Web UI, Desktop and Terminal Options

[Server]
Enabled     = true
Host        = "localhost"   # "0.0.0.0" or a network address to accept other devices
Port        = 9999
RequireAuth = false         # protect API endpoints with a bearer token

[Server.BasicAuth]
Enabled = true

[[Server.BasicAuth.Users]]
Username = "alice"
Password = "alice-password"

[[Server.BasicAuth.Users]]
Username = "bob"
Password = "bob-password"

{
  "server": {
    "host": "0.0.0.0",
    "basicAuth": {
      "enabled": true,
      "users": [
        { "username": "admin", "password": "your-secure-password" }
      ]
    }
  }
}

# Add
curl -X POST http://localhost:3939/api/v1/config/api-server/basic-auth/users \
  -H "Content-Type: application/json" \
  -d '{"username": "newuser", "password": "securepass"}'

# Delete
curl -X DELETE http://localhost:3939/api/v1/config/api-server/basic-auth/users/username

# Reveal a password
curl -X POST http://localhost:3939/api/v1/config/api-server/basic-auth/users/username/reveal

[Projects]
Enabled           = true
AutoRestore       = false
MaxProjects       = 20
MaxWebInstances   = 6
WebStartupTimeout = "20s"

[Design]
OutputDir   = 'designer'   # project-relative folder that holds the designs
SystemDir   = '_system'    # sub-folder that holds the design system
DefaultKind = 'web'        # 'web' or 'deck'

[Design.Critique]
Enabled   = true
MaxRounds = 3        # designer/critic rounds per request
Threshold = 8.0      # score to beat, out of 10
Policy    = 'standard'

[MCPServer.Design]
Enabled = false      # publish the design_* tools through Pando's MCP server

pando design create "Landing page"             # create an empty design
pando design create "Q3 review" --skill deck-basic
pando design list                              # every design in the project
pando design open                              # open the most recent one
pando design open quarterly-review --slide 3   # jump to a slide
pando design versions landing                  # version history (--json for scripts)
pando design critique landing                  # run the quality check
pando design export landing --format html --out /tmp/landing.html
pando design export deck --format pdf --landscape
pando design export landing --format png --full-page

pando design skills                            # list templates and references
pando design skills show deck-basic

pando design system init                       # write the default system if none exists
pando design system show                       # print the current tokens
pando design system examples                   # list the bundled style guides
pando design system extract --from code        # from your stylesheets and components
pando design system extract https://example.com --from url
pando design system extract ./brand.png --from image     # colours only
pando design system extract ./brand-guide.md --from text
pando design system apply landing              # link the system into a design

[TUI]
Theme               = 'pando'   # pando, light, dracula, gruvbox, opencode, onedark, tron, flexoki, tokyonight, catppuccin, monokai; add -nobg for a transparent background
ShowHiddenFiles     = false
NerdFonts           = true      # false draws plain characters instead of icon glyphs
ChatSidebar         = 'auto'    # 'auto' or 'off'
ChatSidebarMinWidth = 120       # terminal width, in columns, at which the sidebar appears

[Permissions]
AutoApproveTools = false

[InternalTools]
AskUserQuestionDisabled = true   # the agent can no longer ask you structured questions

curl -X POST http://localhost:8766/api/v1/sessions/:id/steer \
  -H "Content-Type: text/plain" \
  -d "Focus on the authentication module instead"

make build-desktop