+  minMs: number
+  /** Animate Query (off in tests: one still frame). */
+  animate: boolean
+}
+
+export class SplashScreen implements Screen {
+  readonly kind = 'splash'
+  readonly id = 'splash'
+  phase: SplashPhase = 'starting'
+  status = 'reading profiles…'
+  statusKind: 'info' | 'error' = 'info'
+  /** The profile being connected to (Enter retries it after a failure). */
+  target?: Target
+  /** Query moves until a key is pressed. */
+  animate: boolean
+  readonly shownAt = Date.now()
+  /** The sign-in itself (prompts, device code, browser address) is the sign-in screen's, unshown. */
+  readonly signIn: SignInScreen
+  private signingIn = false
+  /** The picker's profiles (its height follows them). */
+  private pickerModel?: ServersModel
+
+  constructor(readonly store: AppStore, readonly options: SplashOptions) {
+    this.animate = options.animate
+    this.signIn = new SignInScreen(store, options.deps)
+  }
+
+  title(): string {
+    return 'qqq'
+  }
+
+  fkeys(): FKeyLabels {
+    return {}
+  }
+
+  /** Starts the boot plan. */
+  start(): void {
+    const plan = this.options.plan
+    if (plan.kind === 'connect') this.connectTo(plan.target)
+    else if (plan.kind === 'pick') this.pick(plan.note, false)
+    else this.add(plan.note)
+  }
+
+  private say(text: string, kind: 'info' | 'error' = 'info'): void {
+    this.status = text
+    this.statusKind = kind
+    this.store.bump()
+  }
+
+  private model(): ServersModel {
+    const deps = this.options.deps
+    return new ServersModel({ secrets: deps.secrets, probe: (server) => probeServer(server, { fetch: deps.fetch }), onChange: () => this.store.bump() })
+  }
+
+  /** The Servers picker over the splash; Esc quits (or, after a failure, returns to it). */
+  pick(note?: string, fromFailure = this.phase === 'failed'): void {
+    const model = this.model()
+    if (!model.rows.length) return this.add(note)
+    this.pickerModel = model
+    const before = { phase: this.phase, status: this.status, kind: this.statusKind }
+    this.phase = 'picking'
+    this.say(note ?? 'choose a server to connect to', note ? 'error' : 'info')
+    const select = this.target?.name ?? (this.options.plan.kind === 'pick' ? this.options.plan.select : undefined)
+    const overlay: ServersOverlay = new ServersOverlay(this.store, (row) => this.connectTo({ name: row.name, server: row.server }), model, {
+      title: 'Connect to a server',
+      enterLabel: 'Enter connects',
+      escLabel: fromFailure ? 'Esc goes back' : 'Esc quits',
+      select,
+      top: (sh) => this.pickerPlace(sh).pickerTop,
+      onEscape: () => {
+        this.store.closeOverlay(overlay)
+        if (!fromFailure) return this.options.exit(PICK_HINT)
+        this.phase = before.phase
+        this.say(before.status, before.kind)
+      },
+    })
+    this.store.open(overlay)
+  }
+
+  /** The picker's rows: two per profile and six of frame, filter, header and hints (the Servers dialog's own sum). */
+  private pickerHeight(): number {
+    return Math.max(10, Math.min(30, (this.pickerModel?.rows.length ?? 2) * 2 + 6))
+  }
+
+  /**
+   * The header and the picker under it, centred together; a terminal too short for both gets the
+   * picker near the top, over the header.
+   */
+  pickerPlace(screenHeight: number): { headerTop: number; pickerTop: number } {
+    const pickerHeight = this.pickerHeight()
+    const header = splashLayout(this.store.width, screenHeight, { ...this.layoutInput('top'), reserve: pickerHeight + 1, headerTop: 0 }).length
+    const total = header + 1 + pickerHeight
+    if (total > screenHeight - 1) return { headerTop: 1, pickerTop: 1 }
+    const top = Math.max(0, Math.floor((screenHeight - total) / 2))
+    return { headerTop: top, pickerTop: top + header + 1 }
+  }
+
+  /** What to lay out at a height: the centred splash, or the header above the picker. */
+  inputFor(height: number, now = Date.now()): SplashLayoutInput {
+    if (!(this.phase === 'picking' && this.store.overlays.length)) return this.layoutInput('center', now)
+    const place = this.pickerPlace(height)
+    return { ...this.layoutInput('top', now), reserve: this.pickerHeight() + 1, headerTop: place.headerTop }
+  }
+
+  /** The add form (no profile yet, or `n`); a saved profile is connected to at once. */
+  add(note?: string): void {
+    this.phase = 'adding'
+    this.say(note ?? 'no server profile yet: add one to connect', note ? 'error' : 'info')
+    this.store.open(new ProfileFormOverlay(this.store, this.model(), undefined, (name) => {
+      const p = readConfig().profiles[name]
+      if (p) this.connectTo({ name, server: p.server })
+    }))
+  }
+
+  /** Connects to a profile (signing in when there is no stored sign-in); Home replaces the splash. */
+  connectTo(target: Target): void {
+    if (this.phase === 'connecting') return
+    this.phase = 'connecting'
+    this.target = target
+    const where = target.server.replace(/^https?:\/\//, '')
+    this.say(`connecting to ${where}…`)
+    const deps: SignInDeps = {
+      ...this.options.deps,
+      progress: (text) => this.say(text),
+      beforeHome: () => new Promise((resolve) => setTimeout(resolve, splashWait(this.shownAt, Date.now(), this.options.minMs))),
+    }
+    const run = async () => {
+      try {
+        await connect(this.store, target, deps)
+      } catch (e) {
+        if (!(e instanceof NeedsSignIn)) throw e
+        this.signingIn = true
+        this.signIn.status = ''
+        this.say(`signing in to ${where}…`)
+        await this.signIn.signIn(target)
+        this.signingIn = false
+        this.say(`connecting to ${where}…`)
+        await connect(this.store, target, deps)
+      }
+    }
+    run().then(() => {
+      this.phase = 'done'
+    }).catch((e) => {
+      this.phase = 'failed'
+      this.say(errorText(e), 'error')
+    }).finally(() => {
+      this.signingIn = false
+      this.signIn.device = undefined
+      this.signIn.browserUrl = undefined
+      this.store.bump()
+    })
+  }
+
+  /** Every key is the splash's (no F-keys, menu or palette before a server is connected). */
+  claimsKey(): boolean {
+    return true
+  }
+
+  onKey(key: Key): boolean {
+    this.animate = false
+    const ch = charOf(key).toLowerCase()
+    if (key.name === 'escape') {
+      if (this.phase === 'connecting') this.signIn.onKey(key)
+      else if (this.phase === 'failed' || this.phase === 'adding' || this.phase === 'starting') this.options.exit(this.phase === 'failed' ? `qqq ui: ${this.status}` : PICK_HINT)
+    } else if (key.name === 'f10' || (key.ctrl && key.name === 'q')) this.options.exit('')
+    else if (this.phase === 'failed' && (key.name === 'return' || ch === 'r') && this.target) this.connectTo(this.target)
+    else if (this.phase !== 'connecting' && (ch === 'c' || ch === 'p' || (key.ctrl && key.name === 'o'))) this.pick()
+    else if (this.phase !== 'connecting' && ch === 'n') this.add()
+    this.store.bump()
+    return true
+  }
+
+  /** The status line: the sign-in's own words while it runs (creating a session, waiting for the browser). */
+  private statusSeg(now: number): SplashSeg {
+    const text = this.signingIn && this.signIn.status ? this.signIn.status : this.status
+    if (this.statusKind === 'error') return { text, tone: 'err' }
+    const busy = this.phase === 'connecting' || this.phase === 'starting'
+    if (!busy) return { text, tone: 'status' }
+    const frames = isAscii() ? SPINNER_ASCII : SPINNER
+    const spin = this.animate ? frames[Math.floor(now / 100) % frames.length]! : isAscii() ? '*' : '·'
+    return { text: `${spin} ${text}`, tone: 'status' }
+  }
+
+  private extra(): SplashSeg[] {
+    const s = this.signIn
+    if (s.browserUrl) return [{ text: 'Sign in in your browser (opened); if it did not open, visit:', tone: 'fg' }, { text: s.browserUrl, tone: 'fg' }]
+    if (s.device) {
+      const left = Math.max(0, Math.round((s.device.expires - Date.now()) / 1000))
+      return [{ text: `Open ${s.device.url}`, tone: 'fg' }, { text: `and confirm the code ${s.device.code} (expires in ${Math.floor(left / 60)}:${String(left % 60).padStart(2, '0')})`, tone: 'fg' }]
+    }
+    return []
+  }
+
+  private keys(): string {
+    if (this.store.overlays.length) return ''
+    if (this.phase === 'failed') return 'Enter retries · c chooses another profile · n adds one · Esc quits'
+    if (this.phase === 'adding') return 'n adds a server profile · Esc quits'
+    if (this.phase === 'connecting' && (this.signIn.browserUrl || this.signIn.device)) return 'Esc cancels the sign-in'
+    return ''
+  }
+
+  layoutInput(anchor: 'center' | 'top', now = Date.now()): SplashLayoutInput {
+    const busy = this.phase === 'connecting' || this.phase === 'starting'
+    return { ascii: isAscii(), pose: this.animate ? splashPose(now, busy) : { blink: false, wag: false }, status: this.statusSeg(now), extra: this.extra(), keys: this.keys(), anchor }
+  }
+
+  /** The text as drawn now (tests). */
+  text(width: number, height: number): string {
+    return splashText(splashLayout(width, height, this.inputFor(height)))
+  }
+
+  render(width: number, height: number) {
+    return <SplashView splash={this} width={width} height={height} />
+  }
+}
+
+/** Repaints itself at about 10 fps while Query moves (only this component). */
+function SplashView({ splash, width, height }: { splash: SplashScreen; width: number; height: number }) {
+  const [, tick] = useReducer((n: number) => n + 1, 0)
+  const moving = splash.animate && splash.phase !== 'done'
+  useEffect(() => {
+    if (!moving) return
+    const timer = setInterval(tick, 100)
+    return () => clearInterval(timer)
+  }, [moving])
+  const t = theme()
+  const lines = splashLayout(width, height, splash.inputFor(height))
+  return (
+    <box flexDirection="column" overflow="hidden" width={width} height={height}>
+      {lines.map((line, i) => (
+        <text key={i} flexShrink={0} wrapMode="none" height={1}>
+          {line.length ? line.map((s, k) => <span key={k} fg={toneColor(t, s.tone)}>{s.text}</span>) : ' '}
+        </text>
+      ))}
+    </box>
+  )
+}

packages/tui/src/store.ts

@@ -14,6 +14,7 @@ import { openRealtimeStream } from '@qrun-io/qqq-ui-api-client'
 import { History, MetaDataIndex, addRecent, currentCredential, readIdleMinutes, type MetaDataDocument, type RecentItem } from '@qrun-io/qqq-core'
 import { TUI_CHANNEL, TuiClient, type VersionInfo } from './client'
 import { charOf, isPrintable, type Key } from './keys'
+import { bankKey, legacyProfile, shiftNumber, type LegacyProfile } from './keys/fkeys'
 import { ChoiceOverlay, ConfirmOverlay, CliCommandOverlay, MessageOverlay } from './overlays/basic'
 import { Extensions } from './extensions'
 import { PrintTracker, printScreen } from './printing'
@@ -37,6 +38,8 @@ export interface Settings {
   singleKeys: boolean
   /** Copy CLI equivalents to the clipboard automatically (ui.copyCliCommands; default off). */
   copyCli?: boolean
+  /** The F-key bar: one row, two rows (primary and Shift), or auto (two from 30 lines); keys/shift-bank.ts. */
+  fkeyBar?: 'one' | 'two' | 'auto'
 }
 
 export interface Status {
@@ -118,6 +121,11 @@ export class AppStore {
   /** Copies text to the clipboard (set by main); returns how it was copied, or undefined when there is no clipboard. */
   copyText: (text: string) => string | undefined = () => undefined
   sidebar?: SidebarLike
+  /** How this terminal numbers its legacy shifted F-keys (keys/fkeys.ts; QQQ_FKEYS overrides). */
+  fkeyProfile: LegacyProfile = legacyProfile()
+  /** One-row bar: the Shift row is shown instead of the primary row until this time (after a Shift+F press). */
+  shiftRowUntil = 0
+  private shiftRowTimer?: ReturnType<typeof setTimeout>
   private listeners = new Set<Listener>()
   private timers: Array<ReturnType<typeof setInterval>> = []
   private streamAbort?: AbortController
@@ -201,10 +209,15 @@ export class AppStore {
     this.bump()
   }
 
-  /** Tells the presence source which scope is on top (called on every repaint; cheap when unchanged). */
+  /**
+   * Tells the presence source which scope is on top (called on every repaint; cheap when unchanged).
+   * The screen saver or lock keeps the lease on the scope that was on top (the extension has no idle
+   * state: the user stays as a viewer rather than vanishing from the others' screens, as a person
+   * who stepped away from a record) and waking re-syncs.
+   */
   private syncPresence(): void {
-    const scope = this.lock ? undefined : this.screen?.presenceScope?.()
-    presenceSource().enter?.(scope)
+    if (this.lock) return
+    presenceSource().enter?.(this.screen?.presenceScope?.())
   }
 
   /** Replaces the top screen (a form that saved becomes the record). */
@@ -358,6 +371,8 @@ export class AppStore {
     // F-key fallbacks for terminals that take the F-keys: Esc then a digit (arrives as Alt+digit) or Ctrl+digit; 0 is F10
     const digit = /^[0-9]$/.test(raw.name) ? raw.name : /^[0-9]$/.test(raw.sequence?.slice(-1) ?? '') && raw.meta ? raw.sequence.slice(-1) : undefined
     if (digit !== undefined && (raw.meta || raw.ctrl)) key = { name: `f${digit === '0' ? 10 : digit}`, sequence: '' }
+    // Shift+F1…F12 (any terminal's form, keys/fkeys.ts) are the Shift bank: shift+f1…shift+f12
+    key = bankKey(key, this.fkeyProfile)
     try {
       this.dispatch(key)
     } catch (e) {
@@ -394,6 +409,8 @@ export class AppStore {
     // Ctrl+P prints what you see on every screen; Print Screen too when the terminal passes it on
     // (kitty keyboard protocol); F8 prints where the screen has no Delete for it
     if ((key.ctrl && key.name === 'p') || key.name === 'printscreen' || (key.name === 'f8' && this.fkeys().find((k) => k.n === 8)?.label === 'Print')) return printScreen(this)
+    const shifted = shiftNumber(key)
+    if (shifted !== undefined) return this.commands().shiftKey(shifted)
     if (key.name === 'f1') return this.commands().help()
     if (this.backslash && charOf(key) === '?') {
       this.backslash = false
@@ -512,6 +529,8 @@ export class AppStore {
   dispose(): void {
     for (const t of this.timers) clearInterval(t)
     this.timers = []
+    if (this.shiftRowTimer) clearTimeout(this.shiftRowTimer)
+    this.shiftRowTimer = undefined
     this.clockTimer = undefined
     this.streamAbort?.abort()
     this.printTracker.dispose()
@@ -654,6 +673,22 @@ export class AppStore {
     this.bump()
   }
 
+  /** One-row bar: shows the Shift row for `ms` (keys/shift-bank.ts SHIFT_ROW_MS), then the primary row again. */
+  showShiftRow(ms = 2000): void {
+    this.shiftRowUntil = Date.now() + ms
+    if (this.shiftRowTimer) clearTimeout(this.shiftRowTimer)
+    this.shiftRowTimer = setTimeout(() => {
+      this.shiftRowTimer = undefined
+      this.bump()
+    }, ms + 10)
+    ;(this.shiftRowTimer as { unref?: () => void }).unref?.()
+  }
+
+  /** Whether one-row mode shows the Shift row now. */
+  shiftRowShown(): boolean {
+    return Date.now() < this.shiftRowUntil
+  }
+
   /** The function-key bar for the current context; from 120 columns also 11 (reserved, blank) and 12 (the Assistant). */
   fkeys(): Array<{ n: number; label: string | null; global: string }> {
     const defaults: Record<number, string> = { 1: 'Help', 2: 'Search', 3: 'View', 4: 'Edit', 5: 'Refresh', 6: 'Filter', 7: 'New', 8: 'Delete', 9: 'Menu', 10: 'Quit' }
@@ -699,6 +734,8 @@ export interface CommandsLike {
   menu(): void
   /** The Servers dialog (Ctrl+O). */
   servers(): void
+  /** Shift+Fn: the Shift bank's key n (keys/shift-bank.ts). */
+  shiftKey(n: number): void
   commandLine(initial?: string): void
   viewSettings(): void
   lock(): void

packages/tui/test/assistant.test.tsx

@@ -271,7 +271,8 @@ test('F-key bar: 11 and 12 from 120 columns, 12Ask lit with the extension, a cli
   expect(keys.map((k) => k.n)).toEqual([1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12])
   expect(keys.find((k) => k.n === 12)?.label).toBe('Ask')
   expect(keys.find((k) => k.n === 11)?.label).toBeNull()
-  const bar = h.frame().split('\n').filter((l) => l.trim()).pop()!
+  // the primary row (from 30 lines the Shift row is drawn under it)
+  const bar = h.frame().split('\n').find((l) => l.includes(' 1Help'))!
   expect(bar).toContain('12Ask')
   expect(bar).toMatch(/11\s+12Ask/)
   expect([...bar].length).toBeLessThanOrEqual(120)

packages/tui/test/enterprise.test.tsx

@@ -13,7 +13,7 @@ import { TuiClient } from '../src/client'
 import { RecordCollaboration } from '../src/collab'
 import type { RecordScreen } from '../src/screens/record'
 import { readViewSettings } from '@qrun-io/qqq-core'
-import { COLLABORATION, QUICK_SEARCH, collabState, fakeExtensions, resetCollab } from './fake-collab'
+import { COLLABORATION, QUICK_SEARCH, collabState, fakeExtensions, resetCollab, recordTagPolicy } from './fake-collab'
 import type { RecordViewSettingsOverlay } from '../src/overlays/record-view-settings'
 import { fakeFetch } from './fake-server'
 import { command, isolate, press, startTui, waitFor, type Harness } from './helpers'
@@ -240,3 +240,18 @@ test('record view without the collaboration extension: no strip, no panel, the c
   expect(f).not.toContain('Collaboration')
   expect((h.store.screen as RecordScreen).list.current?.key).toStartWith('f:')
 })
+
+for (const enabled of [false, true]) {
+  test(`tag editor respects server capability: enabled=${enabled}, permission denied`, async () => {
+    fakeExtensions.push(COLLABORATION)
+    recordTagPolicy.enabled = enabled
+    recordTagPolicy.allowed = false
+    h = await startTui(160, 40)
+    await command(h, 'table get person 1')
+    await waitFor(h, (x) => x.includes('Tags (t)'))
+    await key('t')
+    const text = enabled ? 'Your role cannot tag this record.' : 'Tags are not enabled for this table.'
+    await waitFor(h, (x) => x.includes(text))
+    expect(h.store.overlays.length).toBe(0)
+  })
+}

packages/tui/test/fake-collab.ts

@@ -15,6 +15,7 @@ const json = (data: unknown, status = 200) => new Response(JSON.stringify(data),
 export const fakeExtensions: J[] = []
 
 export const COLLABORATION = { name: 'collaboration', version: '1.1.0', pathPrefix: '/qbit/collaboration', description: 'Record collaboration' }
+export const recordTagPolicy = { enabled: true, allowed: true }
 export const QUICK_SEARCH = { name: 'quick-search', version: '1.1.0', pathPrefix: '/qbit/quick-search', description: 'Quick search' }
 
 export interface CollabState {
@@ -37,11 +38,14 @@ export function resetCollab(): void {
   collabState.uploads = []
   collabState.shares = []
   collabState.tags = []
+  recordTagPolicy.enabled = true
+  recordTagPolicy.allowed = true
 }
 resetCollab()
 
 export async function collabRoute(path: string, method: string, body: unknown): Promise<Response | undefined> {
   const on = (name: string) => fakeExtensions.some((e) => e.name === name)
+  if (/^\/table\/person\/\d+\/features$/.test(path)) return json({ features: recordTagPolicy.enabled ? ['TAGS'] : [], capabilities: { tag: recordTagPolicy.allowed } })
   if (path === '/search' && method === 'POST' && on('quick-search')) {
     const term = String((body as J | undefined)?.searchTerm ?? '').toLowerCase()
     const hits = 'ada lovelace'.includes(term) ? [{ tableName: 'person', tableLabel: 'Person', recordId: '1', recordLabel: '1', highlights: [{ text: 'Ada Lovelace', fieldLabel: 'Name' }] }] : []

packages/tui/test/fake-print.ts

@@ -16,6 +16,10 @@ export const printing = {
   enabled: false,
   /** The 2.1 table-list and text prints (on with the extension unless a test turns them off). */
   lists: true,
+  /** Save as PDF (printingRenderToPdf). */
+  render: true,
+  /** Render runs: the values each started with. */
+  renders: [] as J[],
   /** Table-list and text runs: the process and the values it finished with. */
   listRuns: [] as Array<{ process: string; values: J }>,
   /** Print runs: the values and record ids each one finished with. */
@@ -24,6 +28,8 @@ export const printing = {
   reset(): void {
     this.enabled = false
     this.lists = true
+    this.render = true
+    this.renders = []
     this.listRuns = []
     this.runs = []
     this.jobs.clear()
@@ -41,6 +47,7 @@ export function printProcessesMeta(): J {
   if (!printing.enabled) return {}
   return {
     printingPrintRecords_person: { name: 'printingPrintRecords_person', label: 'Print', tableName: 'person' },
+    ...(printing.render ? { printingRenderToPdf: { name: 'printingRenderToPdf', label: 'Save as PDF' } } : {}),
     ...(printing.lists ? { printingPrintTableList: { name: 'printingPrintTableList', label: 'Print a table list' }, printingPrintText: { name: 'printingPrintText', label: 'Print text' } } : {}),
   }
 }
@@ -76,6 +83,16 @@ export async function printRoute(path: string, method: string, body: unknown): P
     })
     return json({ type: 'COMPLETE', processUUID: 'pr', nextStep: 'result', values: { printingJobIds: ids.join(',') } })
   }
+  if (printing.render && path === '/metaData/process/printingRenderToPdf') {
+    return json({ name: 'printingRenderToPdf', label: 'Save as PDF', frontendSteps: [{ name: 'download', label: 'Download', components: [{ type: 'DOWNLOAD_FORM' }], viewFields: [{ name: 'downloadFileName', label: 'File', type: 'STRING' }] }] })
+  }
+  if (printing.render && path === '/processes/printingRenderToPdf/init') {
+    const v = values()
+    printing.renders.push(v)
+    const name = v.kind === 'RECORD' ? `Person-${v.recordId}` : v.kind === 'LIST' ? 'Person' : String(v.title).replace(/[^A-Za-z0-9]+/g, '-')
+    return json({ type: 'COMPLETE', processUUID: 'rd', nextStep: 'download', values: { downloadFileName: `${name}.pdf`, serverFilePath: `/tmp/qqq-print-${printing.renders.length}.pdf` } })
+  }
+  if (printing.render && path.startsWith('/download/')) return new Response(`%PDF-1.7 ${path}`, { status: 200, headers: { 'content-type': 'application/pdf' } })
   const list = /^\/(?:metaData\/process|processes)\/(printingPrintTableList|printingPrintText)(\/.*)?$/.exec(path)
   if (list && printing.lists) {
     const name = list[1]!

packages/tui/test/fkeys.test.ts

@@ -0,0 +1,195 @@
+/*
+ * Copyright 2026 QRun.IO, Inc.
+ * Licensed under the Apache License, Version 2.0 (see LICENSE).
+ */
+
+/** The function-key decoder (keys/fkeys.ts), per sequence family, and the stdin rewrite into what OpenTUI reads. */
+
+import { EventEmitter } from 'node:events'
+import { describe, expect, test } from 'bun:test'
+import { parseKeypress } from '@opentui/core'
+import { bankKey, canonicalSequence, chordName, decodeFKey, fkeyChord, legacyProfile, rewriteFKeyInput, shiftNumber, type FKeyChord, type LegacyProfile } from '../src/keys/fkeys'
+import { CPR_QUIET_MS, installFKeyRewrite } from '../src/keys/stdin-rewrite'
+
+const E = '\x1b'
+const name = (seq: string, profile: LegacyProfile = 'vt220') => {
+  const d = decodeFKey(seq, profile)
+  return d ? chordName(d.chord) : undefined
+}
+const family = (seq: string, profile: LegacyProfile = 'vt220') => decodeFKey(seq, profile)?.family
+
+/** What OpenTUI makes of a sequence after the rewrite (kitty parsing on, as the renderer runs). */
+function opentui(seq: string, profile: LegacyProfile = 'vt220'): string | undefined {
+  const k = parseKeypress(rewriteFKeyInput(seq, profile, { cpr: true }), { useKittyKeyboard: true })
+  if (!k?.name) return undefined
+  return `${k.ctrl ? 'ctrl+' : ''}${k.meta ? 'alt+' : ''}${k.shift ? 'shift+' : ''}${k.name}`
+}
+
+describe('xterm modifier forms (tmux, iTerm2, Windows Terminal, xterm, VTE)', () => {
+  const shift = ['1;2P', '1;2Q', '1;2R', '1;2S', '15;2~', '17;2~', '18;2~', '19;2~', '20;2~', '21;2~', '23;2~', '24;2~']
+  test('Shift+F1…F12', () => {
+    shift.forEach((s, i) => expect(name(`${E}[${s}`)).toBe(`shift+f${i + 1}`))
+    expect(family(`${E}[1;2P`)).toBe('csi-letter')
+    expect(family(`${E}[1;2R`)).toBe('csi-f3-cpr')
+    expect(family(`${E}[15;2~`)).toBe('csi-tilde')
+  })
+  test('SS3 with a modifier and the plain F1–F4', () => {
+    expect(name(`${E}O2P`)).toBe('shift+f1')
+    expect(name(`${E}O2S`)).toBe('shift+f4')
+    expect(name(`${E}OQ`)).toBe('f2')
+    expect(family(`${E}O2R`)).toBe('ss3')
+  })
+  test('CSI 11..14 forms (VT220, PuTTY) with and without modifiers', () => {
+    expect(name(`${E}[11~`)).toBe('f1')
+    expect(name(`${E}[12;2~`)).toBe('shift+f2')
+    expect(name(`${E}[14;2~`)).toBe('shift+f4')
+  })
+  test('Ctrl, Alt and combinations come for free', () => {
+    expect(name(`${E}[1;5P`)).toBe('ctrl+f1')
+    expect(name(`${E}[15;5~`)).toBe('ctrl+f5')
+    expect(name(`${E}[24;5~`)).toBe('ctrl+f12')
+    expect(name(`${E}[1;6P`)).toBe('ctrl+shift+f1')
+    expect(name(`${E}[20;3~`)).toBe('alt+f9')
+    expect(name(`${E}${E}[1;2P`)).toBe('alt+shift+f1')
+    expect(name(`${E}[1;5R`)).toBe('ctrl+f3')
+  })
+  test('OpenTUI reads all of them after the rewrite, Shift+F3 included', () => {
+    shift.forEach((s, i) => expect(opentui(`${E}[${s}`)).toBe(`shift+f${i + 1}`))
+    expect(opentui(`${E}[1;5R`)).toBe('ctrl+f3')
+    // without the rewrite OpenTUI drops Shift+F3: it looks like a cursor position report
+    expect(parseKeypress(`${E}[1;2R`, { useKittyKeyboard: true })).toBeNull()
+  })
+})
+
+describe('kitty keyboard protocol', () => {
+  test('F3 is CSI 13 ~; event sub-parameters; the CSI u code points', () => {
+    expect(name(`${E}[13;2~`)).toBe('shift+f3')
+    expect(name(`${E}[15;2:2~`)).toBe('shift+f5')
+    expect(decodeFKey(`${E}[1;2:3Q`)!.chord).toEqual({ n: 2, shift: true, ctrl: false, alt: false, release: true })
+    expect(name(`${E}[57364;2u`)).toBe('shift+f1')
+    expect(name(`${E}[57375;2u`)).toBe('shift+f12')
+    expect(family(`${E}[57365;2u`)).toBe('kitty-u')
+    // F13 and up are keys of their own (macOS keyboards have them)
+    expect(decodeFKey(`${E}[57376;2u`)).toBeUndefined()
+  })
+  test('OpenTUI reads the kitty forms itself (no rewrite)', () => {
+    expect(rewriteFKeyInput(`${E}[13;2~`, 'vt220', { cpr: true })).toBe(`${E}[13;2~`)
+    expect(opentui(`${E}[13;2~`)).toBe('shift+f3')
+    expect(opentui(`${E}[57364;2u`)).toBe('shift+f1')
+  })
+})
+
+describe('legacy numbered forms, per terminal profile', () => {
+  const codes = ['25~', '26~', '28~', '29~', '31~', '32~', '33~', '34~']
+  test('vt220 (F13 = Shift+F1): CSI 25~…34~ are Shift+F1…F8', () => {
+    codes.forEach((c, i) => expect(name(`${E}[${c}`, 'vt220')).toBe(`shift+f${i + 1}`))
+    expect(family(`${E}[25~`)).toBe('legacy-number')
+  })
+  test('rxvt and the Linux console (F11 = Shift+F1): Shift+F3…F10', () => {
+    codes.forEach((c, i) => expect(name(`${E}[${c}`, 'rxvt')).toBe(`shift+f${i + 3}`))
+    // CSI 23~ / 24~ stay F11 / F12 everywhere (rxvt's Shift+F1 / F2 cannot be told apart from them)
+    expect(name(`${E}[23~`, 'rxvt')).toBe('f11')
+  })
+  test('macOS Terminal.app: Shift+F5…F12', () => {
+    codes.forEach((c, i) => expect(name(`${E}[${c}`, 'apple')).toBe(`shift+f${i + 5}`))
+  })
+  test('modern terminals: legacy numbers mean nothing (Windows Terminal sends CSI 29~ for the Menu key)', () => {
+    for (const c of codes) expect(decodeFKey(`${E}[${c}`, 'modern')).toBeUndefined()
+    expect(rewriteFKeyInput(`${E}[29~`, 'modern', { cpr: true })).toBe(`${E}[29~`)
+  })
+  test('the rewrite gives OpenTUI the canonical form', () => {
+    expect(opentui(`${E}[25~`, 'vt220')).toBe('shift+f1')
+    expect(opentui(`${E}[26~`, 'vt220')).toBe('shift+f2')
+    expect(opentui(`${E}[33~`, 'apple')).toBe('shift+f11')
+    expect(opentui(`${E}[34~`, 'rxvt')).toBe('shift+f10')
+  })
+})
+
+describe('rxvt suffixes and the Linux console', () => {
+  test('$ Shift, ^ Ctrl, @ Ctrl+Shift', () => {
+    expect(name(`${E}[23$`)).toBe('shift+f11')
+    expect(name(`${E}[24$`)).toBe('shift+f12')
+    expect(name(`${E}[11^`)).toBe('ctrl+f1')
+    expect(name(`${E}[15^`)).toBe('ctrl+f5')
+    expect(name(`${E}[24^`)).toBe('ctrl+f12')
+    expect(name(`${E}[25^`)).toBe('ctrl+shift+f3')
+    expect(name(`${E}[23@`)).toBe('ctrl+shift+f11')
+    expect(family(`${E}[15^`)).toBe('rxvt-suffix')
+    expect(opentui(`${E}[23$`)).toBe('shift+f11')
+    expect(opentui(`${E}[15^`)).toBe('ctrl+f5')
+  })
+  test('editing keys with the same suffixes are not function keys', () => {
+    expect(decodeFKey(`${E}[2$`)).toBeUndefined()
+    expect(decodeFKey(`${E}[5^`)).toBeUndefined()
+    expect(rewriteFKeyInput(`${E}[3^`, 'rxvt', { cpr: true })).toBe(`${E}[3^`)
+  })
+  test('Linux console CSI [ A…E are F1…F5', () => {
+    expect(name(`${E}[[A`)).toBe('f1')
+    expect(name(`${E}[[E`)).toBe('f5')
+  })
+})
+
+describe('the rewrite', () => {
+  test('leaves cursor reports alone during the probe, and CSI 1;1R always', () => {
+    expect(rewriteFKeyInput(`${E}[1;2R`, 'vt220', { cpr: false })).toBe(`${E}[1;2R`)
+    expect(rewriteFKeyInput(`${E}[1;1R`, 'vt220', { cpr: true })).toBe(`${E}[1;1R`)
+    expect(rewriteFKeyInput(`${E}[12;40R`, 'vt220', { cpr: true })).toBe(`${E}[12;40R`)
+    expect(rewriteFKeyInput(`${E}[1;2R`, 'vt220', { cpr: true })).toBe(`${E}[13;2~`)
+  })
+  test('rewrites inside a chunk, keeps text and other sequences, never touches a paste', () => {
+    expect(rewriteFKeyInput(`ab${E}[25~${E}[A${E}[1;2R`, 'vt220', { cpr: true })).toBe(`ab${E}[11;2~${E}[A${E}[13;2~`)
+    expect(rewriteFKeyInput(`${E}[200~${E}[25~${E}[201~`, 'vt220', { cpr: true })).toBe(`${E}[200~${E}[25~${E}[201~`)
+    expect(rewriteFKeyInput('plain', 'vt220', { cpr: true })).toBe('plain')
+  })
+  test('canonical sequences', () => {
+    const c = (n: number, mods: Partial<FKeyChord> = {}): FKeyChord => ({ n, shift: false, ctrl: false, alt: false, ...mods })
+    expect(canonicalSequence(c(1, { shift: true }))).toBe(`${E}[11;2~`)
+    expect(canonicalSequence(c(3, { ctrl: true }))).toBe(`${E}[13;5~`)
+    expect(canonicalSequence(c(12))).toBe(`${E}[24~`)
+  })
+  test('on the stream: Buffer chunks before any listener; quiet after a resume; dispose restores', () => {
+    const stream = new EventEmitter()
+    const seen: string[] = []
+    stream.on('data', (d: Buffer | string) => seen.push(Buffer.isBuffer(d) ? d.toString('latin1') : d))
+    let now = 1000
+    const r = installFKeyRewrite(stream, 'vt220', () => now)
+    stream.emit('data', Buffer.from(`${E}[1;2R`))
+    stream.emit('data', Buffer.from(`${E}[25~`))
+    now += CPR_QUIET_MS
+    stream.emit('data', Buffer.from(`${E}[1;2R`))
+    r.quiet()
+    stream.emit('data', `${E}[1;2R`)
+    stream.emit('data', Buffer.from('é', 'utf8'))
+    r.dispose()
+    stream.emit('data', `${E}[25~`)
+    expect(seen).toEqual([`${E}[1;2R`, `${E}[11;2~`, `${E}[13;2~`, `${E}[1;2R`, Buffer.from('é', 'utf8').toString('latin1'), `${E}[25~`])
+  })
+})
+
+describe('key events and the profile', () => {
+  test('fkeyChord and bankKey: Shift (only) becomes the Shift bank; Ctrl+F keeps acting as F', () => {
+    expect(bankKey({ name: 'f2', sequence: `${E}[1;2Q`, shift: true }).name).toBe('shift+f2')
+    expect(bankKey({ name: 'f2', sequence: `${E}OQ` }).name).toBe('f2')
+    expect(bankKey({ name: 'f5', sequence: '', ctrl: true }).name).toBe('f5')
+    expect(bankKey({ name: 'f1', sequence: '', ctrl: true, shift: true }).name).toBe('f1')
+    expect(bankKey({ name: 'f9', sequence: '', meta: true, shift: true }).name).toBe('f9')
+    // a sequence OpenTUI left unnamed is decoded from its bytes
+    expect(bankKey({ name: '', sequence: `${E}[26~` }, 'vt220').name).toBe('shift+f2')
+    expect(bankKey({ name: 'menu', sequence: `${E}[29~` }, 'modern').name).toBe('menu')
+    expect(fkeyChord({ name: 'f13', sequence: '' })).toBeUndefined()
+    expect(fkeyChord({ name: 'x', sequence: 'x' })).toBeUndefined()
+    expect(shiftNumber({ name: 'shift+f10', sequence: '' })).toBe(10)
+    expect(shiftNumber({ name: 'f10', sequence: '' })).toBeUndefined()
+  })
+  test('legacyProfile from the environment', () => {
+    expect(legacyProfile({ TERM_PROGRAM: 'Apple_Terminal', TERM: 'xterm-256color' })).toBe('apple')
+    expect(legacyProfile({ TERM_PROGRAM: 'iTerm.app', TERM: 'xterm-256color' })).toBe('modern')
+    expect(legacyProfile({ WT_SESSION: 'x', TERM: 'xterm-256color' })).toBe('modern')
+    expect(legacyProfile({ TMUX: '/tmp/x', TERM: 'tmux-256color', TERM_PROGRAM: 'tmux' })).toBe('modern')
+    expect(legacyProfile({ TERM: 'rxvt-unicode-256color' })).toBe('rxvt')
+    expect(legacyProfile({ TERM: 'linux' })).toBe('rxvt')
+    expect(legacyProfile({ TERM: 'xterm' })).toBe('vt220')
+    expect(legacyProfile({ TERM: 'xterm', QQQ_FKEYS: 'apple' })).toBe('apple')
+    expect(legacyProfile({ TERM: 'xterm', QQQ_FKEYS: 'bogus' })).toBe('vt220')
+  })
+})

packages/tui/test/gaps-units.test.ts

@@ -243,6 +243,7 @@ test('collaboration: who is viewing (this user marked) and comment lines', () =>
   expect(viewingText([{ name: 'Admin', self: true }])).toBe('Viewing now: Admin (you)')
   expect(viewingText([{ name: 'Tester', self: true }, { name: 'Pat Smith' }])).toBe('Viewing now: Tester (you), Pat Smith · 1 other')
   expect(viewingText(undefined)).toBe('Viewing now: …')
+  expect(viewingText([{ name: 'Admin', self: true, connections: 2 }, { name: 'Pat Smith', connections: 1 }])).toBe('Viewing now: Admin ×2 (you), Pat Smith · 1 other')
   expect(commentLines({ authorDisplayName: 'Pat', body: 'hi @[Lee](user:7)', createdAt: undefined, replies: [{ authorDisplayName: 'Lee', body: 'ok' }] }, () => 'now')).toEqual(['Pat · now: hi @Lee', '    ↳ Lee · now: ok'])
 })
 

packages/tui/test/helpers.tsx

@@ -50,7 +50,8 @@ export interface Harness {
 /** Renders the whole TUI against the fake server and waits for the home screen. */
 export async function startTui(width = 120, height = 36, options: { metaData?: unknown; auth?: FakeAuth; secrets?: () => SecretStore; until?: 'home' | 'signin' } = {}): Promise<Harness> {
   const log: FakeLog = { requests: [] }
-  const store = boot({ args: parseArgs(['--profile', 'fake']), quit: () => undefined, build: 'test', secrets: options.secrets ?? sessionSecrets, fetch: fakeFetch(log, options.metaData, options.auth) })
+  // the sign-in tests drive the sign-in screen (--no-splash); the rest go through the splash
+  const store = boot({ args: parseArgs(['--profile', 'fake', ...(options.until === 'signin' ? ['--no-splash'] : [])]), quit: () => undefined, build: 'test', secrets: options.secrets ?? sessionSecrets, fetch: fakeFetch(log, options.metaData, options.auth) })
   const setup = await testRender(<App store={store} />, { width, height })
   const h: Harness = { setup, store, log, frame: () => setup.captureCharFrame() }
   store.captureScreen = () => setup.captureCharFrame()

packages/tui/test/mouse.test.tsx

@@ -101,8 +101,9 @@ test('F-key bar: a click presses the key; the footer connection opens the menu a
   expect(h.store.overlays.length).toBe(1)
   await press(h, () => h!.setup.mockInput.pressEscape())
   expect(h.store.overlays.length).toBe(0)
-  // the footer is the row above the F-key bar; its first cells are the server and profile: the Servers dialog
-  await press(h, () => mouse().click(2, 30 - 2))
+  // the footer is the row above the F-key bar (two rows from 30 lines: primary, then Shift); its
+  // first cells are the server and profile: the Servers dialog
+  await press(h, () => mouse().click(2, 30 - 3))
   await waitFor(h, () => h!.store.overlays.length === 1)
   expect(h.store.overlays[0]!.constructor.name).toBe('ServersOverlay')
 })

packages/tui/test/presence-connections.test.ts

@@ -0,0 +1,60 @@
+/*
+ * Copyright 2026 QRun.IO, Inc.
+ * Licensed under the Apache License, Version 2.0 (see LICENSE).
+ */
+
+import { expect, test } from 'bun:test'
+import { ExtensionRegistry, opaqueConnectionId } from '@qrun-io/qqq-core'
+import { collaborationPresence, presenceText } from '../src/presence'
+
+const registry = ExtensionRegistry.fromVersion({ extensions: [{ name: 'collaboration', version: '1.2.0' }] })
+
+/** A client stub answering presence calls; records the GET queries. */
+function client(answer: (query: Record<string, string | undefined>, own: string | undefined) => unknown) {
+  const queries: Array<Record<string, string | undefined>> = []
+  let own: string | undefined
+  return {
+    queries,
+    call: async (id: string, input: { query?: Record<string, string | undefined>; json?: { connectionId?: string } }) => {
+      if (input.json?.connectionId) own = input.json.connectionId
+      if (id === 'getQbitCollaborationPresence') queries.push(input.query ?? {})
+      const data = id === 'getQbitCollaborationPresence' ? answer(input.query ?? {}, own) : id === 'deleteQbitCollaborationPresence' ? { success: true } : { table: 'person', pk: '7', viewers: [] }
+      return { status: 200, headers: new Headers(), data, contentType: 'application/json' }
+    },
+  }
+}
+
+async function until(condition: () => boolean): Promise<void> {
+  for (let i = 0; i < 500 && !condition(); i++) await new Promise((r) => setTimeout(r, 2))
+}
+
+test('the record presence asks per connection: "Admin ×2", this terminal marked among the terminals', async () => {
+  const c = client((query, own) => ({
+    table: 'person', pk: '7', viewers: [{ userId: 'admin', displayName: 'Admin', mode: 'VIEWING', connections: 2 }, { userId: 'pat', displayName: 'Pat', mode: 'VIEWING', connections: 2 }], leaseCount: 4,
+    ...(query.perConnection === 'true' ? { leases: [
+      { userId: 'admin', displayName: 'Admin', mode: 'VIEWING', connections: 1, connectionId: opaqueConnectionId('admin', own ?? ''), since: '2026-11-01T12:00:00Z' },
+      { userId: 'admin', displayName: 'Admin', mode: 'EDITING', fieldName: 'name', connections: 1, connectionId: 'cffff', since: '2026-11-01T12:00:01Z' },
+    ] } : {}),
+  }))
+  const source = collaborationPresence(registry, c as never, 'Admin')!
+  source.enter!('record:person:7')
+  await until(() => Boolean(source.get('record:person:7').everyone?.length))
+  const p = source.get('record:person:7')
+  expect(c.queries[0]!.perConnection).toBe('true')
+  const admin = p.everyone!.find((x) => x.self)!
+  expect(admin.connections).toBe(2)
+  expect(admin.terminals!.map((t) => [t.mode, t.self ?? false])).toEqual([['VIEWING', true], ['EDITING', false]])
+  expect(presenceText(p)).toBe('1 other viewing: Pat ×2')
+  source.enter!(undefined)
+})
+
+test('a server without connections (collaboration 1.1.0) still shows everyone, once each', async () => {
+  const c = client(() => ({ table: 'person', pk: '7', viewers: [{ userId: 'admin', displayName: 'Admin', mode: 'VIEWING' }, { userId: 'pat', displayName: 'Pat', mode: 'EDITING' }] }))
+  const source = collaborationPresence(registry, c as never, 'Admin')!
+  source.enter!('record:person:7')
+  await until(() => Boolean(source.get('record:person:7').everyone?.length))
+  const p = source.get('record:person:7')
+  expect(p.everyone!.map((x) => [x.name, x.connections, x.terminals])).toEqual([['Admin', undefined, undefined], ['Pat', undefined, undefined]])
+  expect(presenceText(p)).toBe('1 other viewing: Pat')
+  source.enter!(undefined)
+})

packages/tui/test/print.test.tsx

@@ -5,8 +5,11 @@
 
 import { afterEach, beforeAll, beforeEach, expect, test } from 'bun:test'
 import { KeyCodes } from '@opentui/core/testing'
-import { printerOf, readRememberedPrinter, writeRememberedPrinter } from '@qrun-io/qqq-core'
-import { captureScreenText, printTargetOf, printerChoices } from '../src/printing'
+import { printerOf, readRememberedPrinter, writeFilePreferences, writeRememberedPrinter } from '@qrun-io/qqq-core'
+import { mkdtempSync, readFileSync, readdirSync } from 'node:fs'
+import { tmpdir } from 'node:os'
+import { join } from 'node:path'
+import { captureScreenText, contentSections, printTargetOf, printerChoices } from '../src/printing'
 import { printing } from './fake-print'
 import { command, isolate, press, startTui, waitFor, type Harness } from './helpers'
 
@@ -14,6 +17,7 @@ let h: Harness | undefined
 beforeAll(() => isolate())
 beforeEach(() => {
   printing.reset()
+  writeFilePreferences({ downloadMode: undefined, downloadDir: undefined })
   writeRememberedPrinter('fake', undefined)
 })
 afterEach(() => {
@@ -72,7 +76,7 @@ test('record: p opens the printer picker, Enter prints, the job is followed in t
   await press(h, () => h!.setup.mockInput.typeText('Virtual PDF'))
   await enter()
   await waitFor(h, () => printing.runs.length === 1)
-  expect(printing.runs[0]).toEqual({ values: { printingPrinterId: 'p1', printingCopies: 1 }, recordIds: '2' })
+  expect(printing.runs[0]).toMatchObject({ values: { printingPrinterId: 'p1', printingCopies: 1 }, recordIds: '2' })
   f = await waitFor(h, (x) => x.includes('Queued a print job for Person First2 Odd on Virtual PDF printer'))
   expect(h.store.status.print).toBe('print 0/1 QUEUED')
   await poll()
@@ -102,7 +106,7 @@ test('grid: Space selects records, p, "a record sheet for each selected row" pri
   expect(f).toContain('Back office laser  (last used)')
   await enter()
   await waitFor(h, () => printing.runs.length === 1)
-  expect(printing.runs[0]).toEqual({ values: { printingPrinterId: 'p3', printingCopies: 1 }, recordIds: '1,2' })
+  expect(printing.runs[0]).toMatchObject({ values: { printingPrinterId: 'p3', printingCopies: 1 }, recordIds: '1,2' })
   await waitFor(h, () => h!.store.status.print === 'print 0/2 QUEUED')
   await poll()
   await poll()
@@ -206,20 +210,88 @@ test('Ctrl+P on a record prints its record sheet; F8 says Print where there is n
   expect(f).toContain('8Print')
   expect(printTargetOf(h.store.screen)).toEqual({ kind: 'text', title: h.store.screen!.title() })
   await press(h, () => h!.setup.mockInput.pressKey(KeyCodes.F8))
-  f = await waitFor(h, (x) => x.includes('Print this screen'))
+  f = await waitFor(h, (x) => x.includes('Print what?'))
+  // Content first (the default), Screen second
+  expect(f.indexOf('Content')).toBeLessThan(f.indexOf('Screen  '))
+  await enter()
+  f = await waitFor(h, (x) => x.includes('Print the content of'))
   await enter()
   await waitFor(h, () => printing.listRuns.at(-1)?.values.printingPrinterId !== undefined)
   const run = printing.listRuns.at(-1)!
   expect(run.process).toBe('printingPrintText')
+  const sections = JSON.parse(String(run.values.sections)) as Array<{ title: string; lines: string[] }>
+  expect(sections.length).toBeGreaterThan(0)
+  const content = JSON.stringify(sections)
+  expect(content).not.toContain('Apps (Tab)')
+  expect(content).not.toContain('│')
+  expect(content).not.toContain('1Help')
+  // the app header and footer
+  expect(run.values.headerApp).toBe('Fake')
+  expect(run.values.headerTitle).toBe(h.store.screen!.title())
+  expect(String(run.values.headerServer)).toContain('fake.test')
+  expect(run.values.headerUser).toBe(h.store.status.user)
+  expect(String(run.values.headerPrintedAt)).toMatch(/\d/)
+  expect(String(run.values.footerLeft)).toMatch(/^qqq ui \d+\.\d+\.\d+(?:-[0-9A-Za-z.-]+)? · .*fake\.test/)
+})
+
+test('Print what? → Screen prints the terminal as drawn; a record print carries the breadcrumb', async () => {
+  printing.enabled = true
+  h = await startTui(120, 36)
+  await ctrlP()
+  await waitFor(h, (x) => x.includes('Print what?'))
+  await arrow('down')
+  await enter()
+  await waitFor(h, (x) => x.includes('Print this screen'))
+  await enter()
+  await waitFor(h, () => printing.listRuns.at(-1)?.values.printingPrinterId !== undefined)
+  const run = printing.listRuns.at(-1)!
+  expect(run.values.sections).toBeUndefined()
   expect(String(run.values.text)).toContain('Apps')
   expect(String(run.values.text)).not.toContain('1Help')
+  await command(h, 'table get person 2')
+  await waitFor(h, (f) => f.includes('First2 Odd'))
+  await ctrlP()
+  await waitFor(h, (x) => x.includes('Print Person First2 Odd on…'))
+  await press(h, () => h!.setup.mockInput.typeText('Virtual PDF'))
+  await enter()
+  await waitFor(h, () => printing.runs.length === 1)
+  expect(printing.runs[0]!.values.headerTitle).toBe('People › Person › First2 Odd')
 })
 
+test('content sections: the content panel only, inner panels as titled sections in reading order, no borders, no key hint', () => {
+  const frame = [
+    ' Fake ─ Home                                                Tester ',
+    '┌─ Apps (Tab) ─┐┌─ Home ───────────────────────────────────────────┐',
+    '│▸ People      ││Good morning, Tester                               │',
+    '│              ││┌─ Recently viewed ─┐┌─ Quick actions ───────────┐ │',
+    '│              │││ Ada Lovelace      ││ ▷ Simple Sleep       run  │ │',
+    '│              │││ Blair Sample      ││ + New Person      create  │ │',
+    '│              ││└───────────────────┘└───────────────────────────┘ │',
+    '│              ││ Applications (2)                                  │',
+    '│              ││ a actions · Tab panels · Esc back                 │',
+    '└──────────────┘└───────────────────────────────────────────────────┘',
+    ' fake.test · fake · mock session · jobs n/a ',
+    ' 1Help 2Search 8Print ',
+  ].join('\n')
+  const sections = contentSections(frame)
+  expect(sections).toEqual([
+    { title: '', lines: ['Good morning, Tester'] },
+    { title: 'Recently viewed', lines: ['Ada Lovelace', 'Blair Sample'] },
+    { title: 'Quick actions', lines: ['▷ Simple Sleep       run', '+ New Person      create'] },
+    { title: '', lines: ['Applications (2)'] },
+  ])
+  expect(contentSections('')).toEqual([])
+  // a panel cut off by the bottom of the content panel still becomes a section
+  const clipped = [' t', '┌─ Main ──────────────┐', '│┌─ Apps grid ───────┐│', '││ Alerts  Cluster   ││', '││ 3 tables          ││', ' status', ' keys'].join('\n')
+  expect(contentSections(clipped)).toEqual([{ title: 'Apps grid', lines: ['Alerts  Cluster', '3 tables'] }])
+})
+
+
 test('Print Screen (when the terminal passes it on) and :print <printer> print without the picker', async () => {
   printing.enabled = true
   h = await startTui(120, 36)
   await press(h, () => h!.store.handleKey({ name: 'printscreen', sequence: '' } as never))
-  await waitFor(h, (x) => x.includes('Print this screen'))
+  await waitFor(h, (x) => x.includes('Print what?'))
   await esc()
   await command(h, 'print back office')
   await waitFor(h, () => printing.listRuns.length === 1 && printing.listRuns[0]!.values.printingPrinterId === 'p3')
@@ -232,3 +304,67 @@ test('the screen capture drops the status line and the function-key bar and trim
   expect(captureScreenText(store)).toBe(' Title bar\n body line')
   expect(captureScreenText({} as never)).toBe('')
 })
+
+test('Save as PDF is the first picker entry: a record renders on the server and saves like a download (silent mode: the download folder, stamped name)', async () => {
+  printing.enabled = true
+  const folder = mkdtempSync(join(tmpdir(), 'qqq-tui-pdf-'))
+  writeFilePreferences({ downloadMode: 'silent', downloadDir: folder })
+  h = await startTui(120, 36)
+  await command(h, 'table get person 2')
+  await waitFor(h, (f) => f.includes('First2 Odd'))
+  await ctrlP()
+  const f = await waitFor(h, (x) => x.includes('Print Person First2 Odd on…'))
+  const picker = f.split('\n').filter((l) => l.includes('║'))
+  expect(picker.findIndex((l) => l.includes('Save as PDF…'))).toBeLessThan(picker.findIndex((l) => l.includes('Back office laser')))
+  await press(h, () => h!.setup.mockInput.typeText('Save as PDF'))
+  await enter()
+  await waitFor(h, (x) => x.includes('Saved '))
+  expect(printing.renders).toMatchObject([{ kind: 'RECORD', tableName: 'person', recordId: '2' }])
+  expect(printing.runs).toEqual([])
+  const files = readdirSync(folder)
+  expect(files.length).toBe(1)
+  expect(files[0]).toMatch(/^Person-2_\d{4}-\d{2}-\d{2}_\d{6}\.pdf$/)
+  expect(readFileSync(join(folder, files[0]!), 'utf8')).toStartWith('%PDF-1.7 /download/Person-2.pdf')
+})
+
+test('Save as PDF on a grid saves the table list; with the dialog (default mode) the save dialog offers the stamped name', async () => {
+  printing.enabled = true
+  h = await startTui(140, 40)
+  await command(h, 'table query person -w "lastName = Odd"')
+  await waitFor(h, (f) => f.includes('First2 '))
+  await ctrlP()
+  await waitFor(h, (x) => x.includes('Print Person: what?'))
+  await enter()
+  await waitFor(h, (x) => x.includes('Print Person: 15 rows on…'))
+  await press(h, () => h!.setup.mockInput.typeText('Save as PDF'))
+  await enter()
+  const f = await waitFor(h, (x) => x.includes('Save as PDF') && /Person_\d{4}-\d{2}-\d{2}_\d{6}\.pdf/.test(x))
+  expect(f).toContain('Name')
+  const render = printing.renders[0]!
+  expect(render.kind).toBe('LIST')
+  expect(render.scope).toBe('ALL')
+  expect(JSON.parse(String(render.filterJSON)).criteria[0]).toMatchObject({ fieldName: 'lastName', values: ['Odd'] })
+  expect(render.printingPrinterId).toBeUndefined()
+})
+
+test(':print pdf saves the screen as a PDF without the picker; a server without the render process shows no Save as PDF entry', async () => {
+  printing.enabled = true
+  const folder = mkdtempSync(join(tmpdir(), 'qqq-tui-pdf-'))
+  writeFilePreferences({ downloadMode: 'silent', downloadDir: folder })
+  h = await startTui(120, 36)
+  await command(h, 'print pdf')
+  await waitFor(h, (x) => x.includes('Saved '))
+  expect(printing.renders[0]!.kind).toBe('TEXT')
+  expect(String(printing.renders[0]!.text)).toContain('Apps')
+  expect(readdirSync(folder)[0]).toMatch(/_\d{4}-\d{2}-\d{2}_\d{6}\.pdf$/)
+  await esc()
+  printing.render = false
+  // F10 › Reset refreshes the metadata: the render process is gone
+  await command(h, 'reset')
+  await waitFor(h, () => h!.store.screen?.kind === 'home')
+  await command(h, 'table get person 2')
+  await waitFor(h, (x) => x.includes('First2 Odd'))
+  await ctrlP()
+  const f = await waitFor(h, (x) => x.includes('Print Person First2 Odd on…'))
+  expect(f).not.toContain('Save as PDF…')
+})

packages/tui/test/record-collab.test.ts

@@ -93,3 +93,29 @@ test('panel rows: tags, latest two comments, tasks with the next due, files, fol
   expect(rows.filter((r) => r.key === 'C').length).toBe(5)
   expect(panelRows(busy, PANEL_WIDTH - 1, 5)).toHaveLength(5)
 })
+
+test('two terminals of one user: "×2" on the strip and in the panel, each terminal with its mode and start', () => {
+  const since = '2026-11-01T12:00:05Z'
+  const local = new Date(since).toTimeString().slice(0, 5)
+  const twice: CollabState = {
+    ...alone,
+    everyone: [
+      { name: 'Admin', self: true, mode: 'EDITING', fieldName: 'name', connections: 2, terminals: [{ mode: 'EDITING', fieldName: 'name', since }, { mode: 'VIEWING', self: true }] },
+      { name: 'Pat Smith', mode: 'VIEWING', connections: 3 },
+    ],
+  }
+  expect(text(twice, 200)).toContain('viewing: Pat Smith ×3 (viewing)')
+  expect(text({ ...alone, everyone: [twice.everyone![0]!] }, 200).trimEnd()).toEndWith('viewing: Admin ×2 (you)')
+  const lines = panelRows(twice, PANEL_WIDTH - 1, 40).map((r) => r.text.trimEnd())
+  expect(lines.slice(lines.indexOf(' Viewing now'))).toEqual([
+    ' Viewing now',
+    '   Pat Smith ×3 · viewing',
+    '   Admin ×2 (you) · editing name',
+    '     this terminal · viewing',
+    `     #2 · editing name · ${local}`,
+  ])
+  // a server before collaboration 1.2.0 sends no connections: no "×", no terminal lines
+  const old = panelRows(busy, PANEL_WIDTH - 1, 40).map((r) => r.text.trimEnd())
+  expect(old.join('\n')).not.toContain('×')
+  expect(old.join('\n')).not.toContain('this terminal')
+})

packages/tui/test/saver.test.tsx

@@ -7,6 +7,7 @@ import { afterAll, beforeAll, describe, expect, test } from 'bun:test'
 import { removePin, setPin } from '@qrun-io/qqq-core'
 import { UiApiError } from '@qrun-io/qqq-ui-api-client'
 import { SaverOverlay } from '../src/overlays/saver'
+import { setPresenceSource } from '../src/presence'
 import { FONT_HEIGHT, blockText, blockWidth, canDraw } from '../src/saver/font'
 import { ALTERNATE_MILLIS, AUTO_STYLE_MILLIS, FRAME_MILLIS, SHIFT_MILLIS, bounce, bounceLayout, isDimmed, logoName, nextFrameDelay, paintSaver, saverFrame, styleAt, type SaverInput, type SaverTile } from '../src/saver/layout'
 import { EventRate, MAX_BACKOFF_MS, TileModel, isAbsent, sparkline, type TileSource, type TileValue } from '../src/saver/model'
@@ -126,17 +127,69 @@ describe('sources', () => {
     const s = presenceSource(ctx({ now: () => t, data: (_id, input) => ({ viewers: viewers[(input as { query: { table: string } }).query.table] ?? [] }) }))
     const v = await s.load()
     expect(v.value).toBe('3')
-    expect(v.detail).toMatch(/^Bob · PERSON, Carol editing · ORDER, you elsewhere · PERSON$/)
+    expect(v.detail).toBe('3 online · you, Bob · PERSON, Carol editing · ORDER')
     viewers.person = []
     viewers.order = []
     t = 120_000
-    expect((await s.load()).value).toBe('0')
+    expect((await s.load()).value).toBe('1')
+  })
+
+  test('presence counts connections: two terminals of one user are 2 online; older servers count each person once', async () => {
+    const viewers: Record<string, Array<{ userId: string; displayName: string; mode: string; connections?: number }>> = {
+      person: [{ userId: 'core:me', displayName: 'Me', mode: 'VIEWING', connections: 1 }, { userId: 'u:bob', displayName: 'Bob', mode: 'VIEWING', connections: 2 }],
+      order: [{ userId: 'core:me', displayName: 'Me', mode: 'VIEWING', connections: 1 }],
+    }
+    const s = presenceSource(ctx({ data: (_id, input) => ({ viewers: viewers[(input as { query: { table: string } }).query.table] ?? [] }) }))
+    const v = await s.load()
+    expect(v.value).toBe('4')
+    expect(v.detail).toBe('4 online · you ×2, Bob ×2 · PERSON')
+    // only this terminal's own lease, no "connections" (collaboration 1.1.0): you, once
+    const old = presenceSource(ctx({ data: () => ({ viewers: [{ userId: 'core:me', displayName: 'Me', mode: 'VIEWING' }] }) }))
+    const o = await old.load()
+    expect(o.value).toBe('1')
+    expect(o.detail).toBe('1 online · you')
   })
 
   test('presence on a table that refuses it is skipped; the source hides when nothing is left', async () => {
-    const s = presenceSource(ctx({ data: () => { throw new UiApiError(404, {}) } }))
-    await s.load()
-    await expect(s.load()).rejects.toThrow('no tables')
+    const refuse = () => { throw new UiApiError(404, {}) }
+    // signed out: nothing to show once every table refuses
+    const out = presenceSource(ctx({ status: () => ({ apiVersion: '1', pingMs: 1, stream: 'connected', lastEvent: '', user: '' }), data: refuse }))
+    await out.load()
+    await expect(out.load()).rejects.toThrow('no tables')
+    // signed in: never "nobody around", this terminal is online
+    const me = presenceSource(ctx({ data: refuse }))
+    await me.load()
+    const v = await me.load()
+    expect(v.value).toBe('1')
+    expect(v.detail).toBe('1 online · you')
+  })
+
+  test('online by session: sessions active in the last 10 minutes, own sessions counted, others by user', async () => {
+    const queries: unknown[] = []
+    const rows = [{ userId: 'core:me' }, { userId: 'core:me' }, { userId: 'core:bob' }]
+    const client = { query: async (_t: string, f: unknown) => { queries.push(f); return rows.map((values) => ({ values })) }, data: async () => ({}), count: async () => 0 }
+    const mk = (over: Partial<SaverContext> & { data?: (id: string, input: unknown) => unknown } = {}) => ctx({ client: client as never, sessionTable: () => 'storedSession', now: () => 1_000_000_000_000, ...over })
+    const v = await presenceSource(mk()).load()
+    expect(v.value).toBe('3 online')
+    expect(v.detail).toBe('3 sessions · 2 users (you ×2, bob)')
+    expect(v.big).toBe('3')
+    const f = queries[0] as { criteria: Array<{ fieldName: string; operator: string; values: string[] }> }
+    expect(f.criteria[0]).toMatchObject({ fieldName: 'modifyDate', operator: 'GREATER_THAN', values: [new Date(1_000_000_000_000 - 600_000).toISOString()] })
+    // the owner's case: the same user twice
+    rows.splice(2, 1)
+    expect((await presenceSource(mk()).load()).detail).toBe('2 sessions · 1 user (you ×2)')
+    // an empty session table (a mock-auth server stores none) falls back to presence and still counts you
+    rows.length = 0
+    const fb = await presenceSource(mk({ data: () => ({ viewers: [] }) })).load()
+    expect(fb.value).toBe('1')
+    expect(fb.detail).toBe('1 online · you')
+    // no session table, no collaboration: the tile hides
+    expect(presenceSource(ctx({ has: () => false })).present()).toBe(false)
+    expect(presenceSource(ctx({ has: () => false, sessionTable: () => 'storedSession' })).present()).toBe(true)
+    // a session table the user may not read is skipped for good
+    const denied = { ...client, query: async () => { throw new UiApiError(403, {}) } }
+    const d = presenceSource(mk({ client: denied as never, data: () => ({ viewers: [] }) }))
+    expect((await d.load()).value).toBe('1')
   })
 
   test('jobs: counts by status, falls back to my jobs on 403', async () => {
@@ -170,7 +223,7 @@ describe('sources', () => {
 
 describe('Query', () => {
   test('both sizes have their documented size; braille round-trips; mirrored and blinking frames differ', () => {
-    for (const size of ['small', 'large'] as const) {
+    for (const size of ['small', 'medium', 'large'] as const) {
       const { width, height } = querySize(size)
       const frame = queryFrame(size)
       expect(frame.length).toBe(height)
@@ -187,6 +240,49 @@ describe('Query', () => {
     expect(mirrorAscii("(/`")).toBe("'\\)")
   })
 
+  test('every size keeps the logo\'s silhouette: floppy ear left of the head and snout, tail curled at the low left, sitting body, front legs and the ground line at the bottom', () => {
+    expect(querySize('large')).toEqual({ width: 42, height: 22 })
+    expect(querySize('medium')).toEqual({ width: 25, height: 13 })
+    expect(querySize('small')).toEqual({ width: 17, height: 9 })
+    for (const size of ['large', 'medium', 'small'] as const) {
+      const rows = queryFrame(size)
+      const bits = decodeBraille(rows)
+      const H = bits.length
+      const W = bits[0]!.length
+      const dots = (y0: number, y1: number, x0 = 0, x1 = W) => {
+        const out: Array<[number, number]> = []
+        for (let y = Math.floor(y0 * H); y < Math.ceil(y1 * H); y++) for (let x = Math.floor(x0 * W); x < Math.ceil(x1 * W); x++) if (bits[y]?.[x]) out.push([x, y])
+        return out
+      }
+      const minX = (d: Array<[number, number]>) => Math.min(...d.map((p) => p[0]))
+      const maxX = (d: Array<[number, number]>) => Math.max(...d.map((p) => p[0]))
+      // the picture is the logo's: dots across the whole height and most of the width, nothing past the cells
+      expect(dots(0, 1).length).toBeGreaterThan(H)
+      expect(rows.length).toBe(querySize(size).height)
+      // head and ear: the top third; the ear (its left edge) is well left of the snout (the right edge), the snout is the rightmost thing up there
+      const head = dots(0, 0.34)
+      expect(head.length).toBeGreaterThan(5)
+      expect(maxX(head)).toBeGreaterThan(W * 0.7)
+      expect(minX(head)).toBeLessThan(W * 0.55)
+      expect(maxX(head) - minX(head)).toBeGreaterThan(W * 0.3)
+      // the top of the head sits above the middle of the back, right of the tail
+      expect(minX(head)).toBeGreaterThan(W * 0.2)
+      // the tail: ink in the low-left corner, left of where the body's back reaches the ground
+      const tail = dots(0.6, 1, 0, 0.22)
+      expect(tail.length).toBeGreaterThan(4)
+      // the sitting body: the chest edge at the right in the middle rows and the haunch at the left
+      const middle = dots(0.4, 0.75)
+      expect(maxX(middle)).toBeGreaterThan(W * 0.6)
+      expect(minX(middle)).toBeLessThan(W * 0.5)
+      // front legs and the ground line: the bottom row of cells spans most of the width
+      const ground = dots(0.84, 1)
+      expect(maxX(ground) - minX(ground)).toBeGreaterThan(W * 0.6)
+      expect(maxX(ground)).toBeGreaterThan(W * 0.7)
+      // the eye is inside the head, right of the ear's left edge
+      expect(queryFrame(size, { blink: true })).not.toEqual(rows)
+    }
+  })
+
   test('poses: blinks, acts every ten seconds, faces the way he drifts', () => {
     expect(queryPoseAt(0).blink).toBe(true)
     expect(queryPoseAt(1000).blink).toBe(false)
@@ -520,7 +616,7 @@ describe('burn-in guard', () => {
             const cy = (minY + maxY) / 2
             for (const r of spans) {
               expect(Math.abs((r.from + r.to) / 2 - cx)).toBeLessThanOrEqual(width * 0.4)
-              expect(Math.abs(r.y - cy)).toBeLessThanOrEqual(height * 0.4 + 1)
+              expect(Math.abs(r.y - cy)).toBeLessThanOrEqual(height * 0.4 + 2)
             }
             {
               // the group as a whole stays near the middle of the screen, fully on it
@@ -688,6 +784,31 @@ describe('in the TUI', () => {
     await command(h, 'saver dim 10')
   })
 
+  test('the saver keeps the presence lease of the screen under it (others see an idle viewer, not a gone one); waking resyncs', async () => {
+    const calls: Array<string | undefined> = []
+    const none = { count: 0, people: [] }
+    setPresenceSource({ get: () => none, subscribe: () => () => undefined, enter: (scope) => { calls.push(scope) } })
+    try {
+      await command(h, 'table query person')
+      await waitFor(h, (f) => f.includes('30 records'))
+      expect(calls.at(-1)).toBe('table:person')
+      calls.length = 0
+      await command(h, 'saver flip')
+      await waitFor(h, (f) => f.includes('preview: flip'))
+      // never left (the same scope may be announced again; the source ignores a repeat)
+      expect(calls.every((c) => c === 'table:person')).toBe(true)
+      await press(h, () => h.setup.mockInput.typeText('x'))
+      expect(h.store.lock).toBeUndefined()
+      h.store.bump()
+      await waitFor(h, (f) => f.includes('30 records'))
+      expect(calls.includes(undefined)).toBe(false)
+      expect(calls.every((c) => c === 'table:person')).toBe(true)
+    } finally {
+      setPresenceSource(undefined)
+      h.store.back()
+    }
+  })
+
   test('F9 → Settings lists the saver style, refresh and preview', () => {
     const labels = (h.store.commands() as unknown as { entries(f: string): Array<{ label: string }> }).entries('').map((e) => e.label)
     expect(labels.some((l) => l.startsWith('Screen saver style:'))).toBe(true)

packages/tui/test/shift-bank.test.tsx

@@ -0,0 +1,319 @@
+/*
+ * Copyright 2026 QRun.IO, Inc.
+ * Licensed under the Apache License, Version 2.0 (see LICENSE).
+ */
+
+/** The Shift bank (Shift+F1…F10): the table, the bar in one and two rows, dispatch, the mouse, help. */
+
+import { afterEach, beforeAll, expect, test } from 'bun:test'
+import { testRender } from '@opentui/react/test-utils'
+import { readConfig } from '@qrun-io/qqq-core'
+import { App } from '../src/app'
+import { boot, parseArgs } from '../src/boot'
+import { ACTIONS } from '../src/keys/actions'
+import { SHIFT_BANK, fkeyBarRows, shiftSlots } from '../src/keys/shift-bank'
+import { shiftRowCells, slotWidths } from '../src/keys/shift-row'
+import { CPR_QUIET_MS, installFKeyRewrite } from '../src/keys/stdin-rewrite'
+import { fkeyAt } from '../src/mouse/hit'
+import { SqlRunnerScreen } from '../src/sql/screen'
+import { fakeFetch, type FakeLog } from './fake-server'
+import { sqlFakeFetch } from './fake-sql'
+import { command, isolate, press, sessionSecrets, startTui, waitFor, type Harness } from './helpers'
+
+let h: Harness | undefined
+
+beforeAll(() => isolate())
+afterEach(() => {
+  h?.store.dispose()
+  h?.setup.renderer.destroy()
+  h = undefined
+})
+
+const E = '\x1b'
+/** Raw bytes into the terminal, as a terminal would send them. */
+const raw = (seq: string) => press(h!, () => h!.setup.mockInput.pressKeys([seq]))
+const lines = (frame: string) => frame.replace(/\n$/, '').split('\n')
+const fits = (frame: string, width: number) => lines(frame).every((l) => [...l].length <= width)
+const last = (frame: string, n = 1) => lines(frame).slice(-n)
+
+async function start(width: number, height: number, fkeyBar?: 'one' | 'two' | 'auto', fetch?: typeof globalThis.fetch): Promise<Harness> {
+  const log: FakeLog = { requests: [] }
+  const store = boot({ args: parseArgs(['--profile', 'fake']), quit: () => undefined, build: 'test', secrets: sessionSecrets, fetch: fetch ?? fakeFetch(log) })
+  if (fkeyBar) store.settings.fkeyBar = fkeyBar
+  const setup = await testRender(<App store={store} />, { width, height })
+  const harness: Harness = { setup, store, log, frame: () => setup.captureCharFrame() }
+  store.captureScreen = () => setup.captureCharFrame()
+  await waitFor(harness, () => harness.store.screen?.kind === 'home' && Boolean(harness.store.meta))
+  return harness
+}
+
+/** Changes the bar mode and repaints. */
+async function mode(m: 'one' | 'two' | 'auto'): Promise<string> {
+  h!.store.settings.fkeyBar = m
+  h!.store.bump()
+  return press(h!, () => undefined)
+}
+
+/** The fake server with the assistant extension (enough for the panel to open). */
+function assistantFetch(): typeof fetch {
+  const base = fakeFetch({ requests: [] })
+  const json = (d: unknown) => new Response(JSON.stringify(d), { headers: { 'content-type': 'application/json' } })
+  return (async (input: RequestInfo | URL, init?: RequestInit) => {
+    const path = new URL(new Request(input as RequestInfo, init).url).pathname.replace('/qqq/v1', '')
+    if (path === '/version') return json({ apiVersion: '1.9.0', features: ['metaData', 'tables', 'processes'], extensions: [{ name: 'assistant', version: '1.7.0', pathPrefix: '/assistant' }] })
+    if (path === '/assistant/config') return json({ enabled: true, model: 'm', profile: { displayName: 'Assistant' } })
+    return base(input, init)
+  }) as typeof fetch
+}
+
+// ---- the table ----
+
+test('the bank is one table of ten keys, each bound to a named action, with short labels for 80 columns', () => {
+  expect(SHIFT_BANK.map((k) => k.n)).toEqual([1, 2, 3, 4, 5, 6, 7, 8, 9, 10])
+  expect(SHIFT_BANK.map((k) => k.label)).toEqual(['Keys', 'Servers', 'SQL', 'Bulk', 'Metadata', 'Views', 'Copy', 'Export', 'History', 'Assistant'])
+  for (const k of SHIFT_BANK) {
+    expect(ACTIONS[k.action]).toBeDefined()
+    expect(k.short.length).toBeLessThanOrEqual(5)
+  }
+  // the assistant toggle is the named action F12 and Ctrl+G bind too
+  expect(SHIFT_BANK.find((k) => k.n === 10)!.action).toBe('assistant.toggle')
+})
+
+test('rows: auto is two from 30 lines; one and two are fixed', () => {
+  expect(fkeyBarRows('auto', 29)).toBe(1)
+  expect(fkeyBarRows('auto', 30)).toBe(2)
+  expect(fkeyBarRows(undefined, 40)).toBe(2)
+  expect(fkeyBarRows('one', 40)).toBe(1)
+  expect(fkeyBarRows('two', 24)).toBe(2)
+})
+
+test('row cells: the primary arithmetic, ⇧ on the first number, short labels below 100 columns, clipped', () => {
+  expect(slotWidths(80, 10)).toEqual([8, 8, 8, 8, 8, 8, 8, 8, 8, 8])
+  expect(slotWidths(120, 12).reduce((a, b) => a + b, 0)).toBe(120)
+  const slots = SHIFT_BANK.map((k) => ({ n: k.n, label: k.label, global: k.label, short: k.short }))
+  const narrow = shiftRowCells(slots, 80)
+  expect(narrow[0]!.num).toBe('⇧1')
+  expect(narrow[1]!.label.trim()).toBe('Servr')
+  expect(narrow.map((c) => c.num + c.label).join('').length).toBe(80)
+  expect(shiftRowCells(slots, 120)[4]!.label.trim()).toBe('Metadata')
+  expect(shiftRowCells(slots, 80, true)[0]!.num).toBe('S1')
+  // twelve slots (when the primary row has 11 and 12) line up; 11 and 12 are blank
+  expect(shiftRowCells([...slots, { n: 11, label: null, global: '', short: '' }, { n: 12, label: null, global: '', short: '' }], 120).length).toBe(12)
+})
+
+// ---- the bar ----
+
+test('80×24 auto: one row; a Shift+F press shows the Shift row for 2 s, then the primary row again', async () => {
+  h = await start(80, 24)
+  let f = h.frame()
+  expect(fits(f, 80)).toBe(true)
+  expect(last(f)[0]).toContain(' 1Help')
+  expect(f).not.toContain('⇧1')
+  // Shift+F2 (xterm form): the Servers dialog; the bar swaps to the Shift row
+  await raw(`${E}[1;2Q`)
+  expect(h.store.overlays[0]!.constructor.name).toBe('ServersOverlay')
+  f = h.frame()
+  expect(last(f)[0]).toStartWith('⇧1Keys')
+  expect(last(f)[0]).toContain('2Servr')
+  expect(last(f)[0]).toContain('9Hist')
+  expect(fits(f, 80)).toBe(true)
+  // after the 2 s the primary row is back
+  h.store.shiftRowUntil = Date.now() - 1
+  h.store.bump()
+  f = await press(h, () => undefined)
+  expect(last(f)[0]).toContain(' 1Help')
+})
+
+test('80×24 two rows: primary then Shift, the footer above them, nothing wider than 80', async () => {
+  h = await start(80, 24, 'two')
+  const f = h.frame()
+  expect(fits(f, 80)).toBe(true)
+  const [primary, shift] = last(f, 2)
+  expect(primary).toContain(' 1Help')
+  expect(primary).toContain('10Quit')
+  expect(shift).toStartWith('⇧1Keys')
+  expect(shift).toContain('10Asst')
+  expect(lines(f).length).toBe(24)
+})
+
+test('120×40 auto: two rows with full labels; one-row mode keeps the primary row', async () => {
+  h = await start(120, 40)
+  let f = h.frame()
+  expect(fits(f, 120)).toBe(true)
+  const [primary, shift] = last(f, 2)
+  expect(primary).toContain(' 1Help')
+  expect(shift).toStartWith('⇧1Keys')
+  for (const label of ['2Servers', '3SQL', '4Bulk', '5Metadata', '6Views', '7Copy', '8Export', '9History', '10Asst']) expect(shift).toContain(label)
+  // the primary row has 11 and 12 from 120 columns: the Shift row lines up with it (11 and 12 unbound)
+  expect(shift).toMatch(/11\s+12\s*$/)
+  expect(shift.indexOf(' 9History')).toBe(primary.indexOf(' 9Menu'))
+  expect(lines(f).length).toBe(40)
+  f = await mode('one')
+  expect(last(f)[0]).toContain(' 1Help')
+  expect(f).not.toContain('⇧1Keys')
+  expect(lines(f).length).toBe(40)
+  await press(h, () => h!.setup.mockInput.pressKey('F9', { shift: true }))
+  f = await waitFor(h, () => h!.store.screen?.kind === 'history')
+  expect(last(f)[0]).toStartWith('⇧1Keys')
+})
+
+test('context: keys that do not apply are dimmed and say why; on a grid Bulk, Views, Copy and Export apply', async () => {
+  h = await start(120, 40)
+  const home = Object.fromEntries(shiftSlots(h.store).map((s) => [s.global, s.why]))
+  expect(home.Keys).toBeUndefined()
+  expect(home.Servers).toBeUndefined()
+  expect(home.SQL).toContain('sql-workbench')
+  expect(home.Bulk).toContain('table grid')
+  expect(home.Views).toContain('table grid')
+  expect(home.Copy).toBeDefined()
+  expect(home.Export).toContain('table grid')
+  expect(home.History).toBeUndefined()
+  expect(home.Assistant).toContain('assistant extension')
+  // Shift+F3 in the xterm form without the stdin rewrite (main.tsx installs it): OpenTUI takes it for a cursor report
+  await raw(`${E}[1;2R`)
+  expect(h.store.overlays.length).toBe(0)
+  await press(h, () => h!.setup.mockInput.pressKey('F10', { shift: true }))
+  expect(h.store.flashText?.text).toContain('Shift+F10 Assistant: needs the assistant extension')
+  expect(h.store.assistantOpen).toBe(false)
+  await command(h, 'table query person')
+  await waitFor(h, (f) => f.includes('First1 '))
+  const grid = Object.fromEntries(shiftSlots(h.store).map((s) => [s.global, s.why]))
+  expect(grid.Views).toBeUndefined()
+  expect(grid.Export).toBeUndefined()
+  // person has no TABLE_INSERT capability in the fake: Copy is dimmed and says so
+  expect(grid.Copy).toBe('copying needs permission to create records')
+  await press(h, () => h!.setup.mockInput.pressKey('F7', { shift: true }))
+  expect(h.store.flashText?.text).toBe('Shift+F7 Copy: copying needs permission to create records')
+  expect(h.store.screen?.kind).toBe('table')
+})
+
+// ---- dispatch ----
+
+test('dispatch on a grid: Shift+F8 export, Shift+F6 saved views, Shift+F4 bulk, Shift+F7 copy, Shift+F5 metadata, Shift+F1 keys', async () => {
+  h = await start(120, 40)
+  await command(h, 'table query person')
+  await waitFor(h, (f) => f.includes('First1 '))
+  await press(h, () => h!.setup.mockInput.pressKey('F8', { shift: true }))
+  expect((h.store.overlays[0] as unknown as { title: string }).title).toBe('Export to a file')
+  await press(h, () => h!.setup.mockInput.pressEscape())
+  await press(h, () => h!.setup.mockInput.pressKey('F6', { shift: true }))
+  await waitFor(h, (f) => f.includes('Saved views'))
+  await press(h, () => h!.setup.mockInput.pressEscape())
+  h.store.overlays = []
+  await raw(`${E}[1;2S`) // Shift+F4
+  const bulk = h.store.overlays[0] as unknown as { title?: string } | undefined
+  if (bulk) expect(bulk.title).toContain('Run on')
+  else expect(h.store.flashText?.text).toContain('Shift+F4 Bulk')
+  h.store.overlays = []
+  // with permission to create records, Shift+F7 copies the row under the cursor into a new-record form
+  const meta = (h.store.screen as unknown as { meta: { capabilities: string[] } }).meta
+  meta.capabilities = [...meta.capabilities, 'TABLE_INSERT']
+  await press(h, () => h!.setup.mockInput.pressKey('F7', { shift: true }))
+  await waitFor(h, () => h!.store.screen?.kind === 'form')
+  await press(h, () => h!.setup.mockInput.pressEscape())
+  await waitFor(h, () => h!.store.screen?.kind === 'table')
+  const before = h.log.requests.filter((r) => r.path === '/metaData').length
+  await press(h, () => h!.setup.mockInput.pressKey('F5', { shift: true }))
+  await waitFor(h, () => h!.store.flashText?.text === 'metadata refreshed')
+  expect(h.log.requests.filter((r) => r.path === '/metaData').length).toBe(before + 1)
+  await raw(`${E}[1;2P`) // Shift+F1
+  expect(h.store.overlays[0]!.constructor.name).toBe('HelpOverlay')
+})
+
+test('plain F-keys are unchanged; Ctrl+F5 still refreshes like F5; Shift+F11 does nothing', async () => {
+  h = await start(120, 40)
+  await raw(`${E}OQ`) // F2
+  expect(h.store.screen?.kind).toBe('search')
+  await press(h, () => h!.setup.mockInput.pressEscape())
+  await press(h, () => h!.setup.mockInput.pressKey('F11', { shift: true }))
+  expect(h.store.flashText?.text).toContain('Shift+F11 does nothing')
+  await press(h, () => h!.setup.mockInput.pressKey('F5', { ctrl: true }))
+  expect(h.store.overlays.length).toBe(0)
+})
+
+test('the rewrite on the terminal input: Shift+F3 (CSI 1;2R) opens the SQL Runner; legacy CSI 26~ is Shift+F2', async () => {
+  const log: FakeLog = { requests: [] }
+  h = await start(120, 40, undefined, sqlFakeFetch(log, true, { executions: [], notebooks: [], rowsCalls: [] }))
+  let now = 0
+  const rewrite = installFKeyRewrite(h.setup.renderer.stdin, 'vt220', () => now)
+  // during the startup probe CSI 1;2R is a cursor report: nothing happens
+  await raw(`${E}[1;2R`)
+  expect(h.store.screen?.kind).toBe('home')
+  // past it, the same bytes are Shift+F3
+  now += CPR_QUIET_MS
+  try {
+    expect(shiftSlots(h.store).find((s) => s.n === 3)!.why).toBeUndefined()
+    await raw(`${E}[1;2R`)
+    await waitFor(h, () => h!.store.screen instanceof SqlRunnerScreen)
+    await press(h, () => h!.setup.mockInput.pressEscape())
+    h.store.overlays = []
+    await raw(`${E}[26~`)
+    expect(h.store.overlays[0]!.constructor.name).toBe('ServersOverlay')
+  } finally {
+    rewrite.dispose()
+  }
+})
+
+test('Shift+F10 toggles the Assistant (the same named action as Ctrl+G)', async () => {
+  h = await start(120, 40, undefined, assistantFetch())
+  await press(h, () => h!.setup.mockInput.pressKey('F10', { shift: true }))
+  expect(h.store.assistantOpen).toBe(true)
+  expect(h.store.focus).toBe('assistant')
+  // the panel has the focus: the same key goes on toggling (Shift+F keys are global)
+  await press(h, () => h!.setup.mockInput.pressKey('F10', { shift: true }))
+  expect(h.store.focus === 'content' || !h.store.assistantOpen).toBe(true)
+})
+
+// ---- the mouse ----
+
+test('mouse: a click on the Shift row runs that key; in one-row mode while the Shift row shows, too', async () => {
+  h = await start(120, 40)
+  const y = 39
+  const shiftLine = last(h.frame())[0]!
+  const x = shiftLine.indexOf('2Servers') + 2
+  // the Shift row has as many slots as the primary row (12 from 120 columns)
+  expect(fkeyAt(x, 120, h.store.fkeys().map((k) => k.n))).toBe(2)
+  await press(h, () => h!.setup.mockMouse.click(x, y))
+  expect(h.store.overlays[0]!.constructor.name).toBe('ServersOverlay')
+  await press(h, () => h!.setup.mockInput.pressEscape())
+  h.store.overlays = []
+  // the primary row above still presses F1
+  await press(h, () => h!.setup.mockMouse.click(3, y - 1))
+  expect(h.store.overlays[0]!.constructor.name).toBe('HelpOverlay')
+  await press(h, () => h!.setup.mockInput.pressEscape())
+  h.store.overlays = []
+  h.store.showShiftRow()
+  const f = await mode('one')
+  const row = last(f)[0]!
+  expect(row).toStartWith('⇧1Keys')
+  await press(h, () => h!.setup.mockMouse.click(row.indexOf('9History') + 2, 39))
+  await waitFor(h, () => h!.store.screen?.kind === 'history')
+})
+
+// ---- help and settings ----
+
+test('? lists the Shift bank; :fkeys and Settings › F-key bar switch and save the mode', async () => {
+  h = await start(120, 40)
+  h.store.commands().help()
+  const help = h.store.overlays[0] as unknown as { after: Array<{ title: string; keys: Array<[string, string]> }> }
+  expect(help.after[0]!.title).toStartWith('Shift bank')
+  expect(help.after[0]!.keys.map(([k]) => k)).toEqual(SHIFT_BANK.map((k) => `Shift+F${k.n}`))
+  expect(help.after[0]!.keys[2]![1]).toContain('not here')
+  h.store.overlays = []
+  await command(h, 'fkeys one')
+  expect(h.store.settings.fkeyBar).toBe('one')
+  expect(readConfig().ui?.fkeyBar).toBe('one')
+  const f = await press(h, () => undefined)
+  expect(f).not.toContain('⇧1Keys')
+  await command(h, 'fkeys sideways')
+  expect(h.store.flashText?.text).toContain('fkeys one|two|auto')
+  const entry = (h.store.commandsImpl!(h.store) as unknown as { entries(t: string): Array<{ id?: string; label: string; run?: () => void }> }).entries('').find((e) => e.id === 'settings:fkeys')
+  expect(entry?.label).toBe('F-key bar: one')
+  entry!.run!()
+  expect((h.store.overlays[0] as unknown as { title: string }).title).toBe('F-key bar')
+  await press(h, () => h!.setup.mockInput.pressEscape())
+  expect(h.store.overlays.length).toBe(0)
+  // (the : line keeps a failed command for editing, so this one runs directly)
+  await press(h, () => h!.store.commands().run('fkeys auto'))
+  expect(readConfig().ui?.fkeyBar).toBe('auto')
+})

packages/tui/test/splash.test.tsx

@@ -0,0 +1,274 @@
+/*
+ * Copyright 2026 QRun.IO, Inc.
+ * Licensed under the Apache License, Version 2.0 (see LICENSE).
+ */
+
+/** The start-up splash and profile picker: the boot plan, the picker (preselect, Enter, Esc), the add form, timing, ASCII, failures. */
+
+import { afterEach, beforeAll, expect, test } from 'bun:test'
+import { testRender } from '@opentui/react/test-utils'
+import { readConfig, writeConfig, type Config } from '@qrun-io/qqq-core'
+import { App } from '../src/app'
+import { boot, parseArgs } from '../src/boot'
+import { PICK_HINT, SPLASH_MIN_MS, lastUsedProfile, planBoot, readSplash, splashEnabled, splashWait, writeSplash } from '../src/boot-plan'
+import { ProfileFormOverlay, ServersOverlay } from '../src/overlays/servers'
+import { SplashScreen, splashLayout, splashText, versionLine, type SplashLayoutInput } from '../src/screens/splash'
+import { fakeFetch, type FakeLog } from './fake-server'
+import { command, isolate, press, sessionSecrets, waitFor, type Harness } from './helpers'
+import { querySize } from '../src/saver/query-art'
+import { setAscii } from '../src/theme'
+import { cellWidth } from '../src/util/text'
+
+let h: Harness | undefined
+let exits: string[] = []
+let quits = 0
+
+beforeAll(() => isolate())
+afterEach(() => {
+  h?.store.dispose()
+  h?.setup.renderer.destroy()
+  h = undefined
+  exits = []
+  quits = 0
+  setAscii(false)
+})
+
+const hour = 3_600_000
+function profiles(map: Record<string, { server: string; lastUsedAt?: string }>, defaultProfile?: string): void {
+  writeConfig({ profiles: map, ...(defaultProfile ? { defaultProfile } : {}) } as Config)
+}
+
+function two(): void {
+  profiles({
+    alpha: { server: 'http://alpha.test', lastUsedAt: new Date(Date.now() - 5 * hour).toISOString() },
+    beta: { server: 'http://beta.test', lastUsedAt: new Date(Date.now() - hour).toISOString() },
+  }, 'alpha')
+}
+
+async function start(argv: string[], options: { width?: number; height?: number; minMs?: number; fetch?: typeof fetch; log?: FakeLog } = {}): Promise<Harness> {
+  const log = options.log ?? { requests: [] }
+  const store = boot({ args: parseArgs(argv, {}), quit: () => { quits++ }, build: 'test', secrets: sessionSecrets, fetch: options.fetch ?? fakeFetch(log), splashMinMs: options.minMs, hint: (t) => exits.push(t) })
+  const setup = await testRender(<App store={store} />, { width: options.width ?? 120, height: options.height ?? 40 })
+  const harness: Harness = { setup, store, log, frame: () => setup.captureCharFrame() }
+  store.captureScreen = () => setup.captureCharFrame()
+  return harness
+}
+
+test('the boot plan: a named profile or the only one connects; several ask (last used first); none adds', () => {
+  const at = (n: number) => new Date(Date.now() - n * hour).toISOString()
+  const several: Config = { profiles: { alpha: { server: 'http://a.test', lastUsedAt: at(5) }, beta: { server: 'http://b.test', lastUsedAt: at(1) }, gamma: { server: 'http://c.test' } }, defaultProfile: 'alpha' } as Config
+  expect(planBoot({}, {}, several)).toEqual({ kind: 'pick', select: 'beta' })
+  expect(planBoot({ profile: 'gamma' }, {}, several)).toEqual({ kind: 'connect', target: { name: 'gamma', server: 'http://c.test' } })
+  expect(planBoot({}, { QQQ_PROFILE: 'alpha' }, several)).toEqual({ kind: 'connect', target: { name: 'alpha', server: 'http://a.test' } })
+  expect(planBoot({ server: 'http://b.test/x' }, {}, several)).toEqual({ kind: 'connect', target: { name: 'beta', server: 'http://b.test' } })
+  expect(planBoot({}, { QQQ_SERVER: 'http://new.test' }, several).kind).toBe('connect')
+  const one: Config = { profiles: { solo: { server: 'http://solo.test' } } } as Config
+  expect(planBoot({}, {}, one)).toEqual({ kind: 'connect', target: { name: 'solo', server: 'http://solo.test' } })
+  expect(planBoot({}, {}, { profiles: {} } as Config)).toEqual({ kind: 'add' })
+  // a name that does not exist: the picker (or the add form) with why
+  const typo = planBoot({ profile: 'nope' }, {}, several)
+  expect(typo.kind).toBe('pick')
+  expect(typo.kind === 'pick' && typo.note).toMatch(/No profile "nope"/)
+  expect(planBoot({ profile: 'nope' }, {}, { profiles: {} } as Config).kind).toBe('add')
+  // never used: the default, else the first
+  expect(lastUsedProfile({ profiles: { a: { server: 'x' }, b: { server: 'y' } }, defaultProfile: 'b' } as Config)).toBe('b')
+  expect(lastUsedProfile({ profiles: { a: { server: 'x' }, b: { server: 'y' } } } as Config)).toBe('a')
+})
+
+test('the splash switch: --no-splash, --splash, QQQ_UI_NO_SPLASH and the ui.splash setting', () => {
+  expect(parseArgs(['--no-splash']).splash).toBe(false)
+  expect(parseArgs(['--splash']).splash).toBe(true)
+  expect(parseArgs([]).splash).toBeUndefined()
+  expect(splashEnabled({ splash: false })).toBe(false)
+  expect(splashEnabled({}, { ...process.env, QQQ_UI_NO_SPLASH: '1' })).toBe(false)
+  expect(readSplash()).toBe(true)
+  writeSplash(false)
+  expect(readConfig().ui).toMatchObject({ splash: 'off' })
+  expect(splashEnabled({})).toBe(false)
+  expect(splashEnabled({ splash: true })).toBe(true)
+  writeSplash(true)
+  expect(splashEnabled({})).toBe(true)
+})
+
+test('the minimum display time: never under 600 ms, nothing more once it has been up that long', async () => {
+  expect(SPLASH_MIN_MS).toBe(600)
+  expect(splashWait(1000, 1100)).toBe(500)
+  expect(splashWait(1000, 1700)).toBe(0)
+  profiles({ fake: { server: 'http://fake.test' } })
+  const began = Date.now()
+  h = await start(['--profile', 'fake'], { minMs: 600 })
+  await waitFor(h, () => h!.store.screen?.kind === 'splash')
+  await waitFor(h, () => h!.store.screen?.kind === 'home', 4000)
+  expect(Date.now() - began).toBeGreaterThanOrEqual(600)
+})
+
+test('one profile: the splash shows Query, the wordmark, the version and the boot steps, then Home', async () => {
+  profiles({ fake: { server: 'http://fake.test' } })
+  h = await start([], { minMs: 400 })
+  const f = await waitFor(h, (x) => x.includes('Terminal client for QQQ'))
+  expect(h.store.screen?.kind).toBe('splash')
+  expect(f).toContain(versionLine())
+  expect(f).toMatch(/qqq \d+\.\d+\.\d+(?:-[0-9A-Za-z.-]+)? · UI API client \d+\.\d+\.\d+/)
+  expect(f).toContain('█')
+  // no title bar, status line or key bar under the splash
+  expect(f).not.toMatch(/10\s*Quit/)
+  const steps = h.store.screen as SplashScreen
+  await waitFor(h, () => /loaded metadata \(\d+ tables\)/.test(steps.status))
+  await waitFor(h, (x) => h!.store.screen?.kind === 'home' && x.includes('Apps'), 4000)
+  expect(h.store.overlays.length).toBe(0)
+})
+
+test('several profiles: the picker over the splash, the last used preselected; Enter connects to it', async () => {
+  two()
+  h = await start([], { width: 120, height: 40 })
+  const f = await waitFor(h, (x) => x.includes('Connect to a server'))
+  const picker = h.store.overlays.at(-1) as ServersOverlay
+  expect(picker).toBeInstanceOf(ServersOverlay)
+  expect(picker.selected()?.name).toBe('beta')
+  expect(f).toContain('Enter connects')
+  expect(f).toContain('Esc quits')
+  // the splash header stays visible above the picker
+  expect(f).toContain('Terminal client for QQQ')
+  // probes fill in on their own (the picker does not wait for them)
+  await waitFor(h, (x) => x.includes('UI API'))
+  await press(h, () => h!.setup.mockInput.pressEnter())
+  await waitFor(h, () => h!.store.screen?.kind === 'home', 4000)
+  expect(h.store.target?.name).toBe('beta')
+})
+
+test('several profiles: Esc on the picker quits with the --profile hint', async () => {
+  two()
+  h = await start([])
+  await waitFor(h, (x) => x.includes('Connect to a server'))
+  await press(h, () => h!.setup.mockInput.pressEscape())
+  expect(quits).toBe(1)
+  expect(exits).toEqual([PICK_HINT])
+  expect(PICK_HINT).toContain('--profile')
+})
+
+test('--profile skips the picker even with several profiles', async () => {
+  two()
+  h = await start(['--profile', 'alpha'])
+  await waitFor(h, () => h!.store.screen?.kind === 'home', 4000)
+  expect(h.store.target?.name).toBe('alpha')
+})
+
+test('no profiles: the add form opens straight away; saving connects to the new profile', async () => {
+  writeConfig({ profiles: {} } as Config)
+  h = await start([])
+  await waitFor(h, (x) => x.includes('Add a server profile'))
+  const form = h.store.overlays.at(-1) as ProfileFormOverlay
+  expect(form).toBeInstanceOf(ProfileFormOverlay)
+  form.editors.name.set('local')
+  form.editors.server.set('http://fake.test')
+  await press(h, () => form.save(), 50)
+  await waitFor(h, () => h!.store.screen?.kind === 'home', 4000)
+  expect(h.store.target).toEqual({ name: 'local', server: 'http://fake.test' })
+})
+
+test('no profiles, add form closed: the splash says n adds one and Esc quits', async () => {
+  writeConfig({ profiles: {} } as Config)
+  h = await start([], { width: 80, height: 24 })
+  await waitFor(h, (x) => x.includes('Add a server profile'))
+  const f = await press(h, () => h!.setup.mockInput.pressEscape())
+  expect(f).toContain('n adds a server profile')
+  await press(h, () => h!.setup.mockInput.pressKey('n'))
+  expect(h.store.overlays.at(-1)).toBeInstanceOf(ProfileFormOverlay)
+  await press(h, () => h!.setup.mockInput.pressEscape())
+  await press(h, () => h!.setup.mockInput.pressEscape())
+  expect(quits).toBe(1)
+})
+
+test('--no-splash: the sign-in screen as before, then Home; with several profiles the picker opens over it', async () => {
+  profiles({ fake: { server: 'http://fake.test' } })
+  h = await start(['--no-splash'])
+  expect(h.store.routes.some((r) => r.kind === 'splash')).toBe(false)
+  await waitFor(h, () => h!.store.screen?.kind === 'home', 4000)
+  h.store.dispose()
+  h.setup.renderer.destroy()
+  two()
+  h = await start(['--no-splash'])
+  await waitFor(h, (x) => x.includes('Connect to a server'))
+  expect(h.store.screen?.kind).toBe('signin')
+  expect((h.store.overlays.at(-1) as ServersOverlay).selected()?.name).toBe('beta')
+})
+
+test('a failure stays on the splash with retry and choose-another; c opens the picker, Esc goes back to it', async () => {
+  profiles({ fake: { server: 'http://fake.test' }, other: { server: 'http://other.test' } })
+  let down = true
+  const ok = fakeFetch()
+  const flaky = (async (input: RequestInfo | URL, init?: RequestInit) => {
+    if (down) throw new Error('connection refused')
+    return ok(input, init)
+  }) as typeof fetch
+  h = await start(['--profile', 'fake'], { width: 80, height: 24, fetch: flaky })
+  let f = await waitFor(h, (x) => x.includes('Enter retries'))
+  expect(f).toContain('connection refused')
+  expect(f).toContain('c chooses another profile')
+  await press(h, () => h!.setup.mockInput.pressKey('c'))
+  f = await waitFor(h, (x) => x.includes('Connect to a server'))
+  expect(f).toContain('Esc goes back')
+  await press(h, () => h!.setup.mockInput.pressEscape())
+  expect(quits).toBe(0)
+  f = await waitFor(h, (x) => x.includes('Enter retries'))
+  down = false
+  await press(h, () => h!.setup.mockInput.pressEnter())
+  await waitFor(h, () => h!.store.screen?.kind === 'home', 4000)
+})
+
+test('any key stops the animation, not the boot', async () => {
+  profiles({ fake: { server: 'http://fake.test' } })
+  h = await start([], { minMs: 300 })
+  const splash = h.store.screen as SplashScreen
+  splash.animate = true
+  await press(h, () => h!.setup.mockInput.pressKey('x'))
+  expect(splash.animate).toBe(false)
+  await waitFor(h, () => h!.store.screen?.kind === 'home', 4000)
+})
+
+function input(ascii: boolean, anchor: 'center' | 'top' = 'center'): SplashLayoutInput {
+  return { ascii, pose: { blink: false, wag: false }, status: { text: 'connecting to localhost:8078…', tone: 'status' }, extra: [], keys: '', anchor }
+}
+
+test('the layout fits 80×24 (small Query beside the wordmark) and 120×40 (large Query); every line clipped', () => {
+  for (const [w, hgt] of [[80, 24], [120, 40], [40, 12], [30, 8], [20, 5]] as const) {
+    for (const ascii of [false, true]) {
+      setAscii(ascii)
+      const lines = splashLayout(w, hgt, input(ascii))
+      expect(lines.length).toBeLessThanOrEqual(hgt)
+      for (const l of lines) expect(cellWidth(l.map((s) => s.text).join(''))).toBeLessThanOrEqual(w)
+    }
+  }
+  setAscii(false)
+  const small = splashText(splashLayout(80, 24, input(false)))
+  expect(small).toContain('Terminal client for QQQ')
+  expect(small).toContain('connecting to localhost:8078…')
+  const large = splashLayout(120, 40, input(false))
+  expect(large.filter((l) => l.some((s) => s.tone === 'art')).length).toBe(querySize('large').height)
+  const header = splashLayout(80, 24, input(false, 'top'))
+  expect(splashText(header)).not.toContain('connecting')
+  expect(header.length).toBeLessThanOrEqual(querySize('small').height + 2)
+})
+
+test('ASCII: no braille or block characters, the wordmark in #', () => {
+  setAscii(true)
+  for (const [w, hgt] of [[80, 24], [120, 40]] as const) {
+    const text = splashText(splashLayout(w, hgt, input(true)))
+    expect(text).not.toMatch(/[⠀-⣿█]/)
+    expect(text).toContain('####')
+    expect(text).toContain('Terminal client for QQQ')
+    expect(text).toMatch(/^[\x20-\x7e\n]*$/)
+    expect(text).toContain('qqq')
+  }
+})
+
+test(':splash off and on save the setting (Settings > Splash on start)', async () => {
+  profiles({ fake: { server: 'http://fake.test' } })
+  h = await start([])
+  await waitFor(h, () => h!.store.screen?.kind === 'home', 4000)
+  await command(h, 'splash off')
+  expect(readSplash()).toBe(false)
+  expect(h.store.flashText?.text).toContain('splash off')
+  await command(h, 'splash on')
+  expect(readSplash()).toBe(true)
+})

packages/ui-api-client/openapi/extension-sources.json

@@ -31,10 +31,10 @@
     },
     {
       "name": "collaboration",
-      "version": "1.1.0",
-      "document": "qbit-collaboration/src/main/resources/openapi/qqq-v1/collaboration.yaml",
-      "branch": "develop",
-      "commit": "03407ae"
+      "version": "1.2.0",
+      "document": ".worktrees/qbit-collab-sessions/src/main/resources/openapi/qqq-v1/collaboration.yaml",
+      "branch": "feat/per-session-presence",
+      "commit": "0ae1e62"
     },
     {
       "name": "data-analysis",

packages/ui-api-client/openapi/qqq-v1.json

@@ -73,7 +73,7 @@
       },
       {
         "name": "collaboration",
-        "version": "1.1.0",
+        "version": "1.2.0",
         "description": "Record collaboration: favorites, recents, attachments, tags, conversations, following, timeline, people and presence",
         "pathPrefix": "/qbit/collaboration",
         "operations": [
@@ -13972,6 +13972,15 @@
             "schema": {
               "type": "string"
             }
+          },
+          {
+            "description": "Also return one viewer per live connection (lease) in leases; default false. Since collaboration 1.2.0.",
+            "in": "query",
+            "name": "perConnection",
+            "required": false,
+            "schema": {
+              "type": "boolean"
+            }
           }
         ],
         "responses": {
@@ -41284,13 +41293,28 @@
             "items": {
               "$ref": "#/components/schemas/CollaborationPresenceViewerV1"
             },
+            "type": "array",
+            "description": "Live viewers; always present, empty once the last viewer leaves.",
+            "nullable": false
+          },
+          "leaseCount": {
+            "description": "Live connections (leases) behind viewers; a user with two terminals counts twice. Since 1.2.0.",
+            "nullable": true,
+            "type": "integer"
+          },
+          "leases": {
+            "description": "One viewer per live connection, with connectionId and since. On GET only with perConnection=true; always on presence.changed. Since 1.2.0.",
+            "items": {
+              "$ref": "#/components/schemas/CollaborationPresenceViewerV1"
+            },
+            "nullable": true,
             "type": "array"
           }
         },
         "type": "object"
       },
       "CollaborationPresenceViewerV1": {
-        "description": "One user merged across live tabs; EDITING takes precedence.",
+        "description": "One user merged across live tabs (EDITING takes precedence), or one live connection in leases.",
         "properties": {
           "displayName": {
             "description": "Session display name.",
@@ -41315,6 +41339,27 @@
             "description": "Stable user identity.",
             "nullable": false,
             "type": "string"
+          },
+          "connectionId": {
+            "description": "Opaque per-connection id, only in leases: c + the first 16 hex digits of SHA-256(userId + newline + connectionId). Since 1.2.0.",
+            "nullable": true,
+            "type": "string"
+          },
+          "connections": {
+            "description": "Live connections (tabs, terminals) merged into this viewer; 1 in leases. Since 1.2.0.",
+            "nullable": true,
+            "type": "integer"
+          },
+          "sessionId": {
+            "description": "Opaque id of the signed-in session behind this connection, only in leases (HMAC of the server session; never the session itself). Since 1.2.0.",
+            "nullable": true,
+            "type": "string"
+          },
+          "since": {
+            "description": "When this connection's lease started (ISO-8601), only in leases. Since 1.2.0.",
+            "format": "date-time",
+            "nullable": true,
+            "type": "string"
           }
         },
         "type": "object"

packages/ui-api-client/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@qrun-io/qqq-ui-api-client",
-  "version": "1.8.0",
+  "version": "1.8.1-rc.1",
   "description": "Typed TypeScript client for the QQQ UI API (/qqq/v1), generated from the merged OpenAPI document (core + extensions), with OAuth2 device-flow sign-in, token refresh and a realtime (SSE) reader.",
   "keywords": [
     "qqq",
@@ -47,7 +47,7 @@
     "node": ">=20"
   },
   "publishConfig": {
-    "registry": "https://npm.pkg.github.com"
+    "registry": "https://git.kof22.com/api/packages/QRun-IO/npm/"
   },
   "scripts": {
     "generate": "openapi-typescript openapi/qqq-v1.json --output src/schema.ts && node ../../scripts/fix-recursive-types.mjs src/schema.ts",

packages/ui-api-client/src/schema.ts

@@ -8936,9 +8936,14 @@ export interface components {
             pk?: string | null;
             /** @description Parent table name. */
             table?: string;
+            /** @description Live viewers; always present, empty once the last viewer leaves. */
             viewers?: components["schemas"]["CollaborationPresenceViewerV1"][];
+            /** @description Live connections (leases) behind viewers; a user with two terminals counts twice. Since 1.2.0. */
+            leaseCount?: number | null;
+            /** @description One viewer per live connection, with connectionId and since. On GET only with perConnection=true; always on presence.changed. Since 1.2.0. */
+            leases?: components["schemas"]["CollaborationPresenceViewerV1"][] | null;
         };
-        /** @description One user merged across live tabs; EDITING takes precedence. */
+        /** @description One user merged across live tabs (EDITING takes precedence), or one live connection in leases. */
         CollaborationPresenceViewerV1: {
             /** @description Session display name. */
             displayName?: string;
@@ -8951,6 +8956,17 @@ export interface components {
             mode?: "VIEWING" | "EDITING";
             /** @description Stable user identity. */
             userId?: string;
+            /** @description Opaque per-connection id, only in leases: c + the first 16 hex digits of SHA-256(userId + newline + connectionId). Since 1.2.0. */
+            connectionId?: string | null;
+            /** @description Live connections (tabs, terminals) merged into this viewer; 1 in leases. Since 1.2.0. */
+            connections?: number | null;
+            /** @description Opaque id of the signed-in session behind this connection, only in leases (HMAC of the server session; never the session itself). Since 1.2.0. */
+            sessionId?: string | null;
+            /**
+             * Format: date-time
+             * @description When this connection's lease started (ISO-8601), only in leases. Since 1.2.0.
+             */
+            since?: string | null;
         };
         /** @description Most recent visible targets, at most fifty. */
         CollaborationRecentListV1: {
@@ -19478,6 +19494,8 @@ export interface operations {
                 table: string;
                 /** @description Parent record primary key. */
                 pk?: string;
+                /** @description Also return one viewer per live connection (lease) in leases; default false. Since collaboration 1.2.0. */
+                perConnection?: boolean;
             };
             header?: never;
             path?: never;

scripts/install.sh

@@ -2,13 +2,13 @@
 # Copyright 2026 QRun.IO, Inc.
 # Licensed under the Apache License, Version 2.0 (see LICENSE).
 #
-# Installs the qqq CLI single-file binary for this machine from the GitHub releases of
-# QRun-IO/qqq-cli, after checking it against the release's SHA256SUMS.
+# Installs the qqq CLI single-file binary for this machine from the Gitea releases of
+# QRun-IO/qqq-cli (git.kof22.com), after checking it against the release's SHA256SUMS.
 #
-#   curl -fsSL https://raw.githubusercontent.com/QRun-IO/qqq-cli/main/scripts/install.sh | sh
+#   curl -fsSL https://git.kof22.com/QRun-IO/qqq-cli/raw/branch/main/scripts/install.sh | sh
 #   curl -fsSL .../install.sh | sh -s -- --version 1.0.0 --dir /usr/local/bin
 #
-# By default it installs the newest stable cli-v* release (the channel Homebrew and Scoop follow);
+# By default it installs the newest stable v* release (the channel Homebrew and Scoop follow);
 # --pre takes the newest release including prereleases. --help lists the options.
 
 set -eu
@@ -16,31 +16,31 @@ set -eu
 repo="QRun-IO/qqq-cli"
 version="${QQQ_VERSION:-}"
 dir="${QQQ_INSTALL_DIR:-$HOME/.local/bin}"
-base="${QQQ_DOWNLOAD_BASE:-https://github.com/$repo/releases/download}"
+base="${QQQ_DOWNLOAD_BASE:-https://git.kof22.com/$repo/releases/download}"
 musl=""
 pre=""
 dry_run=""
-releases_url="${QQQ_RELEASES_URL:-https://api.github.com/repos/$repo/releases?per_page=30}"
+releases_url="${QQQ_RELEASES_URL:-https://git.kof22.com/api/v1/repos/$repo/releases?limit=30}"
 
 usage() {
   cat <<'USAGE'
-Install qqq (the CLI and the terminal UI, one binary) from https://github.com/QRun-IO/qqq-cli/releases
+Install qqq (the CLI and the terminal UI, one binary) from https://git.kof22.com/QRun-IO/qqq-cli/releases
 
-  curl -fsSL https://raw.githubusercontent.com/QRun-IO/qqq-cli/main/scripts/install.sh | sh
-  curl -fsSL https://raw.githubusercontent.com/QRun-IO/qqq-cli/main/scripts/install.sh | sh -s -- [options]
+  curl -fsSL https://git.kof22.com/QRun-IO/qqq-cli/raw/branch/main/scripts/install.sh | sh
+  curl -fsSL https://git.kof22.com/QRun-IO/qqq-cli/raw/branch/main/scripts/install.sh | sh -s -- [options]
 
 Options (or environment):
-  --version V   (QQQ_VERSION)      a release such as 1.0.0; default: the newest stable cli-v* release
+  --version V   (QQQ_VERSION)      a release such as 1.0.0; default: the newest stable v* release
   --pre         (QQQ_PRE=1)        with no --version, take the newest release including prereleases
   --dir D       (QQQ_INSTALL_DIR)  where qqq goes; default: ~/.local/bin
   --musl                           take the musl build on Linux (detected on Alpine and other musl hosts)
   --dry-run                        print the version and download URL, change nothing
   -h, --help                       this help
-  QQQ_DOWNLOAD_BASE                release download root (default https://github.com/QRun-IO/qqq-cli/releases/download),
+  QQQ_DOWNLOAD_BASE                release download root (default https://git.kof22.com/QRun-IO/qqq-cli/releases/download),
                                    for mirrors and testing
 
 Supported: macOS arm64 and x64, Linux x64 and arm64 (glibc and musl). On Windows use Scoop:
-  scoop bucket add qrun https://github.com/QRun-IO/scoop-bucket
+  scoop bucket add qrun https://git.kof22.com/QRun-IO/scoop-bucket
   scoop install qqq
 USAGE
 }
@@ -73,7 +73,7 @@ fi
 case "$(uname -s)" in
   Darwin) os=darwin ;;
   Linux) os=linux ;;
-  MINGW*|MSYS*|CYGWIN*) die "on Windows install with Scoop (scoop bucket add qrun https://github.com/QRun-IO/scoop-bucket; scoop install qqq) or download qqq-windows-x64.exe from https://github.com/$repo/releases" ;;
+  MINGW*|MSYS*|CYGWIN*) die "on Windows install with Scoop (scoop bucket add qrun https://git.kof22.com/QRun-IO/scoop-bucket; scoop install qqq) or download qqq-windows-x64.exe from https://git.kof22.com/$repo/releases" ;;
   *) die "unsupported operating system $(uname -s)" ;;
 esac
 case "$(uname -m)" in
@@ -91,26 +91,26 @@ fi
 
 [ -n "${QQQ_PRE:-}" ] && [ "${QQQ_PRE}" != 0 ] && pre=1
 if [ -z "$version" ]; then
-  # The releases API lists newest first; each release's "tag_name" comes before its "prerelease".
+  # The Gitea releases API lists newest first; each release's "tag_name" comes before its "prerelease".
   # Escaped quotes inside release notes never match these patterns.
   version="$(fetch_text "$releases_url" | tr ',' '\n' | awk -v pre="$pre" '
     /"tag_name": *"/ { tag = $0; sub(/.*"tag_name": *"/, "", tag); sub(/".*/, "", tag); next }
     /"prerelease": *(true|false)/ {
-      if (tag ~ /^cli-v/ && (pre != "" || $0 ~ /false/)) { sub(/^cli-v/, "", tag); print tag; exit }
+      if (tag ~ /^v[0-9]/ && (pre != "" || $0 ~ /false/)) { sub(/^v/, "", tag); print tag; exit }
       tag = ""
     }')" || true
   if [ -z "$version" ]; then
-    if [ -n "$pre" ]; then die "could not find a cli-v* release of $repo; pass --version"; fi
-    die "could not find a stable cli-v* release of $repo; pass --version, or --pre for prereleases"
+    if [ -n "$pre" ]; then die "could not find a v* release of $repo; pass --version"; fi
+    die "could not find a stable v* release of $repo; pass --version, or --pre for prereleases"
   fi
 fi
 version="${version#v}"
 version="${version#cli-v}"
 
 file="qqq-$os-$arch$musl"
-url="$base/cli-v$version/$file"
+url="$base/v$version/$file"
 if [ -n "$dry_run" ]; then
-  say "qqq $version: $url (checked against $base/cli-v$version/SHA256SUMS), into $dir/qqq"
+  say "qqq $version: $url (checked against $base/v$version/SHA256SUMS), into $dir/qqq"
   exit 0
 fi
 tmp="$(mktemp -d 2>/dev/null || mktemp -d -t qqq)"
@@ -118,8 +118,8 @@ trap 'rm -rf "$tmp"' EXIT
 trap 'exit 130' INT TERM
 
 say "Downloading qqq $version ($file)"
-fetch "$url" "$tmp/$file" || die "download failed: $url"
-fetch "$base/cli-v$version/SHA256SUMS" "$tmp/SHA256SUMS" || die "download failed: $base/cli-v$version/SHA256SUMS"
+fetch "$url" "$tmp/$file" || die "download failed: $url${musl:+ (releases since 1.0.1 have no musl build; on musl hosts install the CLI with npm: @qrun-io/qqq-cli)}"
+fetch "$base/v$version/SHA256SUMS" "$tmp/SHA256SUMS" || die "download failed: $base/v$version/SHA256SUMS"
 
 expected="$(awk -v f="$file" '$2 == f { print $1 }' "$tmp/SHA256SUMS")"
 [ -n "$expected" ] || die "SHA256SUMS has no entry for $file"

scripts/print-agent.sh

@@ -14,7 +14,8 @@
 #   QQQ_PRINT_AGENT_DIR  qqq-print-agent checkout with tools/virtual-agent
 #                        (default <QRun-IO>/qqq-print-agent next to this repo)
 #   QQQ_PRINT_STATE      pid, log and device identity (default ${TMPDIR:-/tmp}/qqq-print-agent-<port>)
-#   QQQ_PRINT_OUT        where printed documents go (default <state>/printed)
+#   QQQ_PRINT_OUT        where printed documents go (default ~/Downloads, as downloads and exports;
+#                        the agent's own default too); --dir prints the folder in use
 #   QQQ_PRINT_PRINTER_NAME, QQQ_PRINT_DEVICE_NAME   names shown in QQQ
 #
 # Then, from the CLI:   qqq printer list; qqq print person 1 --printer "Virtual PDF printer"
@@ -31,7 +32,7 @@ agent="$agent_dir/tools/virtual-agent/virtual-agent.mjs"
 port="$(node -e 'const u=new URL(process.argv[1]); console.log(u.port || (u.protocol === "https:" ? 443 : 80))' "$server")"
 tmp_root="${TMPDIR:-/tmp}"; state_dir="${QQQ_PRINT_STATE:-${tmp_root%/}/qqq-print-agent-$port}"
 state_dir="${state_dir%/}"
-out_dir="${QQQ_PRINT_OUT:-$state_dir/printed}"
+out_dir="${QQQ_PRINT_OUT:-$HOME/Downloads}"
 pid_file="$state_dir/agent.pid"
 log_file="$state_dir/agent.log"
 identity="$state_dir/device.json"

scripts/publish-packaging.sh

@@ -0,0 +1,85 @@
+#!/usr/bin/env bash
+# Copyright 2026 QRun.IO, Inc.
+# Licensed under the Apache License, Version 2.0 (see LICENSE).
+#
+# Offer the filled Homebrew formula and Scoop manifest (scripts/update-packaging.mjs) to the tap and the
+# bucket as pull requests; a human merges them. Called by the release workflow's publish job.
+#
+#   final version  push branch release/qqq-<version> to QRun-IO/homebrew-tap and QRun-IO/scoop-bucket with
+#                  PACKAGES_TOKEN and open a pull request "qqq <version>" in each
+#   otherwise      (prerelease, or the push or the pull request is refused) attach qqq.rb / qqq.json to the
+#                  release instead, for a hand-made pull request (docs/release-runbook.md step 4)
+#
+# Never fails the release over the tap or the bucket. DRY_RUN=1 clones and commits locally but pushes,
+# opens and attaches nothing; it needs only VERSION (and GITHUB_SERVER_URL, default https://git.kof22.com):
+#   DRY_RUN=1 VERSION=1.2.3 scripts/publish-packaging.sh
+#
+# Environment: VERSION, GITHUB_SERVER_URL, GITHUB_REPOSITORY, RELEASE_ID, TOKEN (job token, release assets),
+# PACKAGES_TOKEN (tap and bucket), DRY_RUN.
+set -euo pipefail
+
+server=${GITHUB_SERVER_URL:-https://git.kof22.com}
+api="$server/api/v1"
+dry=${DRY_RUN:-0}
+: "${VERSION:?VERSION is required}"
+[[ $dry == 1 ]] || : "${TOKEN:?TOKEN is required}" "${RELEASE_ID:?RELEASE_ID is required}" "${GITHUB_REPOSITORY:?GITHUB_REPOSITORY is required}"
+branch="release/qqq-$VERSION"
+title="qqq $VERSION"
+work=$(mktemp -d)
+trap 'rm -rf "$work"' EXIT
+
+json() { node -e 'const o = {}; for (let i = 1; i < process.argv.length; i += 2) o[process.argv[i]] = process.argv[i + 1];
+  process.stdout.write(JSON.stringify(o))' -- "$@"; }
+field() { node -e 'try { const v = JSON.parse(require("fs").readFileSync(0, "utf8")); const r = [].concat(v)
+  .find((p) => !process.argv[2] || (p.head && p.head.ref === process.argv[2])); process.stdout.write(String(r ? r[process.argv[1]] ?? "" : "")) }
+  catch { }' -- "$@"; }
+
+attach() {   # attach <file>: the fallback, a hand-made pull request from the release asset
+  local src=$1 name
+  name=$(basename "$src")
+  if [[ $dry == 1 ]]; then echo "DRY RUN: would attach $name to the release"; return 0; fi
+  curl -fsS -o /dev/null -X POST -H "Authorization: token $TOKEN" -F "attachment=@$src" \
+    "$api/repos/$GITHUB_REPOSITORY/releases/$RELEASE_ID/assets?name=$name" ||
+    { echo "::warning::could not attach $name to the release"; return 0; }
+  echo "Attached $name to the release for a hand-made pull request"
+}
+
+propose() {   # propose <repo> <src> <dest>: branch + pull request; non-zero means fall back
+  local repo=$1 src=$2 dest=$3 dir="$work/${1##*/}" header=() base pr body
+  [[ $dry == 1 || -n ${PACKAGES_TOKEN:-} ]] || { echo "PACKAGES_TOKEN is empty"; return 1; }
+  [[ -n ${PACKAGES_TOKEN:-} ]] && header=(-c "http.extraHeader=Authorization: Basic $(printf 'ci:%s' "$PACKAGES_TOKEN" | base64 | tr -d '\n')")
+  git "${header[@]}" clone -q --depth 1 "$server/$repo.git" "$dir" || return 1
+  base=$(git -C "$dir" rev-parse --abbrev-ref HEAD)
+  git -C "$dir" checkout -q -b "$branch"
+  mkdir -p "$(dirname "$dir/$dest")"
+  cp "$src" "$dir/$dest"
+  git -C "$dir" add "$dest"
+  if git -C "$dir" diff --cached --quiet; then echo "$repo $base already has qqq $VERSION"; return 0; fi
+  git -C "$dir" -c user.name=CI -c user.email=ci@kof22.com commit -q -m "$title"
+  git -C "$dir" --no-pager show --stat --format='%s' HEAD
+  if [[ $dry == 1 ]]; then
+    echo "DRY RUN: would push $branch to $repo and open pull request \"$title\" into $base"; return 0
+  fi
+  # CI owns release/qqq-<version>: a re-run replaces it.
+  git -C "$dir" "${header[@]}" push -q --force origin "HEAD:refs/heads/$branch" || { echo "push to $repo refused"; return 1; }
+  body="Formula/manifest for qqq $VERSION, filled by the qqq-cli release workflow from the release's SHA256SUMS: $server/$GITHUB_REPOSITORY/releases/tag/v$VERSION. Check the sums, then merge."
+  pr=$(curl -fsS -X POST -H "Authorization: token $PACKAGES_TOKEN" -H 'Content-Type: application/json' \
+    -d "$(json head "$branch" base "$base" title "$title" body "$body")" "$api/repos/$repo/pulls" 2>/dev/null | field html_url) || pr=''
+  if [[ -z $pr ]]; then   # a re-run: the pull request may already be open
+    pr=$(curl -fsS -H "Authorization: token $PACKAGES_TOKEN" "$api/repos/$repo/pulls?state=open&limit=50" 2>/dev/null |
+      field html_url "$branch") || pr=''
+  fi
+  [[ -n $pr ]] || { echo "pushed $branch to $repo but could not open the pull request"; return 1; }
+  echo "Opened $pr"
+}
+
+node "$(dirname "$0")/update-packaging.mjs" "${SUMS_FILE:-/tmp/assets/SHA256SUMS}"
+for spec in "QRun-IO/homebrew-tap docs/packaging/homebrew-tap/Formula/qqq.rb Formula/qqq.rb" \
+            "QRun-IO/scoop-bucket docs/packaging/qqq.json bucket/qqq.json"; do
+  read -r repo src dest <<< "$spec"
+  # Final versions only: the tap and the bucket follow the stable channel, like scripts/install.sh.
+  if [[ $VERSION == *-* ]]; then
+    echo "$repo not updated: $VERSION is a prerelease"; attach "$src"; continue
+  fi
+  propose "$repo" "$src" "$dest" || { echo "$repo not updated: falling back to the release asset"; attach "$src"; }
+done

scripts/release.mjs

@@ -5,18 +5,20 @@
  */
 
 /**
- * Release check for the CLI packages. Runs everything a release needs locally and then prints the
- * commands that tag and publish it. It never tags, pushes or publishes.
+ * Release check for the CLI packages. Runs everything a release needs and then prints how to tag it.
+ * It never tags, pushes or publishes; the release workflow (.gitea/workflows/release.yaml) runs it as
+ * its gate on the tag and then publishes.
  *
- *   1. the working tree is clean (no staged, unstaged or untracked changes) and the tags are free
- *   2. npm ci, then the steps the qqq-orb `cli` profile runs: npm run generate with no drift in
+ *   1. the working tree is clean (no staged, unstaged or untracked changes) and the tag v<CLI version>
+ *      is free, or already points at this commit (the release workflow runs on the tag)
+ *   2. npm ci, then the CI steps: npm run generate with no drift in
  *      packages/ui-api-client/src/schema.ts or packages/core/src/api/operations.ts, build, test;
  *      plus npm run lint (versions, headers) and the TUI's Bun tests and type check (npm run test:tui,
  *      typecheck:tui; the TUI ships inside the binaries)
  *   3. npm pack --dry-run for each published package
  *   4. the single-file binaries with the terminal UI (scripts/build-binaries.mjs; --cli-only leaves it
  *      out) and dist/SHA256SUMS
- *   5. prints the tag, GitHub release and npm publish commands
+ *   5. prints how to tag the release
  *
  * A final (non-prerelease) version also has to pass the readiness gate (scripts/readiness.mjs: parity
  * 100% in both columns, every server finding filed, a CHANGELOG entry, documented commands exist);
@@ -40,11 +42,6 @@ const shell = process.platform === 'win32'
 /** Published packages, in publish order (each depends only on the ones before it). */
 const PUBLISHED = ['packages/ui-api-client', 'packages/core', 'packages/conformance', 'packages/cli']
 
-/** A literal text as a sed basic regular expression (its metacharacters and the `/` delimiter escaped). */
-function sedPattern(text) {
-  return text.replace(/[\\/.*[\]^$]/g, '\\$&')
-}
-
 function fail(message) {
   console.error(`\nrelease: ${message}`)
   process.exit(1)
@@ -62,10 +59,8 @@ function step(title, command, args) {
 
 const pkg = (dir) => JSON.parse(readFileSync(join(root, dir, 'package.json'), 'utf8'))
 const versions = Object.fromEntries(PUBLISHED.map((dir) => [dir, pkg(dir)]))
-const client = versions['packages/ui-api-client']
 const cli = versions['packages/cli']
-const orbTag = `v${client.version}`
-const cliTag = `cli-v${cli.version}`
+const tag = `v${cli.version}`
 
 if (argv.has('--check')) {
   if (!existsSync(join(root, 'packages/cli/dist/program.js'))) step('build', 'npm', ['run', 'build'])
@@ -79,8 +74,8 @@ for (const { name, version } of Object.values(versions)) console.log(`  ${name.p
 
 const status = git('status', '--porcelain')
 if (status && !argv.has('--allow-dirty')) fail(`the working tree is not clean:\n${status}\n(commit or stash first; --allow-dirty for a trial run)`)
-for (const tag of [orbTag, cliTag]) {
-  if (git('tag', '--list', tag)) fail(`tag ${tag} already exists; bump the versions first`)
+if (git('tag', '--list', tag) && !git('tag', '--points-at', 'HEAD').split(/\s+/).includes(tag)) {
+  fail(`tag ${tag} already exists on another commit; bump the versions first`)
 }
 const sha = git('rev-parse', '--short=12', 'HEAD')
 const branch = git('rev-parse', '--abbrev-ref', 'HEAD')
@@ -102,42 +97,21 @@ step('TUI type check', 'npm', ['run', 'typecheck:tui'])
 for (const dir of PUBLISHED) step(`pack ${versions[dir].name}`, 'npm', ['pack', '--dry-run', '--silent', '-w', versions[dir].name])
 if (!argv.has('--skip-binaries')) step('binaries', 'node', ['scripts/build-binaries.mjs', '--no-build', '--musl', ...(argv.has('--cli-only') ? ['--cli-only'] : [])])
 
-const registry = 'https://npm.pkg.github.com'
-// the orb publishes all four packages as rc when any of them is a prerelease, and as latest only when
-// all four are final; the GitHub release follows the CLI version
 const prerelease = Object.values(versions).some((p) => p.version.includes('-'))
-const distTag = prerelease ? 'rc' : 'latest'
-const releaseKind = prerelease ? '--prerelease' : '--latest'
 console.log(`
-All checks passed at ${branch}@${sha}. Nothing was tagged or published. To release:
+All checks passed at ${branch}@${sha}. Nothing was tagged or published. To release, with this commit
+merged to main, tag the merge commit and push the tag:
 
-  # 1. tag (signed) and push. ${orbTag} makes the qqq-orb cli profile publish the client, conformance
-  #    and CLI packages to GitHub Packages with dist-tag ${distTag} (the orb checks ${orbTag} = client version).${prerelease ? '' : '\n  #    All four versions are final, so the orb publishes them as latest (qqq-orb with PR #165).'}
-  git tag -s ${orbTag} -m "UI API client ${client.version}, qqq-cli ${cli.version}"
-  git tag -s ${cliTag} -m "qqq-cli ${cli.version}"
-  git push origin ${orbTag} ${cliTag}
+  git tag -s ${tag} -m "qqq ${cli.version}" && git push origin ${tag}
 
-  # 2. until the orb release with PR #165, the orb does not publish @qrun-io/qqq-core, and the CLI
-  #    depends on it: publish it by hand right after the orb job, or the CLI cannot be installed.
-  npm publish -w ${versions['packages/core'].name} --registry ${registry} --tag ${distTag}
-
-  #    without the orb (all four, in dependency order):
-${PUBLISHED.map((dir) => `  npm publish -w ${versions[dir].name} --registry ${registry} --tag ${distTag}`).join('\n')}
-
-  # 3. the binaries with their checksums (${prerelease ? "a prerelease" : "the latest release"})
-  gh release create ${cliTag} --repo QRun-IO/qqq-cli ${releaseKind} --title "qqq ${cli.version}" \\
-    --notes-file ${existsSync(join(root, `docs/release-notes/${cli.version}.md`)) ? `docs/release-notes/${cli.version}.md` : `<(sed -n '/^## \\[${sedPattern(cli.version)}\\]/,/^## \\[/p' CHANGELOG.md | sed '$d')`} \\
-    dist/qqq-* dist/SHA256SUMS
-
-  # 4. node scripts/update-packaging.mjs <SHA256SUMS of the GitHub release>, then copy
-  #    docs/packaging/homebrew-tap/Formula/qqq.rb to the tap and docs/packaging/qqq.json to the Scoop
-  #    bucket (docs/release-runbook.md steps 7 and 8). With the certificates, sign the macOS and Windows
-  #    binaries and recompute dist/SHA256SUMS before step 3 (runbook step 4).
+The release workflow (.gitea/workflows/release.yaml) then reruns this check, builds the binaries (Linux
+targets in the container, macOS arm64 and Windows x64 on native runners), publishes the four packages to
+the QRun-IO Gitea npm registry with dist-tag ${prerelease ? 'next' : 'latest'}, creates the Gitea ${prerelease ? 'prerelease' : 'release'} ${tag} with
+the binaries and SHA256SUMS${prerelease ? '' : ', and updates the Homebrew tap and the Scoop bucket'} (docs/release-runbook.md).
 `)
 if (!report.ready) {
   console.log('Readiness for a final release (not required for this prerelease):')
   printReport(report, { limit: 5 })
   console.log('')
 }
-const conformance = versions['packages/conformance']
-console.log(`Note: the orb also publishes ${conformance.name} ${conformance.version} on ${orbTag}; bump it first if that version is already in the registry.`)
+console.log('Note: every package version must be new in the registry; bump any that is already published.')

scripts/update-packaging.mjs

@@ -7,8 +7,9 @@
 /**
  * Fills the version and sha256 values of the packaging files (docs/packaging/homebrew-tap/Formula/qqq.rb for Homebrew,
  * docs/packaging/qqq.json for Scoop) from packages/cli/package.json and a release's SHA256SUMS.
- * Run it on the binaries that were uploaded to the GitHub release, not on a local rebuild: the
- * commit is stamped into each binary, so every build has different checksums.
+ * The release workflow (.gitea/workflows/release.yaml) runs it on the SHA256SUMS of the binaries uploaded to
+ * the Gitea release, never on a local rebuild: the commit is stamped into each binary, so every build has
+ * different checksums.
  *
  * Refuses to write anything (exit 1, both files untouched) when a sum is missing, is not 64 lowercase hex digits,
  * is all zeros, or when a placeholder in the files is left unfilled.
@@ -20,6 +21,8 @@ import { readFileSync, realpathSync, writeFileSync } from 'node:fs'
 import { join, resolve } from 'node:path'
 
 const HEX64 = /^[0-9a-f]{64}$/
+/** Release downloads on Gitea: <RELEASES>/v<version>/<file> (the release tag is v<CLI version>). */
+export const RELEASES = 'https://git.kof22.com/QRun-IO/qqq-cli/releases/download'
 const root = resolve(import.meta.dirname, '..')
 const FORMULA_SUMS = /(url "[^"]*\/(qqq-[a-z0-9-]+)"\n\s*sha256 ")([0-9a-f]{64})"/g
 
@@ -58,7 +61,7 @@ export function updatePackaging({ version, sums, formula, manifest }) {
 
   const parsed = JSON.parse(manifest)
   parsed.version = version
-  parsed.architecture['64bit'].url = `https://github.com/QRun-IO/qqq-cli/releases/download/cli-v${version}/qqq-windows-x64.exe`
+  parsed.architecture['64bit'].url = `${RELEASES}/v${version}/qqq-windows-x64.exe`
   parsed.architecture['64bit'].hash = sumFor(sums, 'qqq-windows-x64.exe')
   return { formula: newFormula, manifest: JSON.stringify(parsed, null, 4) + '\n', formulaCount }
 }

scripts/update-packaging.test.mjs

@@ -20,7 +20,7 @@ const sumsText = (omit = []) =>
   [...FILES, 'qqq-linux-x64-musl', 'qqq-windows-x64.exe'].filter((f) => !omit.includes(f)).map((f, i) => `${'abcdef0123456'[i].repeat(64)}  ${f}`).join('\n') + '\n'
 const formula = `class Qqq < Formula
   version "0.0.0"
-${FILES.map((f) => `  url "https://github.com/QRun-IO/qqq-cli/releases/download/cli-v#{version}/${f}"\n  sha256 "${ZERO}"`).join('\n')}
+${FILES.map((f) => `  url "https://git.kof22.com/QRun-IO/qqq-cli/releases/download/v#{version}/${f}"\n  sha256 "${ZERO}"`).join('\n')}
 end
 `
 const manifest = JSON.stringify({ version: '0.0.0', architecture: { '64bit': { url: 'x', hash: ZERO } } }, null, 4) + '\n'
@@ -32,6 +32,7 @@ test('fills every sum from shasum output and never leaves zeros', () => {
   assert.match(out.formula, /version "1\.0\.0"/)
   assert.ok(out.formula.includes(`qqq-darwin-arm64"\n  sha256 "${h('a')}"`))
   assert.equal(JSON.parse(out.manifest).architecture['64bit'].hash, h('f'))
+  assert.equal(JSON.parse(out.manifest).architecture['64bit'].url, 'https://git.kof22.com/QRun-IO/qqq-cli/releases/download/v1.0.0/qqq-windows-x64.exe')
 })
 
 test('a missing target throws', () => {