feat(ui): redesign Cockpit as a calm, consistent desktop app

.config/dotnet-tools.json

@@ -2,12 +2,19 @@
   "version": 1,
   "isRoot": true,
   "tools": {
-    "markdownutil": {
-      "version": "4.8.0",
+    "mdu": {
+      "version": "6.0.1",
       "commands": [
         "mdu"
       ],
       "rollForward": false
+    },
+    "dotnet-ef": {
+      "version": "10.0.14",
+      "commands": [
+        "dotnet-ef"
+      ],
+      "rollForward": false
     }
   }
 }

.github/workflows/ci.yml

@@ -8,7 +8,7 @@ on:
     inputs:
       version:
         type: string
-        default: '0.1.0'
+        default: '0.2.0'
 
 permissions:
   contents: read
@@ -62,7 +62,7 @@ jobs:
       - name: Publish Native AOT executable
         shell: bash
         env:
-          PACKAGE_VERSION: ${{ inputs.version || '0.1.0' }}
+          PACKAGE_VERSION: ${{ inputs.version || '0.2.0' }}
         run: dotnet publish src/DotnetCockpit/DotnetCockpit.csproj --configuration Release --runtime ${{ matrix.rid }} --self-contained true -p:PublishAot=true -warnaserror:IL2026,IL2104,IL3050,IL3053 -p:Version="$PACKAGE_VERSION" --output artifacts/native
       - name: Smoke test published executable
         run: node scripts/smoke.mjs artifacts/native/${{ matrix.exe }}
@@ -73,6 +73,13 @@ jobs:
       - name: Test UI against native backend
         if: runner.os == 'Linux'
         run: npm --prefix ui run test:browser
+      - name: Install browser for screenshot comparison
+        if: matrix.os == 'macos-latest'
+        working-directory: ui
+        run: npx playwright install chromium
+      - name: Compare screenshots
+        if: matrix.os == 'macos-latest'
+        run: npm --prefix ui run test:visual
       - name: Archive native executable
         shell: pwsh
         env:
@@ -116,11 +123,11 @@ jobs:
           npm --prefix ui run build
       - name: Pack .NET tool
         env:
-          PACKAGE_VERSION: ${{ inputs.version || '0.1.0' }}
+          PACKAGE_VERSION: ${{ inputs.version || '0.2.0' }}
         run: dotnet pack src/DotnetCockpit/DotnetCockpit.csproj --configuration Release -p:Version="$PACKAGE_VERSION" --output artifacts/packages
       - name: Install and smoke test tool package
         env:
-          PACKAGE_VERSION: ${{ inputs.version || '0.1.0' }}
+          PACKAGE_VERSION: ${{ inputs.version || '0.2.0' }}
         run: |
           dotnet tool install dotnet-cockpit --tool-path "$PWD/artifacts/tool" --add-source "$PWD/artifacts/packages" --version "$PACKAGE_VERSION"
           PATH="$PWD/artifacts/tool:$PATH" dotnet cockpit --help

AGENTS.md

@@ -1,6 +1,6 @@
 # Repository guide
 
-.NET Cockpit is a local browser application: a Native AOT ASP.NET Core Minimal API host renders HTML in C#. Fluent UI Web Components enhance the server-rendered page; React is not used.
+.NET Cockpit is a local browser application: a Native AOT ASP.NET Core Minimal API host renders HTML in C#. A small module script enhances the server-rendered page; no UI framework is used.
 
 - Keep native startup independent of an installed .NET runtime or SDK. The optional managed .NET tool is an additional distribution.
 - Build browser assets before compiling .NET: `npm --prefix ui ci` and `npm --prefix ui run build`. Node is only a build/test dependency.
@@ -11,8 +11,12 @@
 - Inventory reflects the selected dotnet host on PATH. Distinguish a missing host from a failed query.
 - `/tools` lists user-global tools and local manifest declarations for Cockpit's startup working directory. Do not scan arbitrary projects or imply that a listed local package has been restored. Keep the two scopes independent when a query fails.
 - Tool mutations run only through explicit local forms: search results install globally until a local manifest exists, initialized workspaces offer global/local targets, installed rows offer uninstall, and the current workspace can remove its own local manifest. Keep POST actions scoped to the startup working directory and preserve server-rendered behavior without JavaScript; never remove an inherited parent manifest.
+- Every mutation asks first through `ConfirmActions`: the shared dialog with JavaScript, the `/confirm` page without it.
+- Support dates, end-of-life state and the timeline come only from the release catalog. When it is unavailable, say the status is unknown instead of guessing.
+- Preferences live in `SettingsStore`, not browser storage, because the free port changes the origin on every launch.
+- Styles use the tokens in `ui/src/styles/tokens.css`: six type sizes, three radii, semantic colors. Add no literal colors, other sizes or `!important`. Palettes in `palettes.css` override color roles only and must pass the contrast test in both themes.
 - `/setup` may detect, install, update, and remove only the official global `dotnet-core-uninstall` installation for Windows and macOS. Global installs use the platform paths and must surface administrator approval. Release discovery must follow every page of the official GitHub Releases API, filter stable releases to those with a compatible asset, and treat an incomplete/failed response as unavailable rather than presenting a partial list. Do not download arbitrary URLs or claim Linux support.
 - The CLI's bracketed path is a base directory. Display `InstallationPath` (base path plus version) for an individual SDK or runtime; retain `Path` in the JSON API for compatibility.
-- Run `dotnet test DotnetCockpit.sln`, publish the native binary, run `node scripts/smoke.mjs <binary>`, and run the browser tests for UI changes.
+- Run `dotnet test DotnetCockpit.sln`, publish the native binary, run `node scripts/smoke.mjs <binary>`, and run the browser tests for UI changes. For visual changes also run `npm --prefix ui run test:visual`; after an intended change, update the baselines with `npm --prefix ui run test:visual:update` and review them.
 - Use `gh` for GitHub operations. Commit messages follow Conventional Commits and contain no AI attribution.
 - Keep changes focused and avoid speculative abstractions or functionality.

docs/Features.md

@@ -20,10 +20,12 @@ The **.NET Tools** page keeps the two scopes separate:
 
 A local declaration is not proof that its package has been restored. Cockpit never scans unrelated projects. Tool changes are deliberate POST actions: search results install globally until the current workspace has a manifest; initialized workspaces can choose global or local installation; installed rows can uninstall; and Cockpit only removes a manifest owned by its own startup directory.
 
-## Setup
+## Settings
 
 On macOS and Windows, Cockpit can detect, install, update, and remove the official global `dotnet-core-uninstall` installation. These operations request administrator approval where the platform requires it. Linux is not supported by the official tool.
 
-On macOS, **Setup** also lists official `.pkg` installers for the host architecture. The catalog comes from Microsoft's release metadata and includes SDKs and standalone .NET Runtimes, release channels, support status, release dates, SHA-512 checksums, and release CVEs where Microsoft provides them. Downloading a package is separate from installing it: open the downloaded package in macOS Installer to complete installation.
+On macOS, **Versions → Install .NET** lists official `.pkg` installers for the host architecture. The catalog comes from Microsoft's release metadata and includes SDKs and standalone .NET Runtimes, release channels, support status, release dates, SHA-512 checksums, and release CVEs where Microsoft provides them. Downloading a package is separate from installing it: open the downloaded package in macOS Installer to complete installation.
 
 The SDK installer includes the matching .NET Runtime and ASP.NET Core Runtime. Use the standalone Runtime package only when you do not need the SDK.
+
+The colors can be switched under **Settings** between the Cockpit, macOS, GitHub and Codex styles, each in light and dark. On macOS, the macOS style follows the accent color from System Settings.

docs/Getting-Started.md

@@ -44,6 +44,6 @@ The .NET tool is optional. Use the native download on machines without an SDK.
 
 1. Open **Installations** to inspect the SDKs and runtimes reported by the selected `dotnet` host.
 2. Open **.NET Tools** to see global tools and local manifest declarations for the directory where Cockpit was launched.
-3. Open **Setup** to manage the supported uninstall tool or download an official macOS SDK or runtime package.
+3. Open **Settings** to manage the supported uninstall tool, or **Versions → Install .NET** to download an official macOS SDK or runtime package.
 
 Restart Cockpit after changing its inherited `PATH` or installing a new `dotnet` host.

docs/Privacy-and-Safety.md

@@ -13,10 +13,14 @@ Cockpit reads the .NET host selected by its own `PATH`, the output of the standa
 
 ## Network requests
 
-The application starts without an internet connection. The Setup page requests release metadata only when it needs current installer or uninstall-tool release information. Installer links target official Microsoft-hosted files; uninstall-tool release discovery uses the official GitHub releases API.
+The application starts without an internet connection. The Settings page requests release metadata only when it needs current installer or uninstall-tool release information. Installer links target official Microsoft-hosted files; uninstall-tool release discovery uses the official GitHub releases API.
 
 ## Explicit changes
 
 Cockpit never changes .NET installations or tool manifests during inventory. Mutations require a local form submission and are scoped to the startup directory. An inherited parent tool manifest is displayed but cannot be removed from Cockpit.
 
 Before removing an installation, confirm that it is not needed by another application. Cockpit surfaces the command result, but the underlying platform installer and .NET tooling remain authoritative.
+
+## Local files
+
+Cockpit stores your appearance and pre-flight choices in `settings.json` in the `dotnet-cockpit` folder of your user configuration directory. Delete the file to reset them.

scripts/smoke.mjs

@@ -146,7 +146,7 @@ await runWithoutRepositoryFiles(process.env, async (data, html, get, url) => {
   const setupPage = await get('setup');
   assert.equal(setupPage.status, 200);
   const setupHtml = await setupPage.text();
-  assert.ok(setupHtml.includes('<h1>Setup</h1>'));
+  assert.ok(setupHtml.includes('<h1>Settings</h1>'));
   assert.ok(setupHtml.includes('.NET Uninstall Tool'));
   assert.ok(setupHtml.includes('learn.microsoft.com/en-us/dotnet/core/additional-tools/uninstall-tool-overview'));
   const invalidAction = await fetch(new URL('tools/install', url), {

src/DotnetCockpit/AppJsonContext.cs

@@ -8,6 +8,10 @@ namespace DotnetCockpit;
 [JsonSerializable(typeof(InstallationSnapshot))]
 [JsonSerializable(typeof(HealthStatus))]
 [JsonSerializable(typeof(ToolsSnapshot))]
+[JsonSerializable(typeof(ToolSearch))]
+[JsonSerializable(typeof(AppSettings))]
+[JsonSerializable(typeof(SystemAccentStatus))]
 internal partial class AppJsonContext : JsonSerializerContext;
 
 internal sealed record HealthStatus(string Status);
+internal sealed record SystemAccentStatus(string? Accent);