Dashboard v2 — Settings /settings (8 sections + guardrails)

[thinmintdev]

Parent

#148

What to build

Left-rail anchors to 9 sections.

• Auth — token row + Show/Rotate (Rotate = ConfirmDialog "scripts/agents need re-auth") + Allowed origins editor modal
• Secrets — HF_TOKEN row + Update/Remove + + Add secret modal (name + value + description)
• Updates — hal0/lemonade/flm version rows w/ status dots + channel selectors + auto-update-on-boot radio + check cadence radio + [Check for updates] + top-of-view update-available banner + update-now confirm w/ outage warning
• Lemonade admin (footgun zone) — max_loaded_models, ctx_size, llamacpp.args READ-ONLY w/ Edit toggle revealing warning: "without --parallel 1 --threads N concurrent llama-server children deadlock GPU"; llamacpp.backend, flm.args, kokoro.cpu_bin, whispercpp.backend, sdcpp (backend + steps + cfg + w + h), log_level, global_timeout. Save → "Some changes require lemond restart. Save and restart?" confirm w/ 8–12s outage. [Restart lemond] always available. ⟳ marks deferred-effect fields.
• OmniRouter — 8 tools (5 upstream + 3 hal0: embed_text, rerank_documents, route_to_chat). Each row: name + origin chip (upstream / hal0) + endpoint + ✓active/✗inactive + target slot + remediation CTA ("Install Flux-2-Klein-9B to enable"). Upstream-sync footer line + [Check for drift].
• Agent policy — per-capability approval modes
• Memory (Cognee) — namespace + records + disk + tools + [Reset namespace] (type-the-name destructive confirm) + [Export]
• Appearance — theme + density (dev Tweaks panel migration target)
• About — version + license Apache-2.0 + GitHub/Discord/Docs + bundled-licenses link

Acceptance criteria

• llamacpp.args readonly-by-default; edit toggle reveals footgun warning
• Save-and-restart confirm + outage copy fires
• Rotate token confirm fires; Show/Hide toggle works
• AddSecretModal saves + lists in Secrets table
• Reset Memory namespace requires type-the-name
• OmniRouter 8 tools render w/ remediation CTAs + origin chips
• Playwright spec covers footgun guardrails + add-secret flow

Blocked by

• Dashboard v2 — mock harness for absent endpoints #166
• Dashboard v2 — chrome (TopBar/Sidebar/Footer/BottomTabs) #168